Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/780d69c7-e52f-3db7-ab0b-7457901e94ff.roa
File:                     780d69c7-e52f-3db7-ab0b-7457901e94ff.roa (raw, json)
Hash identifier:          XBXMLhbpbrjPFMlfL1MNJ7wlG+ZbtDay/tHzERF/l/A=
Subject key identifier:   1B:8E:FA:C6:EF:64:14:04:29:69:97:44:8F:64:F4:D2:D2:6D:DD:31
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B6797FB5F7CC52A4B42CD2B80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/780d69c7-e52f-3db7-ab0b-7457901e94ff.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     44559
IP address blocks:        142.111.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:fb:5f:7c:c5:2a:4b:42:cd:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=0438d94d-19d6-4efd-9b7b-8eb62c416644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3b:94:00:67:8a:fc:ac:66:ec:5a:64:76:6a:
                    b9:8c:1e:b8:65:d3:46:71:64:2b:36:10:b4:4c:f6:
                    bc:d9:7b:73:3c:39:0d:d4:95:42:87:2d:18:87:a3:
                    82:43:1a:7b:f4:6a:06:db:d0:9a:e1:0d:c3:1f:0a:
                    64:92:ab:a7:08:56:60:ad:29:90:18:12:66:d6:50:
                    0c:d4:7c:94:b1:7d:9e:ad:66:81:04:09:33:c0:d8:
                    06:d1:4e:7b:c3:44:a8:e6:c2:1e:fe:08:64:4a:0d:
                    6e:58:86:7f:69:4e:9a:7c:db:73:b8:2a:29:33:20:
                    50:db:17:ab:d6:6e:a5:3a:93:e4:d8:34:da:80:e9:
                    5f:f9:2e:6d:9a:ac:b4:95:c3:ac:b6:73:69:08:82:
                    03:93:b9:41:b9:7e:cb:ad:33:c6:f2:e1:ac:7c:3d:
                    c9:3a:cf:b4:60:42:11:0e:b9:4b:0d:e5:92:f6:1b:
                    48:15:c5:30:ee:bf:76:71:9a:35:e2:a5:dd:28:12:
                    74:47:5f:db:53:83:b6:b0:65:4d:fe:87:87:a6:39:
                    28:e2:f6:83:21:06:c6:30:a3:92:fa:e7:1f:37:fd:
                    80:56:96:6d:ab:49:5e:37:a5:57:7b:59:d5:b0:4d:
                    1d:f6:52:b0:82:4e:f6:13:84:d7:6c:8e:fe:8c:72:
                    c3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:8E:FA:C6:EF:64:14:04:29:69:97:44:8F:64:F4:D2:D2:6D:DD:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/780d69c7-e52f-3db7-ab0b-7457901e94ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:bf:89:74:e8:e6:93:02:df:99:ca:5d:cf:08:50:41:55:5e:
         8a:e6:f6:cf:ee:93:e1:d0:52:56:f8:ed:f9:fd:3b:99:47:c2:
         03:74:3a:f1:42:b5:22:2b:8b:bc:0f:22:50:d3:70:77:4c:3d:
         e5:33:8e:6a:bc:26:e9:e9:a8:2f:f8:e8:c1:34:ed:3f:ac:9f:
         4c:d2:60:67:a1:bd:01:14:50:ce:ae:cc:44:fc:06:09:f7:a9:
         37:d6:0e:7e:6a:14:06:36:f5:ea:fc:09:ef:c7:91:44:2e:97:
         28:21:53:d3:03:3c:e6:59:e3:89:46:cd:a0:af:54:bd:c2:e4:
         73:77:6d:74:94:68:bc:3b:fc:5e:25:4e:97:6c:f6:83:73:f6:
         96:6f:6e:4c:81:f5:2d:69:a8:6d:a8:1c:4c:22:4c:a6:18:d1:
         5e:e7:44:f4:f8:b7:20:9f:fd:aa:04:55:e5:b1:11:d1:9a:21:
         10:c5:20:96:ae:2f:71:ee:11:1f:fb:0f:01:02:f3:8d:f5:f4:
         b3:ea:fb:d6:98:aa:c0:ab:35:53:17:4d:05:22:c8:0e:de:56:
         8f:0f:5f:9f:22:03:71:ef:08:8e:f1:fd:90:bc:98:74:00:1d:
         87:0f:f6:25:74:ee:da:34:c1:98:39:7f:ae:ce:1d:64:48:75:
         72:66:08:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl/tffMUqS0LNK4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk
MDQzOGQ5NGQtMTlkNi00ZWZkLTliN2ItOGViNjJjNDE2NjQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDuUAGeK/Kxm7Fpkdmq5jB64ZdNGcWQrNhC0
TPa82XtzPDkN1JVChy0Yh6OCQxp79GoG29Ca4Q3DHwpkkqunCFZgrSmQGBJm1lAM
1HyUsX2erWaBBAkzwNgG0U57w0So5sIe/ghkSg1uWIZ/aU6afNtzuCopMyBQ2xer
1m6lOpPk2DTagOlf+S5tmqy0lcOstnNpCIIDk7lBuX7LrTPG8uGsfD3JOs+0YEIR
DrlLDeWS9htIFcUw7r92cZo14qXdKBJ0R1/bU4O2sGVN/oeHpjko4vaDIQbGMKOS
+ucfN/2AVpZtq0leN6VXe1nVsE0d9lKwgk72E4TXbI7+jHLDWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBuO+sbvZBQEKWmXRI9k9NLSbd0xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNzgwZDY5YzctZTUyZi0z
ZGI3LWFiMGItNzQ1NzkwMWU5NGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm9VMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGy/iXTo5pMC35nKXc8IUEFVXorm9s/uk+HQUlb47fn9O5lHwgN0OvFC
tSIri7wPIlDTcHdMPeUzjmq8JunpqC/46ME07T+sn0zSYGehvQEUUM6uzET8Bgn3
qTfWDn5qFAY29er8Ce/HkUQulyghU9MDPOZZ44lGzaCvVL3C5HN3bXSUaLw7/F4l
Tpds9oNz9pZvbkyB9S1pqG2oHEwiTKYY0V7nRPT4tyCf/aoEVeWxEdGaIRDFIJau
L3HuER/7DwEC84319LPq+9aYqsCrNVMXTQUiyA7eVo8PX58iA3HvCI7x/ZC8mHQA
HYcP9iV07to0wZg5f67OHWRIdXJmCBc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:00:58 2025 by rpki-client