Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/324dd731-3f7c-3953-9041-61e37dbe74af.roa
File:                     324dd731-3f7c-3953-9041-61e37dbe74af.roa (raw, json)
Hash identifier:          Dal/jUHF58dOfdBppx8vUM8GdCFZRJhDP330wm8Xfxk=
Subject key identifier:   E4:EC:8F:AF:2A:CE:25:D9:FB:70:D0:94:F4:AC:6B:D9:5A:BB:27:69
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F4986F9D757DDA2483F095780
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/324dd731-3f7c-3953-9041-61e37dbe74af.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7018
IP address blocks:        142.111.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:f9:d7:57:dd:a2:48:3f:09:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4551a8a4-130d-4d26-8270-a3a25de4ff79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:61:d7:e0:b2:35:36:22:df:5a:d9:67:d3:d8:
                    ab:1e:00:94:de:7e:31:1b:62:f8:be:46:d5:4a:1e:
                    ce:16:33:26:86:c8:a5:55:e7:b5:dc:12:68:08:2e:
                    a6:8e:0d:29:15:a9:18:1e:8f:2a:14:0e:df:a6:4b:
                    19:f8:59:06:2d:87:cf:21:7d:7d:4b:8b:6f:4c:28:
                    08:99:0e:df:3a:eb:a5:1a:22:12:d5:c5:59:af:8c:
                    37:8d:26:42:fe:61:58:b0:1f:d9:22:76:da:68:e7:
                    7e:78:bc:1a:fa:84:c4:5e:52:7c:07:58:e0:2b:ed:
                    07:6a:8a:69:e9:a8:5f:da:ae:ab:83:b3:12:27:9a:
                    58:8a:8a:95:99:33:e0:35:44:cb:df:9f:70:35:87:
                    ca:fd:2d:2a:69:f8:ad:23:0a:5d:c6:00:79:5f:08:
                    a2:1a:39:9a:87:13:4b:bf:8f:91:7d:75:b4:d2:aa:
                    ef:61:a7:9b:a0:d3:d7:2f:41:91:12:d3:ee:ad:df:
                    2b:bc:b9:2e:8b:45:3a:ab:5d:11:9c:32:a5:1d:0a:
                    7c:3f:6c:b9:ec:7b:ff:c6:13:0d:87:ea:ae:65:7b:
                    45:29:30:5f:06:f7:c0:24:3b:c2:c9:5f:74:60:22:
                    e6:ae:2e:c9:3a:1b:49:96:ee:cb:e1:93:a8:89:6c:
                    5b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EC:8F:AF:2A:CE:25:D9:FB:70:D0:94:F4:AC:6B:D9:5A:BB:27:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/324dd731-3f7c-3953-9041-61e37dbe74af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:b5:0f:78:69:cc:0a:41:a4:a6:1b:98:9b:52:66:72:8a:ec:
         8b:8d:27:e2:f3:64:e2:1f:09:a9:ac:3f:d4:e7:08:7f:ed:8f:
         1a:f4:b1:3a:b7:da:01:a1:44:24:2d:8b:16:c9:ca:a1:e1:85:
         c3:39:94:5c:fe:d2:ce:b9:c9:29:e7:7d:cd:47:67:54:f7:ec:
         b0:97:7c:6f:29:50:a5:6a:db:1d:b4:9e:02:f1:63:e5:74:5b:
         d3:6e:2d:db:87:c6:3d:1b:c3:71:6c:a7:49:f2:b0:b2:84:0d:
         86:d1:c0:7f:aa:ec:86:0c:08:d9:13:02:ac:36:de:d1:6d:f4:
         6f:5e:6e:af:d9:f5:25:4f:8b:71:11:06:75:35:47:73:fb:94:
         41:9f:4b:8b:01:95:71:81:75:80:c2:06:74:55:7d:db:6c:52:
         2e:94:3d:53:1c:e9:55:d2:af:8c:d8:ae:a3:13:7a:0d:62:79:
         90:54:c2:0f:9b:66:af:37:6b:9a:4e:17:90:3b:16:87:e4:3b:
         ca:58:4a:7d:4a:3f:27:0e:f8:2b:99:99:21:9b:7c:4d:c6:03:
         95:f3:b9:d2:80:e8:09:0d:0e:47:30:c3:99:2a:5d:7b:b8:75:
         38:19:5b:51:07:fd:ba:eb:e4:9d:89:df:42:09:89:d5:43:57:
         4b:c6:7d:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhvnXV92iSD8JV4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NDU1MWE4YTQtMTMwZC00ZDI2LTgyNzAtYTNhMjVkZTRmZjc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWHX4LI1NiLfWtln09irHgCU3n4xG2L4vkbV
Sh7OFjMmhsilVee13BJoCC6mjg0pFakYHo8qFA7fpksZ+FkGLYfPIX19S4tvTCgI
mQ7fOuulGiIS1cVZr4w3jSZC/mFYsB/ZInbaaOd+eLwa+oTEXlJ8B1jgK+0Haopp
6ahf2q6rg7MSJ5pYioqVmTPgNUTL359wNYfK/S0qafitIwpdxgB5XwiiGjmahxNL
v4+RfXW00qrvYaeboNPXL0GREtPurd8rvLkui0U6q10RnDKlHQp8P2y57Hv/xhMN
h+quZXtFKTBfBvfAJDvCyV90YCLmri7JOhtJlu7L4ZOoiWxbIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOTsj68qziXZ+3DQlPSsa9lauydpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMzI0ZGQ3MzEtM2Y3Yy0z
OTUzLTkwNDEtNjFlMzdkYmU3NGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm94MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACG1D3hpzApBpKYbmJtSZnKK7IuNJ+LzZOIfCamsP9TnCH/tjxr0sTq3
2gGhRCQtixbJyqHhhcM5lFz+0s65ySnnfc1HZ1T37LCXfG8pUKVq2x20ngLxY+V0
W9NuLduHxj0bw3Fsp0nysLKEDYbRwH+q7IYMCNkTAqw23tFt9G9ebq/Z9SVPi3ER
BnU1R3P7lEGfS4sBlXGBdYDCBnRVfdtsUi6UPVMc6VXSr4zYrqMTeg1ieZBUwg+b
Zq83a5pOF5A7FofkO8pYSn1KPycO+CuZmSGbfE3GA5XzudKA6AkNDkcww5kqXXu4
dTgZW1EH/brr5J2J30IJidVDV0vGfT8=
-----END CERTIFICATE-----
Generated at Mon Sep 28 12:58:46 2026 by rpki-client