Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4e416de7-cdca-3361-aeb6-f8224c74146c.roa
File:                     4e416de7-cdca-3361-aeb6-f8224c74146c.roa (raw, json)
Hash identifier:          4uVmLeeY2DaIeRQj5zcCDhGVn5KvcCHp/fKdLpCt2mM=
Subject key identifier:   27:AA:46:30:EF:E8:7E:96:BA:E2:B4:54:86:6E:D2:9F:E8:1B:49:60
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EF4E7FB67F19F55CA4D7520C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4e416de7-cdca-3361-aeb6-f8224c74146c.roa
Signing time:             Tue 25 Aug 2026 18:13:10 +0000
ROA not before:           Tue 25 Aug 2026 18:13:10 +0000
ROA not after:            Mon 23 Nov 2026 19:13:10 +0000
asID:                     3257
IP address blocks:        143.109.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:e7:fb:67:f1:9f:55:ca:4d:75:20:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 25 18:13:10 2026 GMT
            Not After : Nov 23 19:13:10 2026 GMT
        Subject: CN=43fc8cb2-d2ff-4638-a5c9-f2fc6246a677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a9:30:5e:b8:41:e9:4e:8e:31:7b:3a:e1:94:
                    77:5f:59:42:af:bb:cd:16:c3:b0:e6:91:f1:f0:ee:
                    4a:6c:94:a6:9a:76:e1:41:06:c9:13:5b:bf:31:4f:
                    e2:93:a8:4b:3e:50:a5:ae:04:4b:a0:5d:29:0d:53:
                    1b:42:c9:12:a0:ba:be:5a:5f:fc:f2:21:92:e7:1e:
                    1d:b0:63:5d:ac:2a:a7:4a:54:cb:df:0a:ec:dd:5c:
                    03:c3:06:a1:28:ca:89:e1:8a:54:dd:83:35:db:7a:
                    76:f3:de:76:09:87:2a:2c:32:f9:4e:ec:d0:b4:72:
                    62:4f:2d:31:49:e3:90:e5:f9:dc:dc:f2:05:9d:b9:
                    53:06:19:ce:59:6b:9e:7b:43:27:03:d6:84:3b:d7:
                    31:89:3c:53:fa:be:98:bf:da:b1:e4:a6:42:c7:d6:
                    c8:3f:6c:cb:28:8a:12:c9:5f:ee:1a:06:ef:b8:86:
                    d7:d3:80:1d:c0:09:8f:cb:49:bf:af:93:af:07:1c:
                    45:44:97:50:f8:54:09:14:bb:98:4b:52:61:91:24:
                    f0:ca:6c:62:30:c1:0b:2e:24:7c:30:b5:c0:65:a5:
                    e3:3b:4f:9b:f2:f6:cb:8e:d3:37:20:c5:c8:71:8d:
                    ae:dd:3b:b3:46:f1:6c:10:50:0e:d9:5d:65:72:b8:
                    9d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AA:46:30:EF:E8:7E:96:BA:E2:B4:54:86:6E:D2:9F:E8:1B:49:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4e416de7-cdca-3361-aeb6-f8224c74146c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.109.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:10:c7:27:e0:cc:9f:67:08:c8:91:b7:8c:8d:24:60:ae:83:
         d7:44:4f:93:32:93:5a:2e:15:1a:0b:96:da:4e:56:12:5d:f3:
         a6:16:00:27:59:10:72:0a:ca:e0:c9:5b:63:9f:54:31:41:21:
         e2:32:d3:85:44:76:48:53:cf:f5:38:72:4b:d8:de:4a:80:ec:
         f8:fa:3b:76:8f:eb:7a:b4:8d:05:ef:2c:86:ae:3c:a7:c8:e4:
         e2:5b:3b:e7:1a:53:92:74:fa:d1:4c:d9:2a:09:4d:f5:b7:04:
         59:41:44:95:63:be:ea:6c:d9:2c:ad:c5:ca:bf:44:08:03:01:
         e2:59:a3:4a:d3:41:2a:c4:31:62:f0:c5:3a:00:f1:d3:27:f1:
         aa:88:2c:51:8b:fc:70:19:c9:f3:89:fa:b9:2c:51:d1:18:43:
         e2:a0:1c:04:f5:0e:f3:af:d2:65:c1:22:f9:08:9d:6e:6a:c5:
         01:98:cd:07:65:53:10:1c:b5:6d:af:3d:bb:10:2a:6a:b1:a0:
         fb:58:50:45:70:6c:ef:12:35:c5:a8:e0:1b:8f:c4:5a:e4:aa:
         9c:e5:39:8c:e1:84:66:98:9c:43:c1:07:0f:03:d9:23:56:ec:
         5f:13:14:ee:3c:d5:1f:ef:71:55:53:ba:75:76:3d:2b:ff:b3:
         1b:0c:92:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 15:54:23 2026 by rpki-client