Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c52f117a-469d-383e-b083-c0bfe0ff7d0e.roa
File:                     c52f117a-469d-383e-b083-c0bfe0ff7d0e.roa (raw, json)
Hash identifier:          g6evfhFZ0BfCAhG56aAlHmwTYlleHBpCLQ95Jj0sIuc=
Subject key identifier:   81:78:9B:30:94:F5:D6:D0:51:22:F1:0E:37:58:6E:3E:63:05:C0:6A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B821D83984FA131092A987780
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c52f117a-469d-383e-b083-c0bfe0ff7d0e.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     6939
IP address blocks:        142.111.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:83:98:4f:a1:31:09:2a:98:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=1c5c1ae6-6793-407a-8a6f-16cd16404043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e2:2d:4b:de:d9:c9:fa:15:fd:37:e2:f9:a1:
                    63:8d:b0:cf:27:cf:1b:60:ac:d2:48:34:01:59:43:
                    9e:03:b1:f7:38:72:da:16:ea:53:e2:a3:fc:a4:29:
                    60:e5:b8:10:ff:0a:13:fe:3c:b1:4b:f7:d4:5a:31:
                    ed:ba:19:f9:e2:40:7e:15:36:16:d2:3f:27:84:01:
                    51:3b:22:79:d7:c1:d3:50:e6:15:82:b7:ef:24:41:
                    7c:bc:2e:57:d3:ac:95:74:0b:5e:12:af:bf:52:21:
                    6b:13:f8:fc:91:8e:d4:7c:1c:5c:74:bc:35:22:b7:
                    a3:e1:0d:d6:de:cd:71:8e:f4:71:59:2a:c8:a5:64:
                    50:de:f7:99:fc:65:c7:45:e7:02:88:5b:13:aa:79:
                    e3:e1:1c:f0:47:af:0f:1c:5c:1d:ad:30:1b:2f:21:
                    07:59:55:c7:42:ce:53:8f:d2:40:3f:fc:d8:05:c4:
                    d1:57:76:de:2d:57:b8:85:a8:4a:90:57:5e:74:92:
                    33:7f:cc:17:4c:91:c6:26:8f:d1:2c:84:69:08:ac:
                    92:ac:76:dd:13:07:5a:b0:bb:2c:96:df:19:7b:af:
                    2f:92:dc:0a:89:bd:ef:d6:af:6a:43:70:e5:ed:82:
                    a6:a8:49:5f:d4:5c:69:93:f6:9c:cd:d6:29:c8:f8:
                    8a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:78:9B:30:94:F5:D6:D0:51:22:F1:0E:37:58:6E:3E:63:05:C0:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c52f117a-469d-383e-b083-c0bfe0ff7d0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:64:0d:0a:d7:ef:d9:ee:d5:33:89:7d:4d:53:72:44:e1:d7:
         15:54:82:7c:a4:23:d3:2e:39:19:48:11:b0:18:1f:9b:e8:80:
         a1:95:e0:d6:9c:c8:fd:f9:5a:85:c3:41:5a:ec:90:28:93:77:
         1e:44:50:37:00:d8:c7:4f:f4:7d:38:72:ee:5e:9c:88:57:28:
         ed:fa:a8:a5:98:47:31:a4:aa:06:9c:eb:f3:b4:da:0e:b6:f1:
         8b:28:02:b5:29:6b:2d:a4:99:2e:5a:ed:c0:2b:ca:7b:5c:8b:
         98:00:16:ec:cf:e0:7b:65:5d:c5:fd:cc:b2:b6:50:06:4f:c0:
         2c:20:99:12:aa:38:8e:aa:64:4b:8f:fb:0a:28:6c:21:46:61:
         6a:27:80:81:dd:6a:a9:41:b7:f9:86:2b:01:1b:33:27:93:d7:
         7b:d9:70:a3:69:c1:e8:3f:14:8b:09:01:91:d5:ca:69:36:69:
         20:a4:58:ba:2a:24:c7:8b:bd:fb:31:f6:63:07:33:24:1f:6e:
         1f:7f:0b:bd:9d:85:f3:98:b8:50:46:3c:11:a7:37:18:76:88:
         f1:f1:44:01:71:4b:98:e9:96:29:41:1b:1e:ab:10:ec:c8:a5:
         c4:fb:c6:ef:8d:8a:39:10:4c:28:19:9c:ec:e7:90:c1:13:b3:
         04:7b:ac:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:31:26 2025 by rpki-client