Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5faad4d3-f81b-3232-bc9a-1129bb29ea6b.roa
File:                     5faad4d3-f81b-3232-bc9a-1129bb29ea6b.roa (raw, json)
Hash identifier:          n9HCovnF1CHe1jzGmd7EhP6wlEMQ5QgUX0XlY8GiyOE=
Subject key identifier:   D7:58:0E:A5:C6:56:4F:3A:70:21:0E:79:A9:F4:8B:50:62:12:21:87
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EB6E1B1005E5509271651E000
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5faad4d3-f81b-3232-bc9a-1129bb29ea6b.roa
Signing time:             Mon 03 Aug 2026 13:00:12 +0000
ROA not before:           Mon 03 Aug 2026 13:00:12 +0000
ROA not after:            Sun 01 Nov 2026 14:00:12 +0000
asID:                     7018
IP address blocks:        142.111.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b6:e1:b1:00:5e:55:09:27:16:51:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug  3 13:00:12 2026 GMT
            Not After : Nov  1 14:00:12 2026 GMT
        Subject: CN=db2cb65d-2ab6-422b-a237-ed00734ef95e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e2:dd:14:64:10:8e:96:a2:8a:7f:19:1f:2e:
                    3b:e4:61:5e:b7:e0:b7:1d:78:e2:50:63:91:80:4f:
                    7e:29:62:1f:7d:84:ea:ad:9b:b3:cb:1b:95:74:c3:
                    08:32:df:7e:e5:56:de:6a:f2:87:94:5c:3a:e0:7f:
                    28:76:af:da:0d:a6:29:b8:50:91:b6:75:84:57:e9:
                    d0:96:e4:77:73:30:d9:83:30:a9:41:63:81:a7:a3:
                    cb:e5:68:e6:55:21:97:68:1b:0a:96:d4:99:72:32:
                    df:1e:a9:97:a6:44:25:c5:27:de:c8:77:a0:f4:43:
                    91:fd:2c:f6:97:33:ea:d7:1d:df:f7:40:3a:b5:ea:
                    c3:e6:51:2b:54:b0:89:03:63:b5:df:82:a4:cb:f7:
                    b2:eb:94:ab:62:56:d5:8f:ae:a9:16:e8:a4:78:81:
                    cb:7f:dc:89:35:6b:d0:d6:e5:26:26:96:93:be:31:
                    7c:7e:e2:e4:70:7b:ce:fb:3c:66:c0:85:1c:c6:67:
                    3e:b2:fb:08:95:d7:a1:ab:1d:d5:1d:dd:9b:03:f4:
                    0d:5d:9c:d6:a9:2f:07:a4:c1:3a:df:a7:d9:75:df:
                    98:d3:bd:63:f7:e7:67:27:5b:45:07:c2:28:de:5e:
                    11:94:20:da:d0:d5:4b:29:6b:83:e2:75:75:1f:76:
                    c5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:58:0E:A5:C6:56:4F:3A:70:21:0E:79:A9:F4:8B:50:62:12:21:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5faad4d3-f81b-3232-bc9a-1129bb29ea6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:1c:90:21:e5:0d:60:6a:4a:c1:99:c4:0c:bf:1e:9d:fe:3b:
         17:ca:01:85:76:bf:45:a5:f3:02:b6:cc:aa:75:cf:d0:39:8b:
         e3:6a:a9:6a:c9:1f:cc:4b:f1:ed:5f:d8:c5:de:af:96:02:f9:
         43:9d:bf:7e:46:3c:a9:d0:d5:61:24:ac:15:07:2d:e5:32:ad:
         54:61:34:da:23:d3:fb:70:55:85:0b:64:61:fc:88:88:c0:7f:
         17:9b:bc:1c:23:51:4c:7a:f0:7a:c4:70:19:42:03:58:ec:a3:
         ee:85:b2:3d:c2:21:d7:11:a1:07:04:2f:f0:8d:5e:ec:66:56:
         ed:6b:e6:ef:87:f2:11:ad:01:79:07:e4:c2:eb:4c:6a:0e:78:
         14:09:e6:27:e6:90:08:c3:ad:27:c6:04:8c:83:b6:a6:45:ca:
         00:dd:09:7e:90:ab:c4:be:54:76:df:57:c0:dc:b0:f5:20:b1:
         e9:09:4c:c9:e7:d6:98:55:ae:6f:06:f7:6b:8d:40:12:61:c8:
         13:71:c5:92:bf:9d:6e:b9:b9:1b:79:b3:b6:0c:3a:48:5f:5b:
         74:eb:dc:b5:07:32:37:60:f4:5a:f9:45:97:be:b1:bf:0c:bf:
         b1:80:ef:66:fb:19:5a:0c:c3:bd:f4:d9:ae:9b:59:db:0e:f8:
         6e:7a:31:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:01:58 2026 by rpki-client