Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b596a15f-1fca-3b4c-afe6-06b1293db100.roa
File:                     b596a15f-1fca-3b4c-afe6-06b1293db100.roa (raw, json)
Hash identifier:          oh8HxPQTP9L3CVyLFl+4Fog5IoCc/EgC3T1a2WifDpI=
Subject key identifier:   AB:60:99:B1:D8:DE:3F:53:0D:F3:49:E1:03:D1:1F:34:93:E1:35:EB
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F46A7EB8C919A115DB4CB2380
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b596a15f-1fca-3b4c-afe6-06b1293db100.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        142.111.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:eb:8c:91:9a:11:5d:b4:cb:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=5f00e961-9006-4d59-bc94-fd813612993c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7a:9a:1f:4e:ad:33:09:98:86:1e:eb:06:51:
                    22:27:1c:b7:20:36:29:d8:b5:43:49:31:39:7f:83:
                    36:08:4b:97:f2:35:74:91:92:c6:43:39:f3:21:43:
                    82:8c:be:0b:c4:dd:29:80:21:30:a9:59:2b:5a:6a:
                    a2:0d:d6:15:85:be:56:e5:e5:8b:80:d7:be:71:c4:
                    24:5c:f4:b4:d9:ad:d8:ea:6e:b9:e9:56:7c:93:75:
                    91:65:18:d3:b1:23:06:71:df:11:74:50:9f:e8:54:
                    d5:0c:0b:b2:4b:d4:87:8c:d1:55:29:ed:fe:8b:b6:
                    63:39:16:12:03:9d:69:b4:a6:68:ea:f5:46:50:12:
                    9a:91:c0:d5:15:10:ec:6a:6b:e2:4d:31:de:49:3d:
                    f9:de:e4:cf:ab:bb:77:62:8d:53:87:30:f7:2f:fe:
                    32:a9:54:62:99:5b:b6:78:7f:a0:70:a7:65:fc:e4:
                    2d:27:9b:be:70:ca:f4:5a:d8:da:52:a4:cf:67:e2:
                    c9:9f:2e:16:c1:8b:d6:ab:19:4c:8c:11:34:cf:f0:
                    5c:45:4a:21:1e:ac:1f:f3:f4:4f:d4:60:02:ea:e1:
                    92:8a:c3:28:70:e1:5f:06:72:7b:b6:50:12:1a:b2:
                    a0:54:17:d7:be:c7:ec:5b:bd:2f:d4:d2:f1:1d:ef:
                    2d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:60:99:B1:D8:DE:3F:53:0D:F3:49:E1:03:D1:1F:34:93:E1:35:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b596a15f-1fca-3b4c-afe6-06b1293db100.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:87:00:4f:a3:c9:24:ef:de:84:8e:0d:5e:b8:00:d8:8c:e6:
         d5:02:26:4f:38:55:fb:9d:fa:5e:e5:8c:98:0f:bf:07:75:26:
         11:fd:1b:01:12:5f:75:b7:46:c7:f0:b0:9a:34:41:ab:ef:59:
         fa:ae:50:1b:28:d8:a7:2c:a2:a4:c5:ad:03:7a:56:37:b6:10:
         31:01:ed:b1:ea:0c:06:2e:00:4a:a6:58:73:64:88:da:ad:a9:
         e3:ae:aa:2f:11:b3:2c:22:49:ad:1a:25:e4:d4:b1:b2:46:75:
         cf:dc:f4:7c:bf:48:8c:e0:94:f1:aa:08:d6:3b:73:38:8a:0d:
         77:9d:1c:0a:9b:17:6c:4c:19:89:65:92:45:3b:f8:c9:64:ec:
         80:c7:07:c1:42:a8:45:1b:2d:e5:d1:07:23:91:d6:46:01:81:
         09:54:61:bb:7d:88:9a:7d:6b:70:86:15:e3:d9:d6:80:c1:39:
         49:84:24:44:c1:f1:dc:0f:14:28:c4:f4:49:9b:47:c6:4d:94:
         c9:1e:9d:3c:50:48:a8:ab:9f:16:e5:4e:cf:6d:79:46:fa:6d:
         dd:1c:3b:a2:66:b1:b2:b7:b9:7b:b1:7b:44:24:c8:44:eb:42:
         2f:c9:58:94:04:6f:6b:2c:f1:23:f8:6d:d4:a8:4d:89:4c:16:
         f5:ea:e9:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp+uMkZoRXbTLI4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk
NWYwMGU5NjEtOTAwNi00ZDU5LWJjOTQtZmQ4MTM2MTI5OTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXqaH06tMwmYhh7rBlEiJxy3IDYp2LVDSTE5
f4M2CEuX8jV0kZLGQznzIUOCjL4LxN0pgCEwqVkrWmqiDdYVhb5W5eWLgNe+ccQk
XPS02a3Y6m656VZ8k3WRZRjTsSMGcd8RdFCf6FTVDAuyS9SHjNFVKe3+i7ZjORYS
A51ptKZo6vVGUBKakcDVFRDsamviTTHeST353uTPq7t3Yo1ThzD3L/4yqVRimVu2
eH+gcKdl/OQtJ5u+cMr0WtjaUqTPZ+LJny4WwYvWqxlMjBE0z/BcRUohHqwf8/RP
1GAC6uGSisMocOFfBnJ7tlASGrKgVBfXvsfsW70v1NLxHe8t1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKtgmbHY3j9TDfNJ4QPRHzST4TXrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYjU5NmExNWYtMWZjYS0z
YjRjLWFmZTYtMDZiMTI5M2RiMTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm9FMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEiHAE+jySTv3oSODV64ANiM5tUCJk84Vfud+l7ljJgPvwd1JhH9GwES
X3W3RsfwsJo0QavvWfquUBso2KcsoqTFrQN6Vje2EDEB7bHqDAYuAEqmWHNkiNqt
qeOuqi8RsywiSa0aJeTUsbJGdc/c9Hy/SIzglPGqCNY7cziKDXedHAqbF2xMGYll
kkU7+Mlk7IDHB8FCqEUbLeXRByOR1kYBgQlUYbt9iJp9a3CGFePZ1oDBOUmEJETB
8dwPFCjE9EmbR8ZNlMkenTxQSKirnxblTs9teUb6bd0cO6JmsbK3uXuxe0QkyETr
Qi/JWJQEb2ss8SP4bdSoTYlMFvXq6TM=
-----END CERTIFICATE-----
Generated at Fri Sep 25 05:21:53 2026 by rpki-client