Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/639dc750-79ef-34f4-be68-2fd6248ca973.roa
File:                     639dc750-79ef-34f4-be68-2fd6248ca973.roa (raw, json)
Hash identifier:          GrZZIyY4R8V/AiohX1d5Pv3sixpwb4J1RAq7+/1Idyc=
Subject key identifier:   C9:F9:ED:85:41:0D:A7:35:63:EF:A0:19:63:25:2D:73:67:B8:88:E0
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EB7AA5897AB72C2743D220200
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/639dc750-79ef-34f4-be68-2fd6248ca973.roa
Signing time:             Mon 03 Aug 2026 19:44:40 +0000
ROA not before:           Mon 03 Aug 2026 19:44:40 +0000
ROA not after:            Sun 01 Nov 2026 20:44:40 +0000
asID:                     6079
IP address blocks:        142.111.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b7:aa:58:97:ab:72:c2:74:3d:22:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug  3 19:44:40 2026 GMT
            Not After : Nov  1 20:44:40 2026 GMT
        Subject: CN=863af4a0-2b4a-42eb-8a4e-f8aa923cb2eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f2:e7:14:e7:70:22:22:b1:38:a5:ec:ba:a5:
                    ea:1b:4b:a4:2a:8f:e7:21:18:fc:f9:4c:79:0c:16:
                    f5:f6:3c:45:01:8f:e4:85:82:32:ab:41:67:5f:5d:
                    30:08:25:ae:2c:9c:15:86:ed:6f:47:b3:e2:b8:9f:
                    6d:9f:19:4d:08:1c:f4:3a:1d:a2:53:6c:9f:51:e4:
                    63:e4:6a:45:66:57:c0:bf:82:05:b2:c2:3b:ce:88:
                    f5:49:8b:96:6e:dd:8f:de:df:af:2b:d0:c6:0b:c9:
                    f1:b4:5b:ba:37:1c:42:83:53:73:ed:5e:cc:77:b7:
                    80:af:32:29:4d:56:57:e5:e4:64:ee:f9:05:1d:cd:
                    9f:9d:4d:f1:b3:9b:e5:0a:59:12:8e:85:2c:16:b7:
                    e1:da:42:c5:6e:a4:4c:bc:a3:1f:4c:5c:d2:4a:0e:
                    d6:d5:d7:72:ac:75:d1:b4:16:2b:35:88:5c:dd:93:
                    2b:14:bb:c4:bf:58:7f:65:2c:37:0f:8f:02:e4:cd:
                    ca:09:39:f2:5d:53:bc:76:12:96:e1:cb:18:61:d9:
                    13:59:ab:e6:0b:4a:a0:5a:ec:61:48:e4:7c:71:c4:
                    da:f3:f8:ea:09:4f:24:80:03:fb:94:1c:77:86:e0:
                    8e:01:db:c3:ad:f0:08:75:fa:c6:97:1a:d5:15:04:
                    5c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F9:ED:85:41:0D:A7:35:63:EF:A0:19:63:25:2D:73:67:B8:88:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/639dc750-79ef-34f4-be68-2fd6248ca973.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:37:fe:1c:4a:7f:5b:f0:8a:c1:c2:57:1c:14:16:58:ee:64:
         01:1c:21:fa:65:a1:92:c0:76:04:22:31:e7:58:91:99:27:36:
         25:3f:d0:3f:61:d0:1f:e2:e2:b1:03:f2:f6:74:c6:57:28:e1:
         31:bb:34:2d:60:f2:56:41:c7:50:d1:c6:4b:1e:61:1f:21:03:
         1e:cd:c5:71:42:f1:97:6f:7f:fd:af:0b:1a:f4:a8:49:36:b0:
         64:75:98:be:cb:14:f9:4f:97:b8:27:69:13:55:a2:8d:7b:f6:
         ea:08:57:dd:9d:a0:8f:78:27:bc:3d:38:13:2b:66:54:4b:87:
         5c:b3:ed:50:7d:6e:de:57:44:09:b4:20:2c:35:1c:4b:9d:44:
         b6:c9:fe:d0:e9:04:65:4f:9b:13:6b:46:f9:fc:c6:a7:9a:8f:
         0a:ee:93:1b:cf:bc:7e:77:ba:48:67:a2:c6:43:6c:41:1b:c5:
         0f:b3:83:65:1c:d5:7b:03:a8:23:60:23:12:56:c7:2e:94:94:
         19:01:6d:55:69:4f:84:59:98:e1:8f:25:f2:cd:0a:2d:46:96:
         f2:37:9f:b1:a7:04:1a:7d:58:97:e5:b1:4a:d5:6f:1b:a6:7d:
         a7:9e:3f:f5:16:08:80:2a:ca:53:d9:13:ed:45:bd:7a:68:b9:
         c9:ca:e6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 13:15:21 2026 by rpki-client