Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/68370c83-0f50-3bc1-ab41-49660653e427.roa
File:                     68370c83-0f50-3bc1-ab41-49660653e427.roa (raw, json)
Hash identifier:          ni8Z3ouBG5NNGVPSeVKRt/vLD51sQtzSawRS+Q6K2TY=
Subject key identifier:   25:A4:C1:88:3B:F6:CC:7D:83:B8:B1:3B:5F:DD:AB:68:A1:57:23:57
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EA786DD4337C39568BBD14400
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/68370c83-0f50-3bc1-ab41-49660653e427.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     22773
IP address blocks:        142.111.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:dd:43:37:c3:95:68:bb:d1:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8937d42f-8bff-4f19-bce1-55ab3748a2db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fd:05:ea:d6:6d:64:15:df:8f:d0:fa:be:43:
                    8b:43:a2:58:da:4d:4c:88:a3:a1:76:e4:0e:66:6b:
                    af:f6:8f:f0:f9:b3:5a:06:1f:3f:61:53:9a:7b:7d:
                    09:cd:3f:fc:79:39:ef:a0:ad:61:cf:ec:d0:50:90:
                    78:2c:84:23:a2:90:72:01:2e:09:75:06:18:d1:41:
                    ce:25:85:d5:88:59:cd:f2:f6:7f:b6:18:af:6e:f6:
                    93:a3:67:ca:6a:8c:a2:04:0e:ae:d5:a6:ac:4b:77:
                    96:5f:db:76:f4:48:1d:ae:44:e6:3a:86:2f:14:a0:
                    85:b5:09:6e:7b:c1:cc:00:68:88:a9:9d:a4:d4:2a:
                    0a:47:a6:c3:9f:27:a5:01:81:17:af:70:04:0b:5a:
                    63:58:54:44:1d:49:b0:fa:9b:67:50:bb:a3:32:c0:
                    cc:bd:eb:a2:18:18:fe:bf:30:dc:e1:30:26:6a:55:
                    21:b3:c1:a6:49:e1:9d:d2:82:fa:30:28:9c:f9:b9:
                    c1:dc:cd:75:fd:eb:2d:57:5e:12:a5:77:e3:8e:bc:
                    cf:25:67:6d:e2:78:f5:5e:1d:ef:1c:51:da:98:eb:
                    fa:96:03:49:56:59:8d:58:d1:eb:15:4e:7e:17:05:
                    84:5c:10:20:72:99:81:4f:54:26:86:48:1e:09:54:
                    10:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A4:C1:88:3B:F6:CC:7D:83:B8:B1:3B:5F:DD:AB:68:A1:57:23:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/68370c83-0f50-3bc1-ab41-49660653e427.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:79:5d:86:72:4c:86:4d:33:d3:76:d4:ec:3b:b7:8c:86:c1:
         77:ac:40:24:17:43:69:d0:17:2a:ad:0a:1e:5e:52:be:5b:ce:
         14:23:aa:1c:07:7f:6f:02:73:8a:58:3a:cb:ad:b4:1c:cb:f9:
         47:ae:31:93:b0:3c:27:5d:ee:3d:ac:7c:32:80:55:19:05:f0:
         ad:c6:b1:5c:93:72:66:84:25:be:db:c3:b1:c2:f3:ff:56:5a:
         39:00:c4:94:74:bb:de:58:17:ec:77:b0:8a:70:10:19:ff:6b:
         67:9f:55:de:3b:35:70:af:7c:1f:f0:84:a4:c9:da:d6:28:79:
         6c:32:96:9a:f4:31:a6:07:f0:39:9f:94:00:f7:6d:89:7f:63:
         35:c9:d8:3e:28:34:b0:fc:23:4b:14:a9:3f:54:ce:bd:c3:15:
         97:49:d9:ab:47:2f:de:66:f7:21:c1:01:ab:60:af:d4:ba:55:
         cf:8f:de:11:ce:5f:5c:4f:35:e9:d6:e2:7d:69:c7:d1:7a:7b:
         f9:8c:6c:cd:64:93:42:00:62:b1:7f:d6:e4:26:d1:a4:16:e0:
         f6:d8:44:8e:6f:a0:c7:64:e6:f2:54:4b:a9:8e:a4:85:f5:4b:
         1e:1b:dd:03:ad:83:0c:91:3b:ad:cb:59:e3:0e:2b:f7:99:03:
         ef:11:24:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nht1DN8OVaLvRRAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ODkzN2Q0MmYtOGJmZi00ZjE5LWJjZTEtNTVhYjM3NDhhMmRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhP0F6tZtZBXfj9D6vkOLQ6JY2k1MiKOhduQO
Zmuv9o/w+bNaBh8/YVOae30JzT/8eTnvoK1hz+zQUJB4LIQjopByAS4JdQYY0UHO
JYXViFnN8vZ/thivbvaTo2fKaoyiBA6u1aasS3eWX9t29EgdrkTmOoYvFKCFtQlu
e8HMAGiIqZ2k1CoKR6bDnyelAYEXr3AEC1pjWFREHUmw+ptnULujMsDMveuiGBj+
vzDc4TAmalUhs8GmSeGd0oL6MCic+bnB3M11/estV14SpXfjjrzPJWdt4nj1Xh3v
HFHamOv6lgNJVlmNWNHrFU5+FwWEXBAgcpmBT1QmhkgeCVQQbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCWkwYg79sx9g7ixO1/dq2ihVyNXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNjgzNzBjODMtMGY1MC0z
YmMxLWFiNDEtNDk2NjA2NTNlNDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm9HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGp5XYZyTIZNM9N21Ow7t4yGwXesQCQXQ2nQFyqtCh5eUr5bzhQjqhwH
f28Cc4pYOsuttBzL+UeuMZOwPCdd7j2sfDKAVRkF8K3GsVyTcmaEJb7bw7HC8/9W
WjkAxJR0u95YF+x3sIpwEBn/a2efVd47NXCvfB/whKTJ2tYoeWwylpr0MaYH8Dmf
lAD3bYl/YzXJ2D4oNLD8I0sUqT9Uzr3DFZdJ2atHL95m9yHBAatgr9S6Vc+P3hHO
X1xPNenW4n1px9F6e/mMbM1kk0IAYrF/1uQm0aQW4PbYRI5voMdk5vJUS6mOpIX1
Sx4b3QOtgwyRO63LWeMOK/eZA+8RJDE=
-----END CERTIFICATE-----
Generated at Wed Aug 19 05:18:43 2026 by rpki-client