Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4aa0e3e4-f6be-3a1f-a213-dce0f0136504.roa
File:                     4aa0e3e4-f6be-3a1f-a213-dce0f0136504.roa (raw, json)
Hash identifier:          aBiET4UfJ50RSQzq8yRM67ShLHugQZ6VUbspioQGcYM=
Subject key identifier:   80:CF:A2:C6:F8:8D:57:AA:E4:C3:AA:8C:51:F1:EE:B3:E7:EF:D6:4C
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B821D83680B949D260E0D42C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4aa0e3e4-f6be-3a1f-a213-dce0f0136504.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     6939
IP address blocks:        142.111.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:83:68:0b:94:9d:26:0e:0d:42:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=d13b0f34-2d0e-4e82-a9d1-686a13163104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:34:a9:24:b2:8c:c1:5b:51:bc:5d:6c:26:93:
                    5b:c9:e0:e3:e4:53:e1:e8:bf:2b:0b:ca:52:68:0a:
                    de:30:6e:c8:cf:98:73:6c:a7:4b:6b:1e:3f:45:df:
                    dd:14:da:08:ac:39:bf:2c:6c:ef:5d:eb:ab:02:04:
                    e6:d0:5c:4f:8d:59:c5:be:9f:23:52:5d:b8:d5:57:
                    90:3e:e4:ea:39:1f:4f:c8:f4:cc:f3:e6:ae:06:d1:
                    4c:3e:29:cb:40:01:f9:07:fa:05:5f:a7:8b:f6:0e:
                    9e:7e:a9:f0:b7:36:62:59:d3:07:65:fc:72:1c:58:
                    7e:02:a0:ea:6d:41:9f:28:4c:6d:cd:92:e1:ea:4b:
                    fe:47:e6:81:5a:e3:19:72:41:09:96:3f:22:bc:8c:
                    a0:3e:21:84:f3:2d:7e:1d:ee:01:4f:2d:21:2e:8b:
                    1c:ea:8b:da:fa:fe:fd:14:2d:15:0d:4b:3c:24:9b:
                    70:bf:71:3e:af:7c:d8:57:0d:1f:f4:5a:92:30:fa:
                    f9:64:7b:30:47:4a:3e:32:59:8e:a2:22:6e:66:eb:
                    73:d9:c3:a9:08:2b:de:13:34:55:4e:1a:b9:4c:79:
                    5a:e1:36:0b:ca:d1:5d:7d:d1:f4:1c:34:ee:05:c9:
                    29:ab:e6:ce:28:73:75:2a:4c:96:7b:09:8e:d5:27:
                    cb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CF:A2:C6:F8:8D:57:AA:E4:C3:AA:8C:51:F1:EE:B3:E7:EF:D6:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4aa0e3e4-f6be-3a1f-a213-dce0f0136504.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:17:c8:f4:9d:d7:21:17:ef:fd:2c:df:f3:90:93:98:65:2a:
         93:8e:92:8a:ea:e3:27:af:be:4e:ca:6b:a9:cc:55:8a:8f:3e:
         9e:04:7f:59:82:6a:cf:fa:e6:6c:26:6a:3d:68:0d:5a:d2:66:
         c2:49:c1:7f:dd:3c:8a:98:50:70:25:57:3a:2c:e8:8d:d9:c2:
         67:a7:b0:38:7b:aa:f3:da:22:00:d0:e3:4f:5d:73:e6:51:fc:
         fd:0b:84:76:35:b1:7b:e8:70:de:4e:33:7a:66:e3:fd:ca:ab:
         88:ba:77:4b:b3:b4:68:13:29:a7:c2:21:4b:f1:b9:34:84:15:
         d6:81:da:e3:06:12:28:3a:a6:2f:2d:3a:04:2c:d6:75:de:79:
         ae:51:c7:86:b3:80:be:9c:3c:fa:86:a1:e4:52:4e:cf:e0:b0:
         00:cf:c4:50:9a:eb:4c:e6:15:7d:7c:03:cf:63:ff:43:f8:93:
         f9:a5:05:e2:48:10:d0:4c:ab:d9:d1:45:d2:2d:5e:3b:8c:ac:
         a7:09:f2:94:38:69:63:b6:14:3a:4f:8b:a8:3a:5c:6c:06:f6:
         44:d9:35:aa:48:3e:30:e7:f0:70:e7:27:58:68:51:0a:87:96:
         08:25:4c:e5:18:c1:c2:85:fa:23:8f:20:89:34:66:b5:62:20:
         81:39:62:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:21:51 2025 by rpki-client