Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/89502e31-fb13-3827-aec4-7d5a5160a02a.roa
File:                     89502e31-fb13-3827-aec4-7d5a5160a02a.roa (raw, json)
Hash identifier:          x7PCN8Cl2+GQ45ezlU8vPA5fBEg7G0Kaj7754vOtIAQ=
Subject key identifier:   4D:C4:98:84:89:3F:D4:77:C4:8C:E7:F3:32:74:C9:22:C8:43:70:BF
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B7DECCE005AF9146950FE7040
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/89502e31-fb13-3827-aec4-7d5a5160a02a.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     7385
IP address blocks:        142.111.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:ce:00:5a:f9:14:69:50:fe:70:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=e6c1cdca-cb59-4f80-b0e3-254d7d2e4acc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:55:11:d7:bc:0b:eb:54:a8:ff:39:75:06:a3:
                    eb:d8:d7:85:e0:16:24:2a:b7:5d:f3:cb:92:6b:a1:
                    8e:37:a0:16:06:b9:a5:3e:95:59:74:cc:00:e2:13:
                    58:79:ed:79:02:ef:e9:fe:bf:82:06:59:25:d1:4f:
                    f3:3e:a1:ed:56:63:9f:33:e0:47:15:12:49:a7:d2:
                    1a:8f:92:26:e1:41:cc:f4:97:ad:c7:f6:cc:01:c8:
                    5a:a0:4f:ee:5f:84:62:f6:70:48:84:59:2d:68:45:
                    8e:5e:ec:a6:94:41:ec:d9:56:67:24:03:2e:a0:26:
                    1e:80:12:ac:6a:df:be:82:ea:4c:fe:8c:cd:91:5c:
                    39:6e:76:40:f4:1e:e3:f7:fa:13:0c:7e:cf:9a:2f:
                    c2:88:f7:7a:46:24:6a:af:29:97:5b:e4:24:1b:ee:
                    80:2f:1b:39:0a:49:5a:3d:8f:3d:1b:a9:e3:92:d6:
                    c0:b4:11:d9:e8:4e:2f:b6:73:b2:2d:c3:12:5e:82:
                    72:4d:67:f3:c2:8e:55:f9:74:e9:52:ea:74:a0:16:
                    a7:28:db:d1:ca:17:14:87:73:0c:e5:a7:53:8d:6c:
                    da:1f:27:0c:fc:9b:c7:ee:36:78:08:06:48:20:a1:
                    ae:53:9b:1a:43:a3:93:fb:a3:4d:21:39:0d:1f:c8:
                    a1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C4:98:84:89:3F:D4:77:C4:8C:E7:F3:32:74:C9:22:C8:43:70:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/89502e31-fb13-3827-aec4-7d5a5160a02a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:14:7c:e8:2c:e7:c7:e3:56:c9:d3:93:46:13:0a:41:b0:71:
         5e:1d:13:4b:40:1d:1f:f1:62:90:18:81:e3:63:e0:65:4d:9a:
         26:8e:f2:d8:44:69:4d:a7:30:28:b5:3c:99:41:4d:74:e9:41:
         bd:1b:bb:09:39:1f:3c:3b:18:7c:f9:a0:da:3b:b0:6b:26:e9:
         26:6b:d0:6e:19:d0:90:78:93:2a:2c:9d:3e:c3:8f:2f:3f:ae:
         2e:8d:31:7a:49:62:2b:46:3a:01:62:ec:fd:2d:1c:1f:79:e9:
         1d:79:4f:d5:f6:26:5c:3b:5a:68:bb:d5:42:f7:1a:ac:7f:27:
         7c:e8:a6:43:fd:b9:3f:97:1b:ef:54:5b:97:8d:30:97:37:f3:
         07:1c:45:f8:96:bb:c1:c2:cd:74:ac:83:bb:a0:b1:41:77:1c:
         fc:ea:dc:bf:23:ef:42:99:44:9a:eb:ac:b9:90:ae:21:69:dd:
         f3:98:32:09:a1:cb:f2:54:25:ce:73:ef:e3:d0:65:d0:bd:f0:
         2e:d6:1e:1b:3b:99:92:85:3d:93:13:08:33:82:a8:ce:72:59:
         dd:a3:18:db:95:00:0e:75:7e:5f:c4:e6:88:8d:05:c9:3a:f1:
         7a:d4:c6:00:1a:6f:ec:85:7f:12:21:d7:36:17:28:7a:59:cd:
         a5:36:d3:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97M4AWvkUaVD+cEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk
ZTZjMWNkY2EtY2I1OS00ZjgwLWIwZTMtMjU0ZDdkMmU0YWNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVUR17wL61So/zl1BqPr2NeF4BYkKrdd88uS
a6GON6AWBrmlPpVZdMwA4hNYee15Au/p/r+CBlkl0U/zPqHtVmOfM+BHFRJJp9Ia
j5Im4UHM9Jetx/bMAchaoE/uX4Ri9nBIhFktaEWOXuymlEHs2VZnJAMuoCYegBKs
at++gupM/ozNkVw5bnZA9B7j9/oTDH7Pmi/CiPd6RiRqrymXW+QkG+6ALxs5Ckla
PY89G6njktbAtBHZ6E4vtnOyLcMSXoJyTWfzwo5V+XTpUup0oBanKNvRyhcUh3MM
5adTjWzaHycM/JvH7jZ4CAZIIKGuU5saQ6OT+6NNITkNH8ihMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE3EmISJP9R3xIzn8zJ0ySLIQ3C/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvODk1MDJlMzEtZmIxMy0z
ODI3LWFlYzQtN2Q1YTUxNjBhMDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm+gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIwUfOgs58fjVsnTk0YTCkGwcV4dE0tAHR/xYpAYgeNj4GVNmiaO8thE
aU2nMCi1PJlBTXTpQb0buwk5Hzw7GHz5oNo7sGsm6SZr0G4Z0JB4kyosnT7Djy8/
ri6NMXpJYitGOgFi7P0tHB956R15T9X2Jlw7Wmi71UL3Gqx/J3zopkP9uT+XG+9U
W5eNMJc38wccRfiWu8HCzXSsg7ugsUF3HPzq3L8j70KZRJrrrLmQriFp3fOYMgmh
y/JUJc5z7+PQZdC98C7WHhs7mZKFPZMTCDOCqM5yWd2jGNuVAA51fl/E5oiNBck6
8XrUxgAab+yFfxIh1zYXKHpZzaU201M=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:36:47 2025 by rpki-client