Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/407a4ed7-5d32-3164-a7ba-c2a474e40a27.roa
File:                     407a4ed7-5d32-3164-a7ba-c2a474e40a27.roa (raw, json)
Hash identifier:          PU8typiAITtM/vgBnNzi0pz/0D+fNxz0b0dge66UfYs=
Subject key identifier:   F6:EC:B2:B4:B3:8C:56:D2:E2:BD:69:22:32:02:7F:63:0E:0D:D3:36
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D5E1A774A4B138D8CE036D000
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/407a4ed7-5d32-3164-a7ba-c2a474e40a27.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     134351
IP address blocks:        142.111.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:77:4a:4b:13:8d:8c:e0:36:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=0b714c1d-0fbc-446e-9987-83285a1264dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f6:51:f1:30:2a:4d:42:5c:34:59:ea:97:70:
                    e8:65:02:98:0f:94:c9:0c:39:7a:ef:4c:77:40:d7:
                    de:f7:33:f5:ee:21:be:e1:3f:48:ef:5b:c6:fb:49:
                    9c:3d:ed:3a:ff:ff:ed:8c:42:e7:06:e8:32:82:08:
                    05:80:72:57:9f:2c:2e:61:b0:1e:29:0e:54:1d:fc:
                    a0:b3:35:1d:19:55:7a:4d:20:f6:ca:bc:d3:24:7c:
                    f0:46:af:56:fd:76:94:8d:57:9d:ef:88:08:4d:6a:
                    99:db:a5:8c:6c:e5:38:7f:80:4a:2c:a7:31:8f:34:
                    5d:84:b1:c2:43:6f:cc:16:b7:59:40:39:39:31:1c:
                    56:6a:41:bc:50:80:52:77:fd:9e:80:1b:ae:3d:c4:
                    f5:89:00:d7:ed:6d:24:b7:83:a9:8f:ac:02:7c:10:
                    c2:31:d3:4d:b5:89:18:d2:b6:8d:48:2e:3b:ed:cf:
                    60:2d:fc:38:2c:c1:62:e5:c6:25:7e:45:70:e6:c6:
                    98:8f:8a:0f:15:f5:e6:d0:33:23:54:67:df:0a:df:
                    e9:4e:41:b9:b7:c0:f9:a0:32:2c:f7:95:7b:b4:dc:
                    b6:fe:c8:a0:a9:4c:93:c4:23:a0:f9:4c:6f:b6:1d:
                    2e:05:38:ad:0c:7f:02:6f:33:13:db:e0:7a:ea:33:
                    c6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:EC:B2:B4:B3:8C:56:D2:E2:BD:69:22:32:02:7F:63:0E:0D:D3:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/407a4ed7-5d32-3164-a7ba-c2a474e40a27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:19:0e:44:81:03:9e:98:6d:81:3e:e5:56:cb:a2:6f:68:90:
         2d:6c:4c:76:db:31:bc:be:da:74:3a:f6:06:80:03:61:b7:57:
         30:8b:ae:af:af:1b:36:b7:da:aa:de:f6:b2:69:40:e6:3a:f5:
         35:2d:d0:9a:37:55:8e:82:a9:61:30:77:f5:c0:b2:ef:e4:78:
         de:d9:ca:87:e1:6a:40:e5:fd:d7:6c:59:cc:e8:0c:6f:c7:59:
         80:53:dc:5d:85:da:0a:f3:62:28:ed:35:a7:76:72:f5:5d:a0:
         dd:31:43:8f:aa:71:68:e8:a4:e1:0f:74:4e:f6:94:7a:40:2d:
         e4:ca:2e:19:a4:99:b8:ce:23:77:77:ba:3b:03:4e:fc:b8:e7:
         f0:38:78:6f:6b:b3:18:46:6e:2b:cc:bd:95:55:29:81:ac:3b:
         ae:76:a5:e8:3b:87:6b:94:0b:87:32:a7:55:2b:78:03:c3:c3:
         c3:a7:d0:9a:1a:d5:26:8c:f4:bd:75:84:77:61:57:ab:8b:61:
         fd:ef:d7:19:7c:41:9a:07:8e:e4:51:0f:6e:2b:17:b5:54:99:
         73:1f:e2:80:de:39:42:14:d4:07:62:1f:fb:e3:0b:69:a3:6a:
         52:b6:27:3b:6f:69:d3:5b:01:ec:b0:84:37:5a:c9:5c:f0:c3:
         28:40:87:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGndKSxONjOA20AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk
MGI3MTRjMWQtMGZiYy00NDZlLTk5ODctODMyODVhMTI2NGRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/ZR8TAqTUJcNFnql3DoZQKYD5TJDDl670x3
QNfe9zP17iG+4T9I71vG+0mcPe06///tjELnBugygggFgHJXnywuYbAeKQ5UHfyg
szUdGVV6TSD2yrzTJHzwRq9W/XaUjVed74gITWqZ26WMbOU4f4BKLKcxjzRdhLHC
Q2/MFrdZQDk5MRxWakG8UIBSd/2egBuuPcT1iQDX7W0kt4Opj6wCfBDCMdNNtYkY
0raNSC477c9gLfw4LMFi5cYlfkVw5saYj4oPFfXm0DMjVGffCt/pTkG5t8D5oDIs
95V7tNy2/sigqUyTxCOg+Uxvth0uBTitDH8CbzMT2+B66jPGewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPbssrSzjFbS4r1pIjICf2MODdM2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDA3YTRlZDctNWQzMi0z
MTY0LWE3YmEtYzJhNDc0ZTQwYTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm8iMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFQZDkSBA56YbYE+5VbLom9okC1sTHbbMby+2nQ69gaAA2G3VzCLrq+v
Gza32qre9rJpQOY69TUt0Jo3VY6CqWEwd/XAsu/keN7ZyofhakDl/ddsWczoDG/H
WYBT3F2F2grzYijtNad2cvVdoN0xQ4+qcWjopOEPdE72lHpALeTKLhmkmbjOI3d3
ujsDTvy45/A4eG9rsxhGbivMvZVVKYGsO652peg7h2uUC4cyp1UreAPDw8On0Joa
1SaM9L11hHdhV6uLYf3v1xl8QZoHjuRRD24rF7VUmXMf4oDeOUIU1AdiH/vjC2mj
alK2JztvadNbAeywhDdayVzwwyhAhyo=
-----END CERTIFICATE-----
Generated at Mon Apr 13 09:31:53 2026 by rpki-client