Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ff6e7d7f-03ef-33ed-9418-2b53a742ec30.roa
File:                     ff6e7d7f-03ef-33ed-9418-2b53a742ec30.roa (raw, json)
Hash identifier:          mRuXHPTv8/cqojTlA9NN22m6Za0UIGm92f4waNbAS0s=
Subject key identifier:   BC:F8:E9:E1:04:EA:4D:C2:10:F7:44:E4:34:46:7D:21:B0:0E:33:12
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584BB19284E2E11E07104B3FDF00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ff6e7d7f-03ef-33ed-9418-2b53a742ec30.roa
Signing time:             Thu 30 Oct 2025 13:00:38 +0000
ROA not before:           Thu 30 Oct 2025 13:00:38 +0000
ROA not after:            Wed 28 Jan 2026 14:00:38 +0000
asID:                     149440
IP address blocks:        168.93.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b1:92:84:e2:e1:1e:07:10:4b:3f:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 30 13:00:38 2025 GMT
            Not After : Jan 28 14:00:38 2026 GMT
        Subject: CN=95f3e5fa-d3cf-4a0c-867c-0a336529867b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:9f:00:95:42:ab:ab:5c:a7:5b:4a:01:af:fb:
                    79:82:d6:80:bf:14:51:e9:e2:c0:d5:c7:c6:40:1d:
                    87:74:02:74:05:94:c9:dd:cf:07:0d:61:4a:2d:ec:
                    02:ea:f8:a1:a1:d1:51:d1:d9:90:9b:2b:58:5f:19:
                    92:82:3f:ee:d8:02:37:66:0f:42:36:a4:20:9a:95:
                    a3:fd:18:ad:e5:0e:6a:c9:ae:9d:c9:b5:de:83:a8:
                    d6:ce:e9:f0:67:b9:39:b5:90:36:87:6e:69:9d:4a:
                    66:cd:0f:51:82:17:51:7c:92:b1:4e:a7:78:c5:ca:
                    ce:48:0a:21:4a:4f:31:17:66:2e:54:81:b0:e6:a2:
                    72:94:56:c8:d4:b3:41:70:16:00:c1:1a:5e:b0:fc:
                    32:9d:ce:cd:1e:10:67:4b:30:21:73:a0:d1:fb:a3:
                    06:5f:e1:96:6e:32:31:90:87:a4:d9:98:9b:b7:89:
                    1a:92:19:0f:7b:38:fc:33:21:be:b6:23:65:0e:03:
                    32:4e:b2:4f:a0:f3:bb:89:a5:b3:7b:e9:2c:6f:8a:
                    40:57:e0:9a:30:a1:d2:28:4a:a2:58:e2:00:eb:6f:
                    76:08:f2:2c:b7:32:d0:2c:2e:d3:80:75:94:cb:46:
                    bc:7c:a3:5f:45:bf:91:80:b3:15:df:95:21:6d:c8:
                    c7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F8:E9:E1:04:EA:4D:C2:10:F7:44:E4:34:46:7D:21:B0:0E:33:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ff6e7d7f-03ef-33ed-9418-2b53a742ec30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:fa:17:d6:99:60:83:0c:c7:d7:cd:26:8d:76:28:0f:51:e2:
         8c:59:7a:77:87:2e:cd:e6:0b:eb:63:d7:f1:11:f1:e6:da:3d:
         e5:d6:9f:02:b5:43:76:c6:1d:a6:84:2e:fe:ce:bd:4b:2c:6f:
         df:1d:42:fb:b3:29:00:b7:d8:bc:07:87:0f:bd:3c:33:47:37:
         64:89:ed:1f:1d:78:1e:ee:75:4c:5b:d6:22:e2:af:b2:a7:d3:
         b9:42:80:e4:5a:01:a9:4f:4d:e1:c7:ac:d5:33:31:1c:f2:25:
         19:d1:aa:5d:16:41:7a:11:ca:82:61:83:6e:a4:55:2d:02:e9:
         f7:51:5e:23:a9:cb:3f:78:29:45:63:e9:30:21:7f:d5:67:42:
         ba:6b:cf:e0:01:4e:cf:33:67:7a:5a:fc:98:ce:6c:9e:3c:5b:
         e5:ad:80:39:29:a4:85:f7:f7:24:11:47:5c:d3:e0:81:cd:78:
         93:f3:10:4c:2d:d1:b8:ea:e3:76:0a:bb:5c:d0:de:59:e4:a7:
         20:cb:97:40:ff:94:ec:07:bc:40:f0:43:1c:01:9d:67:eb:4e:
         34:94:b1:ec:ac:86:98:22:49:c6:89:a4:c2:0a:cb:7f:9e:76:
         5f:3b:8c:73:46:02:37:77:bb:d6:3f:c1:dd:23:ae:2c:76:30:
         2c:e0:7b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:01:28 2025 by rpki-client