Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5da6eb28-23ec-3255-a342-f061865e5a50.roa
File:                     5da6eb28-23ec-3255-a342-f061865e5a50.roa (raw, json)
Hash identifier:          +mEhiiS4BeFKtpoP3TC3cN6256n9jgCMP4n7DhdUX2Q=
Subject key identifier:   B4:C0:30:78:75:A4:35:3D:96:3B:EA:BA:A1:95:60:32:98:D6:F8:44
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584CF2BCEEE1E4F59EC47A23B5C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5da6eb28-23ec-3255-a342-f061865e5a50.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     11404
IP address blocks:        142.111.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bc:ee:e1:e4:f5:9e:c4:7a:23:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=2d4d25cc-ad63-4ddb-a56c-2d6d3c182e8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:65:8f:8c:85:e7:19:e6:7e:62:80:86:5a:1d:
                    af:64:f2:02:17:46:81:dd:d2:e8:49:17:bd:d1:db:
                    4e:39:49:93:77:d3:70:92:6d:88:d3:02:fc:16:c0:
                    2b:78:33:e8:2e:45:63:18:5f:9e:d8:49:ae:0e:69:
                    c2:65:25:23:2d:cc:75:b7:1e:5d:56:a5:4c:bb:4a:
                    97:18:8f:15:23:55:04:8a:df:3f:7f:c2:9d:4c:16:
                    52:69:f9:d7:fe:42:cd:d7:76:61:a3:e1:aa:8e:de:
                    9e:77:f8:19:c4:3b:3e:3c:fb:2e:79:00:de:71:14:
                    fb:7e:b1:a1:4f:7f:4b:3c:73:bf:8f:2f:3b:7f:a1:
                    9a:81:e1:24:92:14:e5:c1:f5:37:8a:66:28:d4:38:
                    24:d5:20:bf:93:ae:a4:d4:2f:d8:bf:c0:72:08:2c:
                    b9:91:2b:82:b4:75:93:8d:fc:eb:e8:d5:c2:5a:b7:
                    9a:3f:f0:22:f3:f1:a3:8c:5f:83:df:4e:cb:91:7f:
                    21:1b:da:04:92:d3:74:a0:61:ca:c5:f4:04:54:af:
                    9f:88:71:17:5e:ab:7b:f1:db:2f:c3:53:00:10:a3:
                    23:a0:7e:2c:f6:80:57:ec:58:f9:fd:91:ba:20:d0:
                    30:22:56:9f:cc:ff:ce:22:9b:6c:34:82:c7:c9:d5:
                    dc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C0:30:78:75:A4:35:3D:96:3B:EA:BA:A1:95:60:32:98:D6:F8:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5da6eb28-23ec-3255-a342-f061865e5a50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:15:af:d2:1e:45:f1:d7:43:dc:cc:06:6a:45:f3:91:31:01:
         4a:82:ad:c4:09:bf:d8:40:ce:11:c4:29:80:99:87:64:c6:b9:
         1c:eb:f4:04:ae:51:e1:8a:1f:52:2a:53:12:33:95:98:c5:ff:
         5d:3c:c7:e7:42:00:ae:bf:84:e5:97:2a:81:9f:7e:59:8c:a3:
         3d:bc:44:4e:ef:bf:24:74:cf:c1:67:0a:8b:f0:8b:1d:1c:49:
         22:a2:79:71:cb:e9:7c:4b:1b:98:58:63:c9:62:57:1f:0f:9b:
         a5:6b:16:34:a7:c2:42:8b:65:d3:94:3d:24:eb:8f:a5:94:ca:
         2e:de:f7:ca:04:9b:b3:03:69:ec:ea:1b:23:db:de:65:70:21:
         9c:70:30:86:84:8a:b1:7f:06:28:42:37:ba:c0:91:78:72:e0:
         a6:af:13:d1:39:59:e7:e4:c0:1a:b0:6b:fa:87:2a:86:78:b6:
         88:8d:12:59:2a:fb:bd:da:54:7f:d3:cb:5d:99:98:91:e4:a7:
         6b:b9:26:e4:e3:2f:c8:bc:9a:c5:ce:2c:9f:be:1d:bb:f4:98:
         86:7f:62:a5:7f:14:c7:11:80:4d:01:2c:0b:e1:6a:df:d7:bf:
         e6:38:1c:33:f9:68:bd:c3:63:06:e9:91:fe:1c:7b:78:6e:43:
         84:04:2e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:29:02 2026 by rpki-client