Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/598af8ac-86a0-3161-bc94-c07de93e1d30.roa
File:                     598af8ac-86a0-3161-bc94-c07de93e1d30.roa (raw, json)
Hash identifier:          CaiwpQBKEuqx/G6Pu7vNqzPnmiQge16oRJnv+0ZtKDM=
Subject key identifier:   60:43:E6:C2:7F:AF:FF:BE:9D:F7:A0:2E:DC:50:31:FD:62:E2:B4:F8
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F331D2709073744A43F708700
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/598af8ac-86a0-3161-bc94-c07de93e1d30.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     8881
IP address blocks:        142.111.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:27:09:07:37:44:a4:3f:70:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=e2298f3e-3ab3-4e1a-bcfd-1a5d5c1780b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a6:cd:ad:65:b2:7c:af:cb:b6:91:69:3b:15:
                    80:b9:28:05:a4:08:06:7c:8c:06:b7:cf:a0:af:d4:
                    47:3c:be:4d:13:ce:d8:15:42:94:65:f5:25:c3:57:
                    7f:1a:53:91:77:06:4a:2a:23:0e:9f:b6:2b:c8:bc:
                    fa:68:29:39:ce:a3:c1:8e:7d:91:de:15:b7:20:b8:
                    5f:23:23:1d:8f:29:46:e8:63:10:2e:ed:a7:d5:56:
                    54:f3:68:59:78:b7:95:bc:c2:6c:af:1b:45:2c:25:
                    32:38:9d:e6:ef:bb:96:18:79:b5:cd:e4:98:08:fa:
                    12:a3:6e:d2:75:6b:d4:6c:d8:cc:b9:7e:b9:5f:0e:
                    83:dd:45:14:b2:f9:f3:16:f8:bb:44:99:8d:52:be:
                    5d:60:b9:11:d6:f8:28:50:b1:8e:c9:f1:f0:3b:9e:
                    b2:9d:6a:53:3d:8d:85:21:18:26:7d:dc:6a:f0:f3:
                    d0:6d:b5:0d:41:0f:d0:f4:59:bc:2d:c8:13:7d:10:
                    61:e4:aa:ff:c2:63:c4:a5:11:92:05:dd:d3:1c:7c:
                    42:88:fe:ab:7c:37:41:8a:ea:6e:0c:8d:d3:c8:74:
                    54:8d:36:b5:71:da:de:19:87:0e:94:7e:3a:f7:16:
                    69:c2:ec:22:1b:8d:4e:d2:20:8f:7a:02:ab:6f:74:
                    df:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:43:E6:C2:7F:AF:FF:BE:9D:F7:A0:2E:DC:50:31:FD:62:E2:B4:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/598af8ac-86a0-3161-bc94-c07de93e1d30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:14:ea:36:e6:bf:8d:4a:29:eb:80:11:3c:d4:c9:d1:d1:1c:
         9c:e2:57:4c:6c:e7:fb:c7:6d:6e:3c:9e:ef:f5:03:2f:b3:4f:
         e7:c0:07:2b:28:38:47:37:12:bf:b5:bf:b7:c9:27:5a:b2:53:
         b0:ef:c0:62:81:3f:d5:25:ae:9c:19:66:6f:7e:c9:66:4f:9e:
         12:a1:a9:3a:df:79:7b:e8:2f:34:60:c6:f5:b6:91:f5:23:78:
         49:7a:b5:36:6c:3d:f4:6c:f0:0d:63:ee:f7:01:76:87:e2:7b:
         17:69:d6:7e:bf:c9:51:55:17:02:79:1e:67:85:b2:ea:be:77:
         1f:bb:66:64:d9:0e:da:23:33:59:ea:f9:81:61:d5:33:19:8f:
         62:87:45:69:e9:39:a8:04:24:f0:46:95:25:5e:40:30:a6:38:
         1a:fb:3d:37:14:78:ca:0f:70:54:6d:43:9b:15:76:10:17:15:
         56:4d:fe:be:38:97:df:b5:4e:db:d0:5e:66:2a:cf:bc:23:25:
         b8:5c:70:d3:96:6a:48:32:f4:10:52:f0:9c:9f:ca:10:48:0a:
         b4:12:4d:d5:2c:ed:13:df:2b:d4:f5:e7:f0:31:c2:ac:22:ae:
         8f:0c:b7:40:0a:10:aa:6f:5a:f0:a0:c1:1e:68:1a:52:47:3f:
         19:c6:33:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:43:29 2026 by rpki-client