Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c4fcf523-9805-345b-a9b7-8f09b62dbc0f.roa
File:                     c4fcf523-9805-345b-a9b7-8f09b62dbc0f.roa (raw, json)
Hash identifier:          4CWf/DRQhhDeip8mSt9pAmPi0n9+wz8hzEh+lpyZUhI=
Subject key identifier:   CE:13:44:BB:B5:F2:86:D3:24:EE:27:2C:62:62:F0:E0:35:5D:1F:D7
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F331D28824C3493D5C17F8D20
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c4fcf523-9805-345b-a9b7-8f09b62dbc0f.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     61317
IP address blocks:        143.109.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:28:82:4c:34:93:d5:c1:7f:8d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=12084f29-f60f-4758-9501-57ee94bd44b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:07:46:43:fd:7f:52:bd:25:03:13:d1:9b:1b:
                    81:41:ee:42:f5:8d:d6:c8:71:23:fc:0a:02:5f:20:
                    93:4d:6e:d3:74:36:97:c4:7f:90:ec:16:da:d5:ff:
                    25:7a:6f:db:98:f1:c2:60:f9:82:67:42:bd:c1:17:
                    4d:3c:6a:6f:34:e3:e2:9b:67:28:c7:10:76:cc:f8:
                    29:9c:1c:3d:5e:26:6f:64:0d:95:08:e0:3e:71:8f:
                    e0:67:60:74:22:e3:07:d4:20:da:aa:32:a0:e8:ab:
                    25:f7:55:d7:ef:63:c8:8a:0f:d2:00:11:0e:66:c1:
                    d1:e7:60:42:a1:2e:8a:ba:e8:99:a1:75:84:79:30:
                    86:b8:08:9c:94:dc:ed:29:1f:3b:7c:9b:fe:74:77:
                    96:0c:e7:bb:68:e0:a2:16:8b:a5:c9:03:fa:b7:97:
                    ac:2d:8e:9e:1f:39:95:36:18:dd:6b:df:6a:39:dd:
                    cd:9d:00:1d:51:a0:dc:eb:06:d9:ea:75:d7:60:1e:
                    d2:89:3c:1e:33:06:d4:a6:b1:07:84:37:51:10:e8:
                    82:9f:12:ef:45:2f:7c:05:b2:f6:f8:4e:10:e7:d6:
                    e5:32:fa:e4:a6:aa:0a:5b:06:b9:59:8f:0a:00:d9:
                    5d:ca:21:c3:fb:a7:2e:8c:27:ae:be:99:07:69:19:
                    e6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:13:44:BB:B5:F2:86:D3:24:EE:27:2C:62:62:F0:E0:35:5D:1F:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c4fcf523-9805-345b-a9b7-8f09b62dbc0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.109.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:6b:b5:e8:00:37:84:07:9c:cc:59:ed:b3:0e:04:62:90:2c:
         ed:6e:74:82:4f:f9:9e:3c:30:16:bd:bd:e6:50:6d:a5:7c:0b:
         28:e5:8f:32:55:f8:28:b2:66:74:2e:a0:a6:8b:a5:e7:32:91:
         6c:92:88:18:ba:3b:77:6f:58:48:4b:c8:93:8f:9f:99:e9:cd:
         30:33:4f:45:57:89:93:18:3e:36:26:12:58:59:88:3b:ba:3a:
         5e:3b:3c:ba:20:36:86:aa:dd:07:f7:f1:8e:0f:fa:22:85:c1:
         de:77:b2:7a:e7:a4:2c:b0:a6:6a:66:bc:b9:c5:d4:6b:a4:d8:
         35:84:32:5b:f5:31:b4:41:6d:8b:8c:4c:ae:42:b9:4b:c2:90:
         a9:21:d5:6a:e4:77:70:95:12:16:d7:62:76:94:28:f7:af:d8:
         14:c4:28:cc:11:e3:51:1e:e6:ee:1e:a2:c6:35:63:de:29:e2:
         01:a4:72:98:d3:ee:4f:1f:22:90:2d:6b:31:29:44:45:6b:24:
         a1:17:59:32:1c:14:95:f1:a7:c1:10:93:c9:88:1e:9b:80:93:
         4a:b6:ca:f7:36:61:51:64:c5:d3:ed:27:ce:ea:41:8c:07:54:
         58:a7:ae:a0:cb:b5:e3:b2:ff:71:c1:ea:e4:60:1e:97:48:e0:
         07:60:c6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:15:47 2026 by rpki-client