Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a25adc19-0b0f-3e58-9770-caf9c965b218.roa
File:                     a25adc19-0b0f-3e58-9770-caf9c965b218.roa (raw, json)
Hash identifier:          Gn7CldYANxPjRwlPTkAhuTKX6ZBgl3vIUvzGl/vbTBc=
Subject key identifier:   68:95:A7:DF:EC:A2:EA:07:2B:D9:72:29:42:53:08:A5:1C:93:D8:D8
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EA79797075DDFD5634A010860
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a25adc19-0b0f-3e58-9770-caf9c965b218.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     3257
IP address blocks:        142.111.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:97:07:5d:df:d5:63:4a:01:08:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=523c39ec-0acd-4207-b582-3a41e9718347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:28:93:f5:d1:da:ac:05:ad:2d:80:81:b4:0b:
                    72:4b:71:7c:14:ca:d8:b7:92:d5:22:86:28:c1:d5:
                    31:56:97:e9:d9:ff:cd:8d:09:12:79:ca:8a:a2:bb:
                    02:39:bc:99:87:5f:2c:ec:e1:f3:57:1c:15:86:33:
                    7d:c6:f3:d1:6c:87:67:98:07:a9:8f:0c:31:46:56:
                    ef:5d:08:05:bf:8c:37:e1:01:70:75:30:13:65:ea:
                    b7:a4:b8:57:b6:30:88:37:2e:fa:c7:7f:82:1d:f1:
                    3a:12:b3:9b:a3:8e:1b:a9:58:9b:f9:41:5f:44:d0:
                    04:5e:28:88:c8:49:b0:bd:e7:c3:2a:aa:a7:4a:ab:
                    70:12:dc:59:a2:ee:e1:96:49:45:e7:e8:89:d6:51:
                    15:e5:ea:44:67:d2:2e:08:9b:46:09:aa:63:8b:ad:
                    50:28:25:84:6c:00:68:9a:b1:4a:11:46:cb:d0:c2:
                    ef:33:1c:2d:da:39:b6:da:46:f9:73:59:e8:1f:99:
                    d7:26:0c:f0:96:20:9c:8d:52:39:fe:f2:e0:4e:a8:
                    25:6d:15:9e:9e:a0:ae:db:f8:e8:30:7e:c6:ed:3b:
                    bb:cc:4a:33:a0:3a:a9:2d:d0:d6:27:0d:18:7a:da:
                    72:f8:63:14:a7:5b:90:6a:a3:93:66:8d:20:21:65:
                    dd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:95:A7:DF:EC:A2:EA:07:2B:D9:72:29:42:53:08:A5:1C:93:D8:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a25adc19-0b0f-3e58-9770-caf9c965b218.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:c8:18:81:53:50:7d:da:d4:ee:64:7b:f0:83:13:d6:e0:b0:
         8d:e9:b4:69:09:ce:86:f2:2d:f1:68:7b:a3:ac:b2:38:0f:1b:
         12:d0:2d:2e:f5:38:01:76:1d:7b:4c:3f:55:df:e8:9c:63:97:
         5c:ea:32:09:ee:0e:3b:bb:41:6a:ac:9a:01:09:c4:92:7a:46:
         49:81:7d:df:89:f0:b0:fe:e7:8b:5e:b1:d5:de:65:91:12:f6:
         49:98:1d:da:8a:5e:e6:05:18:1f:c9:39:08:24:b7:9e:d9:9e:
         f8:a8:db:18:3a:65:b4:12:96:a8:6e:8c:d6:ef:4c:61:55:8f:
         65:47:96:8f:78:1d:3d:92:42:f8:87:84:dd:40:81:79:3e:13:
         ed:8a:fb:b8:15:a1:cd:8b:14:95:b0:55:10:d9:cb:9a:27:91:
         37:b3:a6:0f:6c:f2:91:c4:ee:b1:56:3d:ba:d2:b0:20:cd:ad:
         8d:fd:eb:7a:0d:93:59:2d:38:1d:ae:da:bf:61:0a:2c:94:fa:
         10:f3:28:a3:6c:8a:14:69:86:f5:a9:3a:61:da:bb:79:b4:53:
         b6:d0:d7:fa:38:4e:58:46:e8:1b:d2:53:b8:cc:40:00:60:e6:
         51:f8:83:f9:dd:65:d2:c6:50:47:74:a3:5f:49:1e:25:7d:81:
         d0:f5:d8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 16:05:53 2026 by rpki-client