Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9bbe1cc8-d505-3148-bd51-ef2266da8229.roa
File:                     9bbe1cc8-d505-3148-bd51-ef2266da8229.roa (raw, json)
Hash identifier:          zowcOIxmboeoQrJ6sVo2nd3yGTNk1zsGlQ+QPgcmdIQ=
Subject key identifier:   14:52:98:E3:F8:44:44:03:5D:CE:3A:F9:F5:EA:96:D2:A1:06:75:CD
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F5A32E4E4745021A8BD800F80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9bbe1cc8-d505-3148-bd51-ef2266da8229.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     401152
IP address blocks:        142.111.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:e4:e4:74:50:21:a8:bd:80:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=cc84be10-5da1-43ff-ac54-f6e265f41bc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:12:9f:c7:b6:0e:00:a3:8a:52:03:40:31:cb:
                    b4:49:d0:75:08:f0:be:35:73:d8:6b:74:14:62:de:
                    eb:18:90:25:a7:b5:2f:b0:15:f0:38:a4:b3:75:df:
                    3d:15:dc:39:ef:47:65:0f:39:31:aa:f1:61:3f:12:
                    58:0d:34:b2:99:13:1a:fb:10:ab:62:09:64:30:d1:
                    48:fa:46:2a:a2:1e:60:e8:da:68:2d:d8:2d:cc:38:
                    81:b4:14:6b:bb:50:c7:43:46:2a:43:31:b0:c9:5f:
                    1d:04:6a:19:71:0a:da:2f:44:cd:1c:d2:19:e2:23:
                    dc:f4:e6:65:29:5f:06:26:31:7a:5c:10:c0:3b:f9:
                    e5:68:70:b9:07:04:8e:bd:09:f4:04:86:fe:33:3a:
                    fc:95:24:72:af:ce:1e:ea:f6:cd:ff:97:fd:25:14:
                    c9:f9:8f:a2:75:62:3c:ff:d8:a0:10:00:44:b0:61:
                    be:de:7e:1c:f5:e2:bb:6a:04:76:78:a2:31:5b:93:
                    07:03:f1:8d:ec:31:7c:ba:a1:41:e7:64:49:3d:23:
                    ad:0b:55:4c:c0:88:7a:5f:aa:d6:8c:52:35:96:e7:
                    23:99:07:fb:d7:de:af:a9:f6:17:28:5c:86:b2:d6:
                    32:46:f5:bf:64:4e:3b:34:77:12:cb:5b:e4:fd:16:
                    64:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:52:98:E3:F8:44:44:03:5D:CE:3A:F9:F5:EA:96:D2:A1:06:75:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9bbe1cc8-d505-3148-bd51-ef2266da8229.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:67:c1:85:ae:39:0c:7d:86:87:49:b7:67:50:5a:1b:e5:16:
         a2:83:88:8f:33:51:e6:6d:a5:15:f5:06:43:db:bb:dd:3d:54:
         b7:2f:ea:73:ce:a8:dc:79:da:b8:a3:65:33:e9:2e:75:0a:65:
         16:28:c8:5b:76:21:9d:f9:c1:80:82:9b:a9:19:7e:c7:66:2e:
         c5:f1:22:e2:96:97:8a:41:48:7c:e1:d7:ff:ae:b9:44:f5:ab:
         9c:3d:35:95:63:65:79:47:7e:d6:77:0b:95:33:44:a7:c0:03:
         e8:c2:67:8d:3e:81:08:1e:27:2a:0f:10:67:a6:1d:6a:20:0c:
         0f:a1:bd:be:f6:ab:10:cd:aa:02:ab:f8:94:ad:2a:e5:c1:7b:
         54:26:5d:4c:e4:ab:bc:f8:65:4b:d8:89:1a:9d:86:ee:bf:7e:
         d9:28:6c:b0:77:1e:ba:8a:31:d4:ff:1f:67:f1:91:d9:fe:6e:
         f3:93:45:74:06:68:ad:24:e7:73:ee:fa:b2:7f:24:a5:4b:15:
         94:00:fa:01:62:fc:eb:18:5d:73:0f:ed:ec:40:05:bd:ee:59:
         77:b4:c2:4f:81:77:f6:f7:d8:81:74:a9:1d:3c:cd:27:89:f5:
         a6:0a:92:da:48:6c:94:d7:44:e7:57:da:45:d1:e7:fa:56:7f:
         d9:1d:d2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:54:54 2026 by rpki-client