Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ed31986e-845e-3cf8-b5ba-f351716d8235.roa
File:                     ed31986e-845e-3cf8-b5ba-f351716d8235.roa (raw, json)
Hash identifier:          6XyYWAB2snQCjHI8cx8B8IblOzQjz4c9jI0GL0aSlCg=
Subject key identifier:   3B:45:E0:BF:F2:F2:EC:1E:10:17:E6:43:71:9A:BD:4E:D0:71:D6:DE
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EC63C6FF5548322A14E532904
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ed31986e-845e-3cf8-b5ba-f351716d8235.roa
Signing time:             Sun 09 Aug 2026 01:00:12 +0000
ROA not before:           Sun 09 Aug 2026 01:00:12 +0000
ROA not after:            Sat 07 Nov 2026 02:00:12 +0000
asID:                     11798
IP address blocks:        142.111.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c6:3c:6f:f5:54:83:22:a1:4e:53:29:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug  9 01:00:12 2026 GMT
            Not After : Nov  7 02:00:12 2026 GMT
        Subject: CN=a4faae13-bc9c-4c99-8a80-861bd913b7f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9d:f6:01:a8:be:86:d6:69:9d:f5:c0:2e:a3:
                    c4:9e:2b:bb:50:26:98:06:22:2c:42:63:e1:76:7e:
                    f4:34:68:eb:d9:30:47:09:07:6c:5c:ed:1a:13:0c:
                    02:8a:7d:d9:b5:3e:64:28:80:04:02:1a:03:d1:3a:
                    66:b8:d5:cf:e5:98:57:19:a8:84:47:da:bc:72:ac:
                    3f:c4:14:7b:34:2f:13:b0:2b:84:87:58:3f:6c:3f:
                    09:92:83:90:8d:45:6f:58:f4:88:c6:41:aa:06:74:
                    b8:20:82:01:07:cf:b2:c2:aa:ec:a6:c5:1e:1d:f1:
                    8e:a6:86:1d:e2:56:2f:a1:40:c4:f3:6b:29:19:7b:
                    12:8e:1b:22:23:06:51:ac:e6:ed:79:13:60:41:da:
                    a3:c5:b4:37:d9:e4:ba:4d:c1:03:3e:16:16:5e:68:
                    45:0a:db:80:6f:8a:a2:90:86:d6:ca:a3:e8:2f:66:
                    a3:f2:b6:03:c4:0a:2f:98:de:1f:04:26:cc:69:20:
                    2e:49:41:4f:04:b7:bd:f4:03:9f:db:39:06:0a:a8:
                    06:dc:07:15:fb:01:67:c6:66:7a:f2:a1:a4:c8:f4:
                    27:47:1d:6b:d5:4f:82:48:8d:ca:62:8e:5c:47:06:
                    f6:3a:3b:b5:a5:35:d7:18:01:fb:f8:e0:aa:9a:aa:
                    c0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:45:E0:BF:F2:F2:EC:1E:10:17:E6:43:71:9A:BD:4E:D0:71:D6:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ed31986e-845e-3cf8-b5ba-f351716d8235.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:0c:38:0b:db:b5:bc:1d:6f:d4:83:07:49:2a:7c:1b:af:20:
         e2:b8:29:01:4e:c5:13:77:3d:c5:66:93:2f:ea:1e:1c:b0:19:
         c2:3d:8d:12:dc:e7:6e:5c:d5:d4:26:da:14:b5:b5:44:7c:99:
         f0:3d:a3:75:67:5f:96:61:ef:7b:70:08:eb:50:a4:f8:fe:ed:
         d9:ca:a4:76:84:e2:b8:7b:81:36:a5:ed:d5:f7:8c:3b:47:bf:
         83:3e:7a:65:5b:26:c0:e9:72:4f:c5:52:6a:13:ab:87:db:a3:
         d0:66:40:c3:73:b8:bb:4e:05:d1:d4:06:a5:1d:27:de:68:49:
         10:4b:4a:6f:7a:73:12:67:1e:d4:9d:d6:97:54:d2:69:dc:21:
         99:67:9d:93:90:21:20:4c:d3:6e:dc:74:8d:4e:2a:1f:e7:d5:
         c4:55:84:6f:7b:92:95:25:fd:1d:94:95:f4:28:89:aa:4d:60:
         8a:34:4c:08:89:e1:1b:2b:bd:9e:a1:e0:86:cc:e9:ce:dc:6f:
         40:5d:16:53:72:78:eb:66:26:aa:32:e7:39:4f:d5:c4:9b:6c:
         b6:8b:eb:a6:2f:29:3c:9c:90:41:1a:ec:37:83:8b:a3:5b:7b:
         26:a3:1d:21:01:66:ee:99:3b:64:9a:2c:a6:c1:f5:dd:67:48:
         0e:f7:e8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:38:52 2026 by rpki-client