Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/172d7528-6540-3c21-9bbc-c2f314318d86.roa
File:                     172d7528-6540-3c21-9bbc-c2f314318d86.roa (raw, json)
Hash identifier:          OCtcsdO762ACQo/91PcTpWMnGXCn48F7LXZFVvinUEc=
Subject key identifier:   A3:81:6B:85:BE:80:A6:04:10:18:D2:FF:74:41:0C:29:5A:7D:EE:85
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F3FAD82C2E16BEC7D32E509C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/172d7528-6540-3c21-9bbc-c2f314318d86.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     402175
IP address blocks:        142.111.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:82:c2:e1:6b:ec:7d:32:e5:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=cb423c00-e8da-48e0-b142-742c1f81ce13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:41:10:f0:36:d7:32:b8:94:d2:99:4c:67:34:
                    aa:89:4c:98:38:f6:84:0f:d8:27:c2:73:59:05:5f:
                    6a:27:fc:30:85:48:e9:97:9b:bb:f7:b9:93:9e:a3:
                    d9:2b:2a:e1:b2:e0:c8:a3:d3:12:00:8f:4b:ba:a3:
                    e8:e9:e3:af:64:32:51:3f:c2:1f:cd:ae:e3:ae:66:
                    1b:22:aa:92:f1:6d:fd:13:ac:54:0f:ea:10:a7:a0:
                    fa:64:2d:0a:70:9e:f2:4e:14:51:7e:81:49:79:1d:
                    16:e2:79:53:7b:be:8a:e7:a0:c7:50:f3:b1:00:7a:
                    03:b2:90:99:bb:10:2a:b6:d2:a7:d1:2d:dd:4b:2c:
                    fb:a6:96:90:fb:f8:ff:81:22:ad:86:7a:87:b9:04:
                    fe:a3:12:93:4a:15:cd:ea:81:da:f8:d9:7b:ef:19:
                    c1:a1:fa:53:5b:40:58:69:d2:6c:f1:26:3e:33:7f:
                    5f:92:59:b1:36:2c:bb:a8:78:50:89:b2:db:62:e2:
                    f6:2f:8c:68:00:34:62:27:6a:22:e1:71:5f:a9:d9:
                    75:44:8e:2e:0f:cd:21:99:c4:eb:60:73:4a:09:80:
                    6e:bd:51:7d:0a:8f:c1:32:9e:eb:4d:ba:78:9a:a1:
                    39:41:45:9b:12:b7:99:4e:b5:1c:66:9c:69:81:95:
                    86:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:81:6B:85:BE:80:A6:04:10:18:D2:FF:74:41:0C:29:5A:7D:EE:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/172d7528-6540-3c21-9bbc-c2f314318d86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:63:96:f7:16:f6:02:24:bf:cc:6f:1d:19:64:8b:8c:c6:ec:
         fb:5c:e2:62:47:1e:ef:cc:f6:6a:be:1c:d9:d4:44:26:db:41:
         de:68:cc:85:ef:67:5a:ee:5b:b6:17:94:f7:81:9a:29:0d:3b:
         67:f6:68:8e:2f:6a:de:15:a0:93:7a:cf:22:fc:7f:5b:24:b1:
         77:80:4a:90:56:c7:c3:7f:32:11:18:78:fa:af:c2:cb:6d:c5:
         c2:2b:e8:87:22:6e:c8:f0:0b:f1:b4:0e:c4:b0:58:ac:42:d5:
         cf:ae:4f:ad:d9:89:14:c7:e1:0c:79:fd:5c:b9:14:c3:76:66:
         69:be:dc:78:1c:af:a8:86:39:3b:d4:66:da:04:a4:6c:03:dc:
         92:df:15:a5:8b:6a:4b:6d:b9:a8:10:b9:b3:e9:ca:ac:7e:26:
         3d:b5:16:8c:1e:df:c0:74:49:71:64:fc:69:31:48:d2:d6:c5:
         b1:b9:97:f5:7c:54:d9:d2:fa:f4:d3:cf:7d:e3:b0:04:5c:13:
         f2:f7:f1:2d:44:c6:ff:8c:f3:ea:fa:0c:5c:07:2b:9e:fb:13:
         73:11:bb:e3:1c:a6:92:56:22:a6:f4:ce:ec:5d:87:8c:b9:91:
         bf:21:67:38:b8:03:65:30:8f:b1:01:54:63:8d:9a:25:e2:a3:
         d7:5d:7b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:36:55 2026 by rpki-client