Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/86a1db17-719f-382b-8d0f-407eb5fe7d1d.roa
File:                     86a1db17-719f-382b-8d0f-407eb5fe7d1d.roa (raw, json)
Hash identifier:          k4GGZhRd5DSstHqQu/ZBHGlNpcDKmsyHH2YXyAABWDw=
Subject key identifier:   6D:4C:E5:02:A5:62:45:F1:D0:3E:93:96:E3:93:81:24:61:1C:E3:69
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F49879AB266F0F71B0C4672C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/86a1db17-719f-382b-8d0f-407eb5fe7d1d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     11404
IP address blocks:        142.111.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:9a:b2:66:f0:f7:1b:0c:46:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=63dc0393-f12b-48b7-823e-5e38b0b23e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ce:ab:bc:ac:46:e8:58:f0:91:f7:43:19:7e:
                    ed:cb:47:55:f4:cc:4a:83:d0:54:c9:f2:ee:6a:10:
                    2d:46:99:6f:f2:8e:3f:c6:88:88:50:d0:f6:46:45:
                    0d:e3:d6:f0:c7:a3:4b:02:76:b4:c9:58:d2:02:9e:
                    39:5c:0f:2e:33:d7:17:f2:b5:62:58:11:4a:70:43:
                    b0:4d:b5:28:cc:ab:5a:35:14:bc:31:58:c7:40:7c:
                    42:2e:21:63:4f:bb:b6:d4:74:17:8c:f2:c1:38:e9:
                    6d:65:91:f9:2b:a8:67:ce:2f:21:6c:0d:0a:48:2a:
                    2c:99:1d:6c:f7:1e:b2:32:30:cc:37:97:80:f5:a7:
                    54:5f:27:f4:4c:a2:28:c7:c3:ce:3e:fc:32:95:ab:
                    57:b2:35:49:8d:fd:23:5a:11:ca:37:45:08:11:3f:
                    0c:78:b1:2b:e6:fc:0f:db:d1:11:ae:0e:27:20:ca:
                    d0:04:e9:98:0e:e4:dd:6f:94:f0:72:eb:a1:89:58:
                    65:dc:32:59:6b:5b:7b:1e:e9:5b:3a:5e:e5:0a:59:
                    a4:96:2b:6c:6a:ff:26:d2:61:46:ff:34:8d:c8:6b:
                    e9:91:d0:f5:8f:7f:6a:c9:a3:f4:e0:8a:4d:ea:52:
                    b8:47:d4:38:87:27:1b:e6:e6:02:f2:ca:5e:5b:03:
                    5a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:4C:E5:02:A5:62:45:F1:D0:3E:93:96:E3:93:81:24:61:1C:E3:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/86a1db17-719f-382b-8d0f-407eb5fe7d1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:5e:4c:0c:be:10:3d:71:f2:18:3b:3a:49:e3:cf:d7:19:d6:
         8c:af:24:36:f5:d1:99:e0:c0:0d:9c:a9:08:a7:85:6f:49:56:
         33:8e:12:f3:b3:0c:3b:2e:00:91:f0:16:9d:44:c0:b3:d6:c4:
         69:2b:89:f4:08:58:8a:58:b0:c7:74:17:22:09:f9:21:2f:0d:
         04:5e:ff:32:94:7d:4b:f5:50:4c:db:7f:3e:5f:2a:0c:96:54:
         0c:02:72:d5:43:18:fd:b9:68:29:67:0b:39:db:b9:ae:48:4e:
         61:7d:98:71:ee:df:d6:b9:bc:d9:41:ed:8b:3e:fe:c3:18:39:
         27:63:40:93:14:7a:3b:91:a6:71:1f:ab:f0:7d:88:db:20:74:
         2c:bc:42:c9:01:10:8b:b3:7c:c4:24:b0:db:a2:5b:33:72:cd:
         0e:49:54:fa:38:fa:e7:cb:f8:dd:c3:cb:4a:65:0f:a4:61:ca:
         22:f0:62:46:1b:33:48:7c:9b:91:13:8b:9c:69:72:0d:d8:38:
         ea:d2:c5:37:f1:58:3e:3c:1d:00:2b:2d:e6:91:7d:70:c4:9d:
         10:6a:57:07:e2:3d:9c:b0:5f:e0:fa:d5:1d:81:40:6c:39:34:
         3c:8f:91:d1:35:6c:a7:03:c9:0c:ae:7a:19:b1:4a:51:98:22:
         be:12:43:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:42:28 2026 by rpki-client