Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/84f1eb95-2e96-38e4-8c92-6e11ef14f2a1.roa
File:                     84f1eb95-2e96-38e4-8c92-6e11ef14f2a1.roa (raw, json)
Hash identifier:          Y7P6EwZj2zz1HCqOOL3wJauZwSRlwrJqbSmOVaHj6eE=
Subject key identifier:   E8:72:9A:8A:4F:00:7B:17:E9:5F:CB:0F:3A:38:13:47:99:22:0D:AA
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B10445D71681B49F9842A9AA0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/84f1eb95-2e96-38e4-8c92-6e11ef14f2a1.roa
Signing time:             Tue 02 Sep 2025 18:18:23 +0000
ROA not before:           Tue 02 Sep 2025 18:18:23 +0000
ROA not after:            Mon 01 Dec 2025 19:18:23 +0000
asID:                     401152
IP address blocks:        142.111.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:10:44:5d:71:68:1b:49:f9:84:2a:9a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep  2 18:18:23 2025 GMT
            Not After : Dec  1 19:18:23 2025 GMT
        Subject: CN=b4a3e531-aae3-49c4-9daa-6fa45a399e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:68:d1:48:ab:86:be:85:47:f5:9c:6e:67:2a:
                    9e:06:44:8c:12:4a:64:ed:af:35:ef:7b:69:e5:98:
                    cd:ba:5b:03:89:d5:d0:04:70:98:3b:5f:e6:c4:89:
                    24:3d:39:d3:de:37:f4:2d:0d:ff:3b:5a:1d:61:03:
                    83:f8:7b:70:f0:43:3c:c2:92:75:09:74:b3:4d:c5:
                    8c:5c:ed:c7:dc:49:a8:b8:00:48:52:03:d1:76:4c:
                    a4:09:7e:c8:6f:69:77:24:cf:b7:d7:a1:56:db:24:
                    34:ad:a1:fd:bb:9c:d8:07:7d:c2:55:be:8b:7d:64:
                    08:c2:09:83:c9:78:5b:11:08:6c:b7:f4:f9:a3:30:
                    5c:78:c8:87:b6:e8:c4:d5:58:16:58:b6:2a:3e:a4:
                    04:4a:26:b3:01:fd:df:83:64:19:3f:cc:a6:44:01:
                    99:f9:b8:48:fc:11:c7:64:30:26:74:b6:0f:ef:a7:
                    a0:1b:bc:67:5d:43:18:5c:58:7f:8f:4c:07:35:16:
                    1d:72:bb:29:f7:03:3c:b2:94:b9:4c:0d:3a:25:b3:
                    db:4e:15:f4:33:d8:37:69:75:05:74:a7:52:da:f0:
                    22:28:61:15:29:93:54:9b:0b:f2:3a:e3:1e:66:99:
                    06:31:be:63:10:e6:41:9b:1e:9d:df:9e:30:db:43:
                    67:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:72:9A:8A:4F:00:7B:17:E9:5F:CB:0F:3A:38:13:47:99:22:0D:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/84f1eb95-2e96-38e4-8c92-6e11ef14f2a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:14:88:3c:e5:19:97:c4:c4:a8:e3:51:e3:fc:db:ae:4f:7d:
         1f:57:a8:97:59:f3:66:37:23:5a:90:2a:60:42:81:23:26:7e:
         a5:3a:19:8e:06:03:e2:ec:2c:1d:07:97:58:e9:55:13:c5:59:
         e1:b3:e0:80:fd:d6:27:b0:a8:3f:cd:19:74:14:96:ac:af:8d:
         66:6c:67:89:4a:21:49:5b:3a:09:44:48:21:65:e4:d1:ba:06:
         63:5e:1c:c2:26:c6:2f:ea:79:8d:ca:ef:24:ad:f5:a2:36:f4:
         33:a8:45:04:74:3f:3e:76:d1:af:bd:ee:21:3c:04:7c:e4:94:
         d8:b7:6d:e2:f1:cb:89:ae:89:e8:83:56:0b:29:9a:d5:b5:db:
         de:a0:2f:52:b2:bf:a0:8e:a6:fe:f3:15:3b:d4:8e:0c:45:95:
         3a:f2:d0:cd:e9:e4:8d:52:48:fd:16:6f:49:96:7f:69:c2:0c:
         ff:cc:5c:9e:fb:04:57:e6:c4:fd:6a:7b:ff:df:38:25:a0:17:
         75:25:a1:e3:c7:1b:51:8f:1f:6a:e0:da:aa:d4:74:cf:a6:7c:
         53:d6:63:e8:2e:1f:d7:57:c0:e7:ff:f3:87:5c:9e:73:91:d8:
         c5:43:9b:20:b7:60:48:ea:ed:be:cf:d0:fe:65:8a:c8:99:cb:
         23:ac:2b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 01:25:05 2025 by rpki-client