Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d349f1b5-4392-3e90-923c-6cb7da6ecfcc.roa
File:                     d349f1b5-4392-3e90-923c-6cb7da6ecfcc.roa (raw, json)
Hash identifier:          IwjVPMHj4IKPtuDEeBffwZMxLAQm6pIIPjU/m51iXfc=
Subject key identifier:   9B:E3:61:56:9A:50:3D:0E:BD:8E:8F:85:A3:D6:23:B5:06:C6:4E:D3
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F497E361F772C0432D9F0DE00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d349f1b5-4392-3e90-923c-6cb7da6ecfcc.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     18779
IP address blocks:        142.111.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7e:36:1f:77:2c:04:32:d9:f0:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=046a431e-53ac-449d-a4f1-428aa649bae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:46:2d:cb:86:64:e2:f0:56:81:4a:fb:ac:53:
                    44:62:5b:34:66:0e:01:d6:9c:5f:63:35:e2:04:4d:
                    cb:a6:02:df:1f:bb:07:43:20:5a:4e:f6:fd:1f:2f:
                    a3:24:f7:62:c9:f3:f0:be:45:8b:36:92:15:e4:cd:
                    50:d3:0b:d2:58:1c:5b:46:18:0f:b3:4a:74:92:3b:
                    6c:af:e7:32:a8:8c:d5:66:17:af:c7:3d:37:47:9c:
                    33:4a:e8:26:d4:74:0c:9e:2e:31:d0:07:ef:e6:cc:
                    4b:2b:53:5b:8c:7c:c3:62:a0:d1:86:d2:f0:73:d6:
                    b6:1b:c2:10:be:97:fc:2a:bb:22:82:5d:75:bf:b3:
                    22:8c:d9:81:83:15:7a:c4:e0:9d:7f:3d:a0:87:1f:
                    a7:a0:c4:82:8b:fd:5f:af:c5:af:4d:d7:fd:8d:ee:
                    5b:ed:25:75:52:d8:1f:9e:b9:4c:e0:c7:d4:19:77:
                    06:39:7e:1b:7c:d3:8f:41:74:16:fe:da:d3:b7:98:
                    da:22:a9:78:bf:ac:8e:b2:7a:2b:ed:df:5d:35:1c:
                    a9:44:2d:87:ea:12:f1:cf:e9:fe:d1:9d:4c:85:51:
                    aa:03:e2:d7:89:c2:fd:80:81:43:b5:f1:cc:9d:7c:
                    64:b5:83:58:8d:17:f3:01:97:25:8b:49:c1:cf:79:
                    19:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E3:61:56:9A:50:3D:0E:BD:8E:8F:85:A3:D6:23:B5:06:C6:4E:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d349f1b5-4392-3e90-923c-6cb7da6ecfcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:c8:fd:92:a7:99:43:30:fe:1c:50:ea:48:3c:80:6b:cf:f3:
         3c:64:c0:53:b9:ab:92:ba:f4:93:d2:5b:00:76:6e:1c:9a:9c:
         50:a4:b8:f6:fd:74:d2:60:7f:6b:bf:fe:fc:61:3d:e8:4c:fc:
         d4:d2:f5:46:2f:34:6c:35:f4:63:1a:61:4f:54:92:10:23:96:
         b9:b4:98:40:15:da:ac:37:8e:61:27:2d:86:95:3f:ba:54:88:
         82:f4:a8:c7:75:c1:c0:64:c1:19:38:05:92:1c:d6:62:c6:3c:
         0b:7c:6e:e5:b6:ed:fb:74:09:3a:4d:75:4d:8b:34:6a:d7:cb:
         bd:78:dd:96:16:53:49:95:ee:01:ec:eb:b2:0d:37:87:2b:e0:
         f3:e9:34:2b:9a:b4:ad:04:c6:ed:b5:15:81:ef:ce:c9:9c:fc:
         c7:3a:0b:52:fe:36:1f:35:95:1a:a3:76:1d:8e:f5:1f:29:9a:
         68:25:d3:0a:cf:8d:54:75:db:27:e0:f3:56:8c:c4:17:d5:30:
         5b:68:86:59:4f:aa:fd:3a:de:86:3d:ac:1c:d7:65:0c:2e:a0:
         5c:16:73:e0:b2:42:a5:c5:01:7d:c2:19:2b:60:62:6f:35:4c:
         ce:d6:5b:4d:36:f4:d3:96:e3:c6:42:90:dc:d3:8c:9f:f4:a1:
         1b:f0:87:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfjYfdywEMtnw3gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MDQ2YTQzMWUtNTNhYy00NDlkLWE0ZjEtNDI4YWE2NDliYWU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkYty4Zk4vBWgUr7rFNEYls0Zg4B1pxfYzXi
BE3LpgLfH7sHQyBaTvb9Hy+jJPdiyfPwvkWLNpIV5M1Q0wvSWBxbRhgPs0p0kjts
r+cyqIzVZhevxz03R5wzSugm1HQMni4x0Afv5sxLK1NbjHzDYqDRhtLwc9a2G8IQ
vpf8Krsigl11v7MijNmBgxV6xOCdfz2ghx+noMSCi/1fr8WvTdf9je5b7SV1Utgf
nrlM4MfUGXcGOX4bfNOPQXQW/trTt5jaIql4v6yOsnor7d9dNRypRC2H6hLxz+n+
0Z1MhVGqA+LXicL9gIFDtfHMnXxktYNYjRfzAZcli0nBz3kZ9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJvjYVaaUD0OvY6PhaPWI7UGxk7TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDM0OWYxYjUtNDM5Mi0z
ZTkwLTkyM2MtNmNiN2RhNmVjZmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHLI/ZKnmUMw/hxQ6kg8gGvP8zxkwFO5q5K69JPSWwB2bhyanFCkuPb9
dNJgf2u//vxhPehM/NTS9UYvNGw19GMaYU9UkhAjlrm0mEAV2qw3jmEnLYaVP7pU
iIL0qMd1wcBkwRk4BZIc1mLGPAt8buW27ft0CTpNdU2LNGrXy7143ZYWU0mV7gHs
67INN4cr4PPpNCuatK0Exu21FYHvzsmc/Mc6C1L+Nh81lRqjdh2O9R8pmmgl0wrP
jVR12yfg81aMxBfVMFtohllPqv063oY9rBzXZQwuoFwWc+CyQqXFAX3CGStgYm81
TM7WW0029NOW48ZCkNzTjJ/0oRvwhzQ=
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:47:49 2026 by rpki-client