Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/eb589bcf-9264-3ac2-9344-c46ae5801919.roa
File:                     eb589bcf-9264-3ac2-9344-c46ae5801919.roa (raw, json)
Hash identifier:          4FutWmhjiwqpnoo5dKqVWikDCriraGArtCn1sDRZI+U=
Subject key identifier:   94:93:30:11:99:AC:7B:B0:0B:D2:94:E6:4E:04:14:C1:FE:EB:E4:43
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EA7884C0EB6719A542A748B80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/eb589bcf-9264-3ac2-9344-c46ae5801919.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7018
IP address blocks:        142.111.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:4c:0e:b6:71:9a:54:2a:74:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6289b73e-6582-4a99-a448-b8b49c45c91d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:87:ec:6f:d4:3c:92:05:3a:29:e3:25:42:6e:
                    a6:a4:3c:35:18:9f:de:a7:3c:c9:96:fb:9f:f3:93:
                    23:11:2b:eb:ed:be:bb:30:d4:88:19:7a:69:3a:3c:
                    db:50:92:fc:2b:74:b3:64:2b:5e:36:b6:53:d2:16:
                    9e:62:96:96:ab:ed:75:3c:9b:4a:cb:9a:1d:cb:97:
                    02:52:06:e5:b7:92:a5:fb:e9:9e:3e:e4:a1:a1:72:
                    6f:63:27:df:34:14:c8:65:99:26:7c:79:73:26:ee:
                    47:0c:d4:bc:21:e6:d2:57:e3:9f:a2:ac:0f:94:f0:
                    dc:4a:e1:85:9f:ba:c3:b8:f7:64:6e:8d:c1:16:19:
                    12:a4:d6:59:9e:d8:2b:6e:b8:e9:c1:45:4a:41:9e:
                    f4:39:d6:e2:11:12:a1:0d:a9:40:6f:6a:5b:c8:d3:
                    a2:e0:d5:ef:22:d1:5c:d6:ff:cb:58:56:e1:f3:a0:
                    b2:8e:d9:c4:13:f2:9f:81:00:3e:f7:7e:83:4b:f0:
                    d6:d2:f0:fb:3b:14:1d:09:6c:8a:b1:4d:0c:8d:4a:
                    71:cc:11:d8:6c:18:a3:55:e8:0c:79:dc:6b:75:ca:
                    1f:da:24:4f:e6:24:05:fc:ee:71:d1:eb:95:f9:dd:
                    80:b2:bd:c7:ba:61:d4:89:39:e2:59:51:fc:69:50:
                    5e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:93:30:11:99:AC:7B:B0:0B:D2:94:E6:4E:04:14:C1:FE:EB:E4:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/eb589bcf-9264-3ac2-9344-c46ae5801919.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:50:8f:e4:91:0d:d0:0d:2f:aa:e6:f7:1b:21:68:b2:a5:1f:
         ee:b2:9f:b8:df:ca:70:d6:57:79:c2:ab:af:33:30:0c:21:0c:
         10:57:c7:dd:4a:46:07:ed:24:b5:88:3f:6a:b3:d8:8e:8f:89:
         99:40:2d:15:3e:72:7f:43:b1:5b:48:47:51:91:6c:72:af:9e:
         02:d5:65:2c:df:24:e8:fc:44:34:53:9f:75:43:f8:03:e5:52:
         ea:a5:7f:2a:40:1c:29:2e:9d:8b:ad:68:ff:c6:61:33:96:3f:
         1c:25:ce:1b:15:b8:b5:45:38:29:a0:ce:68:81:b9:c4:9f:88:
         85:34:3d:35:d2:6a:cc:ab:61:4d:f0:8d:db:30:20:ea:e2:bc:
         78:9c:6b:04:31:38:e1:d6:26:97:28:57:e2:52:83:0c:c9:21:
         05:ab:a9:ab:aa:f2:db:f5:6f:1f:75:ea:30:9e:c3:ba:43:1f:
         8e:72:22:d8:fa:71:36:e9:4b:79:86:a4:43:d7:25:46:50:84:
         3c:31:f9:0c:81:4f:77:85:2b:23:35:20:4b:f9:d4:19:13:ec:
         82:0d:33:b6:1b:aa:08:c0:3c:10:5c:58:84:e6:42:86:75:1a:
         8c:1d:2d:83:e9:82:61:d7:52:6f:37:15:c0:c2:f0:f7:fa:0e:
         f1:ea:2c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:08:33 2026 by rpki-client