Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/afa46cb9-3ae2-3b84-9a70-2c3b0d88fa58.roa
File:                     afa46cb9-3ae2-3b84-9a70-2c3b0d88fa58.roa (raw, json)
Hash identifier:          G32hStFBijQEv6EzvyIuy6QWCWMZvXJKzS02LCPiHrU=
Subject key identifier:   5B:4F:18:D6:A3:5F:BA:D8:9B:10:93:0F:56:3F:17:28:7D:5F:7C:09
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584BB727B6B9F47FAA87FD13A740
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/afa46cb9-3ae2-3b84-9a70-2c3b0d88fa58.roa
Signing time:             Sat 01 Nov 2025 13:00:37 +0000
ROA not before:           Sat 01 Nov 2025 13:00:37 +0000
ROA not after:            Fri 30 Jan 2026 14:00:37 +0000
asID:                     214238
IP address blocks:        142.111.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b7:27:b6:b9:f4:7f:aa:87:fd:13:a7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov  1 13:00:37 2025 GMT
            Not After : Jan 30 14:00:37 2026 GMT
        Subject: CN=a3708bf2-3eca-46c0-bee5-1126c7827f1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:93:86:4a:70:d7:eb:02:bf:d1:73:c2:c9:dc:
                    35:8b:60:30:18:00:f2:c1:0a:ff:fa:8c:e4:f0:c9:
                    99:ff:f7:ef:c0:1b:30:f7:1c:1d:f5:4f:ea:48:06:
                    b7:4d:15:39:b0:0c:6d:5f:c5:0c:d3:11:6a:d1:82:
                    b2:ba:42:b5:4c:22:c1:14:79:3e:07:7d:d6:43:82:
                    09:0c:13:2e:3e:23:e6:89:85:a9:8f:07:0f:34:3c:
                    25:76:bf:d5:b6:73:e9:d0:a8:93:00:23:f7:6a:ae:
                    2e:d3:d5:5c:74:9f:05:12:83:e9:27:f6:1c:bf:e4:
                    60:36:20:dd:d5:5a:1a:dd:f9:83:7d:de:74:b2:ee:
                    d4:f9:0c:fb:ab:10:8f:95:7d:0d:74:ea:0b:a3:04:
                    ca:45:51:c7:c1:4a:26:8d:48:06:41:45:0e:0b:0e:
                    2f:ad:5b:25:c1:a6:43:f7:b3:9b:91:f5:92:f8:3b:
                    a3:06:03:3b:7d:1c:67:4b:19:3a:04:59:5c:63:c8:
                    b3:64:ea:34:db:5d:af:32:08:ef:0d:4a:5f:ea:5b:
                    23:23:55:91:59:df:16:e9:3d:8f:7e:cc:11:6b:58:
                    5e:41:ed:95:6e:0a:16:87:1a:4f:26:10:0e:a7:fc:
                    e2:90:3e:90:f3:0f:4e:25:43:dd:3e:56:f0:a0:f8:
                    c9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:4F:18:D6:A3:5F:BA:D8:9B:10:93:0F:56:3F:17:28:7D:5F:7C:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/afa46cb9-3ae2-3b84-9a70-2c3b0d88fa58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:7d:da:c7:1f:bb:7e:3d:fb:b9:10:87:74:42:cf:c0:4d:c7:
         1e:e9:c9:a0:a7:29:d3:38:2f:5e:09:f7:45:29:1f:6a:08:a9:
         34:aa:6c:35:bd:68:7a:ad:16:91:9a:d3:76:c7:82:fe:d1:a4:
         13:98:33:fd:5e:31:22:16:63:28:44:1c:bd:18:4f:2c:e6:ab:
         c6:cc:f7:19:26:f7:bc:12:91:97:db:ab:1f:6a:8a:91:b8:a6:
         e1:bf:2c:13:d0:ca:02:5d:93:4e:f1:92:e7:7f:67:e0:45:cb:
         c5:82:6e:d5:e0:29:b8:87:cf:15:80:d6:13:fc:26:b2:fb:d3:
         b6:92:6f:fe:81:e9:02:20:eb:28:c6:80:53:f7:f2:47:a5:98:
         e0:07:65:95:23:b7:0b:b2:fe:3a:8d:fd:ba:9e:09:41:56:6e:
         5b:93:6d:89:90:f4:79:ce:2d:14:40:2d:d6:9f:dd:4d:1f:e7:
         1e:1c:8a:f2:da:44:e2:62:10:71:73:40:30:55:66:94:82:c2:
         be:dd:6c:18:d3:56:ed:d7:3c:43:58:17:3a:58:2a:58:34:82:
         3d:d0:da:e4:ad:d8:f9:c3:ba:10:55:e3:be:9f:72:34:9f:26:
         4a:c1:28:68:eb:e9:23:e2:a3:8b:a7:0d:4f:4b:e8:6b:ec:50:
         80:18:65:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:35:11 2025 by rpki-client