Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8f6809da-2501-3720-bdfe-3cdee892f2fa.roa
File:                     8f6809da-2501-3720-bdfe-3cdee892f2fa.roa (raw, json)
Hash identifier:          OHM3SLehQOh9YQuR0iqRMyN3BSO2xKN16IcLawxFdcQ=
Subject key identifier:   68:32:3B:BE:67:6F:EA:FF:AF:2D:EB:EF:AA:21:D4:98:02:E5:17:91
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F58CD60FDECC52EC2AC473800
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8f6809da-2501-3720-bdfe-3cdee892f2fa.roa
Signing time:             Wed 30 Sep 2026 13:00:13 +0000
ROA not before:           Wed 30 Sep 2026 13:00:13 +0000
ROA not after:            Tue 29 Dec 2026 14:00:13 +0000
asID:                     7018
IP address blocks:        142.111.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:cd:60:fd:ec:c5:2e:c2:ac:47:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 30 13:00:13 2026 GMT
            Not After : Dec 29 14:00:13 2026 GMT
        Subject: CN=729abe13-5988-4063-b2d7-54248283a80c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:c1:c1:3c:21:9e:e3:57:38:63:ad:ba:78:b5:
                    4e:ca:a8:8e:70:a1:04:bd:7f:24:c2:cd:18:48:d5:
                    a7:d0:ad:f1:ec:ef:dd:ec:7e:fa:27:08:39:6a:f8:
                    d3:1b:c1:93:bc:42:d0:4d:00:e9:fa:f5:f6:a8:d7:
                    7b:bf:b7:43:19:3d:3c:3e:47:b8:26:63:27:b6:75:
                    21:ac:7a:40:00:7b:f6:89:2e:dc:a7:38:61:36:0a:
                    54:2c:17:69:ec:71:85:ea:4b:6c:d8:e4:64:84:73:
                    54:07:d9:b3:9f:6c:99:7b:8c:29:6d:32:30:17:b5:
                    6d:86:1b:c7:9a:92:bf:35:74:63:e2:39:31:86:4e:
                    7c:2d:c4:8e:86:6e:88:ab:f8:1f:d1:77:5c:5a:a7:
                    03:67:67:84:06:34:7e:36:03:fa:8e:39:02:cd:fe:
                    92:fe:84:a5:60:6e:a3:48:f2:00:a6:e7:0a:2d:5d:
                    0b:e0:e9:16:b0:d0:da:e7:11:29:a0:9b:a3:9d:a6:
                    20:7f:01:00:1f:87:a2:f3:5b:44:15:43:3c:d0:1f:
                    46:a6:de:ae:0a:d0:7c:9f:fb:83:df:b8:96:9b:ff:
                    75:c6:1c:b7:4b:09:ce:32:ee:01:34:a9:b3:36:35:
                    e7:a6:41:aa:28:94:6e:8d:ba:e3:a0:1d:cd:51:9a:
                    00:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:32:3B:BE:67:6F:EA:FF:AF:2D:EB:EF:AA:21:D4:98:02:E5:17:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8f6809da-2501-3720-bdfe-3cdee892f2fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:42:44:23:4f:c1:ad:2b:28:ec:ae:08:b6:2f:cc:65:17:f6:
         b3:4e:9d:53:61:c5:f7:d0:d3:6d:80:3a:41:ba:00:76:35:9f:
         55:2b:58:45:7b:2f:20:ed:24:c0:3d:0d:61:3d:bd:3e:cd:d4:
         8a:e4:5e:ed:e0:1d:fa:c9:39:4d:8f:c7:6c:8e:b8:00:a7:08:
         a1:61:7c:d2:dc:24:f1:34:fb:0d:8b:9d:47:f7:8e:b1:34:ac:
         64:21:ae:e0:0b:93:c7:9c:48:85:89:c4:13:7f:fa:14:e1:82:
         fe:9d:60:6b:80:b2:0d:fc:10:98:38:37:d6:a2:36:e6:7e:a5:
         6f:5e:e0:76:61:83:4b:d8:aa:5e:0b:f2:42:0b:a6:52:bd:f8:
         69:23:5d:0a:ba:34:f4:ee:3e:c2:cd:f5:f0:48:e9:70:8d:fa:
         08:c1:3f:f1:50:36:bc:9a:05:48:8a:6b:23:61:dc:14:13:a6:
         1a:7b:91:d6:32:a8:94:52:2d:af:e3:86:d8:3f:8d:06:69:40:
         59:44:ab:ea:eb:ed:43:a5:62:2f:a2:7b:09:01:98:ee:5f:8a:
         9f:19:5a:e1:b3:b0:1e:f6:12:6f:35:34:99:82:6c:c0:c9:7d:
         fa:f3:21:12:8f:cc:2d:1c:a1:c7:1a:93:5d:29:fc:e1:9f:6f:
         87:98:ae:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:31:42 2026 by rpki-client