Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9a8acdd4-2224-3b0a-9518-8db193f8ab57.roa
File:                     9a8acdd4-2224-3b0a-9518-8db193f8ab57.roa (raw, json)
Hash identifier:          ucR1n3Gm6TvmZWaAyg53FB53n0442dFQqakLsdG4mw8=
Subject key identifier:   FB:4A:FE:21:9D:4A:4A:D3:FB:14:37:83:BA:D4:36:3B:AE:43:C9:23
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F58CD60AEC63011AF0B459880
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9a8acdd4-2224-3b0a-9518-8db193f8ab57.roa
Signing time:             Wed 30 Sep 2026 13:00:13 +0000
ROA not before:           Wed 30 Sep 2026 13:00:13 +0000
ROA not after:            Tue 29 Dec 2026 14:00:13 +0000
asID:                     7018
IP address blocks:        142.111.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:cd:60:ae:c6:30:11:af:0b:45:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 30 13:00:13 2026 GMT
            Not After : Dec 29 14:00:13 2026 GMT
        Subject: CN=497fea10-676d-4278-b31f-7a7bc0f53734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:10:a2:4d:59:a9:e5:45:d2:cc:d6:83:bd:aa:
                    a0:b8:41:0e:20:d6:6c:07:50:3d:b0:e5:eb:cc:22:
                    f2:4e:a4:64:78:cf:ee:98:8a:75:69:1b:54:48:db:
                    58:bf:58:50:29:77:e1:97:c8:4d:bf:96:2c:9a:07:
                    8e:bd:a6:63:f6:02:f7:3d:c3:10:a8:4a:a9:96:5f:
                    fb:14:77:f6:53:f5:62:3a:ae:f6:72:b4:da:37:8f:
                    94:ed:45:b4:75:24:21:4a:ab:de:12:84:3f:c9:70:
                    61:90:32:3f:b2:20:e3:e3:d1:60:25:2b:d0:24:8d:
                    b1:9f:f7:81:b3:d6:79:ce:56:dc:fc:9e:fa:66:3a:
                    ed:8c:24:d8:5e:87:a8:64:43:be:3c:f3:5b:cd:fa:
                    b8:8b:2b:40:a2:1c:9c:b5:10:35:0f:d0:be:4f:c7:
                    fc:7d:44:a4:ba:7f:e9:a9:c6:fa:2d:34:25:36:c1:
                    e5:f4:35:91:21:64:88:73:83:f6:ea:ba:08:40:90:
                    30:b1:48:6a:11:e3:d7:e6:73:e2:f5:db:59:80:48:
                    69:2d:7c:9f:fe:ed:40:e2:2f:37:02:e9:c6:4e:9f:
                    7b:b7:83:c9:2d:35:72:68:4c:5b:99:7e:c9:6d:ef:
                    32:de:11:14:d5:ad:3d:04:65:5d:2c:f7:2f:3f:98:
                    74:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:4A:FE:21:9D:4A:4A:D3:FB:14:37:83:BA:D4:36:3B:AE:43:C9:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9a8acdd4-2224-3b0a-9518-8db193f8ab57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:78:b3:e7:88:99:a4:78:0e:32:44:47:97:32:c3:8d:c4:2c:
         6d:02:00:f8:81:80:50:51:4a:38:05:1a:dd:9a:ed:04:da:d5:
         f6:ce:b2:10:ca:27:3a:a7:28:56:c2:b3:d6:2d:42:69:23:86:
         bf:0c:76:e3:a6:80:a7:7c:b3:b1:37:52:5e:40:fd:74:aa:d2:
         89:a4:46:e0:42:e8:4d:ca:35:9b:83:c2:b8:15:f7:60:17:69:
         78:a5:e2:0f:5f:0f:a3:d9:4f:4d:22:3f:85:8c:1d:0c:ee:67:
         1c:8e:f1:26:ff:79:29:05:41:b9:d5:3e:d2:ee:c8:6b:b8:cc:
         3a:ff:a5:9d:f7:10:b0:62:65:f4:a0:97:f2:5c:40:13:2c:54:
         19:b2:3c:d2:47:db:5c:7f:44:04:de:c7:43:b0:1c:d3:88:fc:
         02:1d:ae:bd:0a:e0:e9:e5:ca:76:f0:14:0e:2a:ad:79:0a:7d:
         a2:2a:c5:d3:3d:a4:1a:4d:e8:94:38:e5:d3:cc:f3:95:a4:6a:
         70:1b:b4:74:b1:c1:5b:cb:7e:5a:67:64:78:8e:18:7d:89:29:
         1e:0d:b6:f1:cb:29:8e:5c:30:79:40:5c:58:f5:bf:e9:ef:06:
         87:ec:6a:6e:e8:73:27:6f:b0:4e:93:9a:a1:18:f4:3f:ca:ec:
         3f:d3:cc:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9YzWCuxjARrwtFmIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk
NDk3ZmVhMTAtNjc2ZC00Mjc4LWIzMWYtN2E3YmMwZjUzNzM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhCiTVmp5UXSzNaDvaqguEEOINZsB1A9sOXr
zCLyTqRkeM/umIp1aRtUSNtYv1hQKXfhl8hNv5YsmgeOvaZj9gL3PcMQqEqpll/7
FHf2U/ViOq72crTaN4+U7UW0dSQhSqveEoQ/yXBhkDI/siDj49FgJSvQJI2xn/eB
s9Z5zlbc/J76ZjrtjCTYXoeoZEO+PPNbzfq4iytAohyctRA1D9C+T8f8fUSkun/p
qcb6LTQlNsHl9DWRIWSIc4P26roIQJAwsUhqEePX5nPi9dtZgEhpLXyf/u1A4i83
AunGTp97t4PJLTVyaExbmX7Jbe8y3hEU1a09BGVdLPcvP5h01wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPtK/iGdSkrT+xQ3g7rUNjuuQ8kjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOWE4YWNkZDQtMjIyNC0z
YjBhLTk1MTgtOGRiMTkzZjhhYjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm9GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEV4s+eImaR4DjJER5cyw43ELG0CAPiBgFBRSjgFGt2a7QTa1fbOshDK
JzqnKFbCs9YtQmkjhr8MduOmgKd8s7E3Ul5A/XSq0omkRuBC6E3KNZuDwrgV92AX
aXil4g9fD6PZT00iP4WMHQzuZxyO8Sb/eSkFQbnVPtLuyGu4zDr/pZ33ELBiZfSg
l/JcQBMsVBmyPNJH21x/RATex0OwHNOI/AIdrr0K4OnlynbwFA4qrXkKfaIqxdM9
pBpN6JQ45dPM85WkanAbtHSxwVvLflpnZHiOGH2JKR4NtvHLKY5cMHlAXFj1v+nv
Bofsam7ocydvsE6TmqEY9D/K7D/TzJY=
-----END CERTIFICATE-----
Generated at Mon Oct 5 08:26:55 2026 by rpki-client