Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a1672ed8-e521-318c-a2b3-bd5a285224ec.roa
File:                     a1672ed8-e521-318c-a2b3-bd5a285224ec.roa (raw, json)
Hash identifier:          z9NtNgLs/qW9Ir1Ddulxh6TY6Fr7Jw27UhQqnDWgem8=
Subject key identifier:   F4:96:D4:1F:59:59:68:C8:46:A5:20:23:00:16:5D:AA:66:E8:42:63
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F5A32A4A966985D115039BEA0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a1672ed8-e521-318c-a2b3-bd5a285224ec.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     6079
IP address blocks:        142.111.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:a4:a9:66:98:5d:11:50:39:be:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=5bfb5274-5b47-46fb-82c2-bef600613c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1b:ad:df:07:b2:f1:e9:63:60:23:c3:fd:bf:
                    d5:d6:86:12:38:1e:4b:f4:82:21:a9:63:c3:83:b6:
                    85:1c:7d:ad:31:f7:e7:d7:92:cc:a2:e6:2a:c6:ec:
                    02:af:65:e4:48:3f:69:46:95:45:8b:a9:94:e6:d4:
                    a1:b9:53:4d:7c:7d:c1:dd:98:80:ac:c9:6a:d7:90:
                    d2:7b:04:bb:04:08:c2:1a:13:69:23:85:d1:9d:08:
                    73:30:3c:77:c9:85:43:f1:86:89:2e:87:96:a6:00:
                    f6:a4:39:c5:54:09:35:8d:4b:b3:45:15:04:ca:87:
                    4d:20:67:6a:50:06:8a:03:cc:d2:78:83:a9:1c:03:
                    d6:a7:68:eb:07:e0:89:8c:fd:ef:f3:f9:cd:47:39:
                    23:fb:5c:39:8d:f6:47:11:c7:c5:66:24:e1:ba:66:
                    9b:7d:54:ab:37:e7:09:bc:cb:17:1d:a4:40:e6:58:
                    5c:06:a8:c0:e9:1c:f8:c3:34:fc:3c:cb:03:29:50:
                    41:59:13:75:35:96:2f:97:3f:5c:42:51:13:68:33:
                    03:d2:29:5a:36:bc:ee:1e:25:4a:a8:cf:58:e1:74:
                    3f:7d:f1:31:b3:d5:2d:09:e2:6b:38:90:a3:1e:b3:
                    c1:33:11:3e:55:2e:18:23:0d:6c:a6:9f:70:1a:7a:
                    e4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:96:D4:1F:59:59:68:C8:46:A5:20:23:00:16:5D:AA:66:E8:42:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a1672ed8-e521-318c-a2b3-bd5a285224ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:15:16:53:85:cf:80:c1:66:0d:5b:49:9c:ca:a3:0c:9f:10:
         c7:18:e0:01:e2:b8:a0:c6:93:ea:70:0e:54:14:c3:cd:85:c8:
         5f:b1:f8:28:5e:38:5b:a4:ba:51:55:cb:bb:85:05:5d:86:05:
         22:e0:84:cb:6e:37:7f:01:03:aa:bd:85:a6:6d:6c:ed:b9:0e:
         2b:30:22:99:32:b1:60:f4:6c:9b:e4:22:5b:94:7c:02:65:22:
         e7:ae:d7:93:7a:71:04:4e:32:00:44:b5:22:11:c6:24:32:ec:
         d9:e9:2d:1a:69:27:37:53:04:4e:cb:32:e7:4e:57:af:21:62:
         8a:f3:e7:b4:b3:8c:6d:3d:85:0c:1c:67:80:74:86:04:99:cd:
         15:02:14:0c:40:09:65:9d:64:a2:7c:66:11:97:48:3b:3d:5b:
         ed:12:ba:52:03:ed:0f:f2:3b:8b:97:e1:aa:22:34:9b:16:b3:
         2f:bc:63:e0:73:e5:0e:49:0b:0e:32:6d:a9:aa:86:4f:39:62:
         bd:37:3c:7c:b9:22:1a:33:9f:c5:89:cd:dc:f5:38:7d:7b:a4:
         74:bd:5b:02:9c:bd:5c:8d:36:2f:77:cf:76:c7:c0:ba:52:1b:
         82:59:ed:20:bd:31:93:04:81:51:5d:e5:85:7d:21:20:03:3d:
         9b:f1:4c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 11:54:30 2026 by rpki-client