Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/34cb0d3d-e148-33b8-af11-5a3dc92a301f.roa
File:                     34cb0d3d-e148-33b8-af11-5a3dc92a301f.roa (raw, json)
Hash identifier:          eZ6zonJU4pFmwBDbpV6vs9X9EjhMvekW5DLZGRwtqJE=
Subject key identifier:   B7:97:82:FD:BE:26:D5:E8:F7:BF:3F:4B:B5:F0:0E:BC:E2:1A:1D:58
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B56D733A17A80AFA281AD1440
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/34cb0d3d-e148-33b8-af11-5a3dc92a301f.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     3257
IP address blocks:        142.111.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:33:a1:7a:80:af:a2:81:ad:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=c3166342-bacd-4933-85a6-7ef2a7c5d148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f6:7a:ab:cf:06:df:11:8d:45:07:0e:ce:5e:
                    00:b3:5d:8c:f6:62:56:75:5a:b8:34:e3:79:3b:97:
                    16:30:83:64:2f:73:7e:af:62:87:55:4e:d6:59:1d:
                    e5:28:14:e3:e9:c7:33:93:cb:c9:e4:1f:86:06:1b:
                    84:4b:99:cd:ae:61:5e:df:a0:60:f8:e5:a8:bd:80:
                    2b:f4:50:f2:4e:10:72:03:9c:22:27:ac:6e:9b:65:
                    b2:ef:a6:04:ca:b9:10:c7:98:bc:08:a1:27:79:d1:
                    6c:b9:9a:a2:e4:ee:30:f5:d2:51:83:45:d0:44:7b:
                    6d:c4:c4:bc:ce:f1:15:77:aa:b5:09:c6:ae:ef:f3:
                    56:28:06:76:2d:a2:59:a7:f6:15:aa:28:69:2f:52:
                    21:65:0f:a1:7b:a6:34:32:2f:74:12:1a:7e:84:7e:
                    02:cb:dc:d2:d3:5f:6d:d3:51:38:98:19:4e:1c:33:
                    56:42:1a:3c:1f:bd:49:76:c8:f0:0c:bd:a1:af:58:
                    35:4e:7a:d1:dc:c3:1f:95:4e:da:0e:7f:54:3b:d2:
                    75:49:74:f0:bf:4e:05:89:82:c1:a6:66:f0:0d:30:
                    23:98:cc:30:20:3d:e8:38:90:05:cc:c1:63:d9:54:
                    82:6f:c5:45:3d:24:b9:cc:39:bf:3c:82:2f:09:bb:
                    c4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:97:82:FD:BE:26:D5:E8:F7:BF:3F:4B:B5:F0:0E:BC:E2:1A:1D:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/34cb0d3d-e148-33b8-af11-5a3dc92a301f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:6c:d7:59:72:d2:d3:f0:06:2b:87:64:a9:53:23:39:09:1d:
         fb:53:42:20:9b:e9:1a:14:c4:f6:0c:88:55:22:55:e4:8c:67:
         00:c8:ca:de:36:b7:db:57:a3:7c:3d:ed:bb:8d:fe:d5:0b:96:
         b0:84:47:28:a3:3e:24:29:8a:1d:28:22:fc:50:42:ca:90:f8:
         bd:ba:83:ac:8c:00:9a:0e:86:99:d5:b6:3c:ef:f7:ea:41:7f:
         8b:d7:bc:7a:3f:6c:e6:63:20:ae:06:bd:b4:35:66:c8:06:74:
         ed:37:1e:0d:e1:08:7b:da:75:0a:92:d4:67:51:6a:1d:76:de:
         0b:0c:58:83:51:e7:03:58:e5:e4:45:3b:f4:0c:81:30:30:fc:
         75:f5:cf:aa:97:bb:c3:3f:09:50:73:b9:6c:86:e2:92:ff:f9:
         77:8b:82:88:ba:43:2d:df:76:d3:be:53:cd:80:9c:c2:b2:22:
         46:54:a3:b3:57:1a:22:5b:9b:69:3c:95:07:ea:76:74:14:45:
         90:8a:b1:0e:7e:75:b7:1e:10:f5:01:ff:2a:be:87:d5:90:a3:
         ef:5d:dc:1c:27:ad:65:75:3c:32:7c:3d:16:6a:72:ba:aa:99:
         af:02:bf:d0:df:f6:96:1c:c0:cc:24:a8:0e:23:09:5b:6a:62:
         0b:cd:3c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:42:51 2025 by rpki-client