Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a436a3fa-96b7-3eab-9f1a-7a256ed07b60.roa
File:                     a436a3fa-96b7-3eab-9f1a-7a256ed07b60.roa (raw, json)
Hash identifier:          +OTRqIOUHTKVxZ4xNgVZFNxq1dsq4umVglnuZK7q/eE=
Subject key identifier:   62:C4:61:CA:3B:00:7B:36:BD:56:85:45:6B:EB:7C:91:92:AC:EF:AA
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F5A32EE8BDE96BCF71CA29280
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a436a3fa-96b7-3eab-9f1a-7a256ed07b60.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     401152
IP address blocks:        142.111.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:ee:8b:de:96:bc:f7:1c:a2:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=846c2108-22b2-4ec7-9c92-624252ec0fc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6e:45:81:fb:6d:c0:fb:08:5c:9c:b6:99:61:
                    5f:1b:54:3f:8c:3d:7b:f3:81:60:9c:b7:78:de:d7:
                    0f:2a:77:81:df:be:71:ee:ba:b9:c2:f8:9f:1f:56:
                    90:fe:11:34:9a:75:6f:75:e4:90:ef:5e:ce:e7:1b:
                    3e:f1:6d:ec:6c:2e:ac:d9:6b:61:94:7c:96:cc:74:
                    3b:30:7d:57:a4:4f:b6:b3:43:91:61:d4:e3:7e:6b:
                    d3:88:6d:be:b2:6b:a7:fa:73:e0:70:0c:14:51:b5:
                    e6:06:53:cd:9b:fe:16:02:03:83:ed:7c:07:f1:98:
                    22:3c:84:ff:fd:c1:cf:d5:dc:ef:df:ea:8d:c4:b3:
                    34:77:ea:db:fc:90:85:cd:23:e3:72:78:5f:23:5b:
                    bd:11:0e:20:41:3f:de:44:6d:f7:42:4b:e8:94:26:
                    2c:e3:bf:26:5c:30:b7:b4:e9:02:4a:1d:3e:6c:53:
                    f0:51:8d:0f:0d:f8:2b:a7:ff:cd:72:33:1e:a4:a0:
                    eb:36:3d:cf:54:94:99:92:3d:a9:a3:8e:90:30:7c:
                    3e:f5:38:6c:f3:a8:c6:2d:44:b3:a4:be:20:cf:73:
                    c9:92:18:82:c4:8f:7b:9c:af:77:03:c4:09:93:4c:
                    67:de:65:c4:0c:ce:ef:ff:fe:41:75:27:ed:4c:e2:
                    1d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C4:61:CA:3B:00:7B:36:BD:56:85:45:6B:EB:7C:91:92:AC:EF:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a436a3fa-96b7-3eab-9f1a-7a256ed07b60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:6f:de:44:d1:77:ea:26:61:9a:6f:3a:bd:48:28:d0:c7:ee:
         11:53:ff:a3:e6:86:1f:22:e1:67:51:cf:fc:c9:73:8e:fd:55:
         23:bb:1b:49:b7:88:1f:8e:1c:23:ae:82:cc:2a:f1:85:77:08:
         a0:1a:37:c8:f5:62:18:7f:41:3c:e4:e0:4d:0a:85:d2:92:ef:
         83:23:cc:08:00:dd:c6:75:87:09:a4:5f:21:66:dd:68:d1:f0:
         39:b0:1a:4a:0a:ab:14:2d:e1:c9:17:a8:b0:f9:16:2e:39:9a:
         26:e7:7b:d3:6f:c3:57:b8:2b:5c:57:60:e3:2d:ee:72:04:73:
         39:38:61:59:c1:0b:2d:23:92:96:08:cf:df:f3:2a:85:52:05:
         24:24:65:4f:d7:4c:15:ce:c3:53:87:64:14:1a:39:0f:bc:1a:
         7e:c1:ae:f6:d6:a1:ed:6d:89:45:47:e4:2b:c6:e3:41:af:0a:
         a0:c9:e1:47:0a:1f:36:b6:14:14:2b:82:13:89:4f:5a:19:b5:
         a7:42:eb:70:f2:42:42:4c:4b:53:0c:0f:c3:6b:b3:dc:ca:02:
         53:1f:b1:0b:17:ca:bf:cb:25:82:b9:93:54:b4:d3:dc:c0:c9:
         a1:09:12:cc:3f:67:25:23:ea:0f:3a:27:de:6e:a8:54:24:40:
         f3:60:b1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 07:53:58 2026 by rpki-client