Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4d37e3f2-a204-3b0f-88d6-bcbfbf814eed.roa
File:                     4d37e3f2-a204-3b0f-88d6-bcbfbf814eed.roa (raw, json)
Hash identifier:          cah2bHfn3QxXvU8SAPsgqZZmnFFY4nhvK53FcHeQXA0=
Subject key identifier:   48:14:37:96:A2:0C:30:0C:9C:DE:04:73:4A:D1:A5:A1:F3:9D:C8:D8
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E683F663B44E3D35F6D3FC500
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4d37e3f2-a204-3b0f-88d6-bcbfbf814eed.roa
Signing time:             Mon 06 Jul 2026 09:00:12 +0000
ROA not before:           Mon 06 Jul 2026 09:00:12 +0000
ROA not after:            Sun 04 Oct 2026 09:00:12 +0000
asID:                     13536
IP address blocks:        108.171.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:68:3f:66:3b:44:e3:d3:5f:6d:3f:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  6 09:00:12 2026 GMT
            Not After : Oct  4 09:00:12 2026 GMT
        Subject: CN=f41d833a-e621-4672-9925-c24bedcaacaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e1:b5:46:bf:40:2b:48:79:af:d2:2e:49:56:
                    fc:f9:fb:d6:4d:e2:de:0f:37:74:82:ca:21:d6:6c:
                    7b:c1:95:12:ae:26:11:e9:e0:d2:d3:a1:c8:79:94:
                    01:46:f5:30:b9:4a:6d:2c:cd:7c:cb:ae:b5:e9:5d:
                    99:46:3a:8f:7d:09:d3:e2:2e:48:c6:ff:18:36:68:
                    57:c6:6f:fe:2e:ab:8c:ab:8d:f7:af:ac:c1:e2:ed:
                    1c:91:e0:6c:1d:97:95:35:e9:14:c5:66:7a:03:aa:
                    82:24:34:29:a8:f8:56:f7:ad:ec:f0:b5:42:55:a2:
                    bb:e0:59:ce:57:d5:e5:2c:56:60:4a:80:3f:d7:98:
                    3d:dd:d4:01:b0:84:af:e1:70:f2:d6:dc:25:1d:55:
                    ae:63:90:4e:cb:f2:95:53:34:1a:f3:9c:87:9c:1d:
                    b8:97:ea:47:f9:0f:f5:fe:b6:6f:9d:be:60:5d:bb:
                    67:2f:de:5a:1f:11:fc:1a:19:1a:c6:49:74:d4:0d:
                    ca:70:d9:09:be:b2:07:b3:f9:10:d8:fa:1b:cf:f6:
                    97:b2:29:67:ed:65:71:17:9a:3f:ec:de:93:56:30:
                    ac:d1:e7:9a:24:85:a4:5b:3b:93:fd:26:e1:ff:e0:
                    d0:c9:79:15:33:f1:24:07:83:3b:65:3d:81:83:45:
                    52:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:14:37:96:A2:0C:30:0C:9C:DE:04:73:4A:D1:A5:A1:F3:9D:C8:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4d37e3f2-a204-3b0f-88d6-bcbfbf814eed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.171.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:b7:be:1c:30:a9:87:87:05:76:14:75:26:92:19:1a:1d:35:
         70:2f:a6:4e:d0:44:55:d9:9b:7b:0f:78:3e:41:61:f1:36:38:
         84:80:99:17:b2:bc:3a:01:5d:a7:0c:5c:f2:7a:a7:f2:1c:b9:
         0b:bc:09:f6:39:c9:d7:fd:78:41:df:12:4a:9c:7c:b1:a8:1f:
         ea:48:e4:5f:5f:f0:55:91:b1:c9:b9:2e:43:ad:1f:4e:66:2d:
         ca:2f:fa:13:20:18:65:7b:bc:38:68:bd:9d:ad:85:ec:74:79:
         47:c4:20:e6:94:34:95:df:3b:f1:e0:fa:41:ac:51:7e:b8:26:
         e6:20:a0:7b:f1:3e:01:2f:49:1c:bf:f6:c5:e6:af:bd:a7:8d:
         60:9f:fe:b3:6b:9e:bd:83:a7:05:9d:1d:1c:a2:21:16:91:3e:
         17:e2:e4:30:03:11:c1:25:48:02:19:81:47:9c:f9:70:d8:ee:
         b1:46:5a:57:fa:b3:92:e2:ac:f3:26:70:72:39:89:ea:c6:15:
         30:86:31:07:05:07:45:d1:af:59:c0:05:04:75:cc:ff:79:1d:
         e5:a5:51:91:ed:9d:af:9c:91:99:c5:8a:f3:09:64:94:f2:f3:
         8b:d7:3d:d4:27:7e:fb:85:4a:4e:ba:73:7f:57:de:f4:1b:d7:
         b1:ea:86:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 11:39:46 2026 by rpki-client