Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6d2979b8-4c56-3c2f-98b0-54903b0a18b4.roa
File:                     6d2979b8-4c56-3c2f-98b0-54903b0a18b4.roa (raw, json)
Hash identifier:          g+DSJKQtp2HlWUv6c0aIjjZHiLYKZw4UmjJ2poo9Ag0=
Subject key identifier:   2A:97:AD:AC:8D:E8:2E:B1:D7:6F:E9:62:FA:AF:E8:DF:6B:73:34:AD
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DF4DB817E59152C9BAD26F580
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6d2979b8-4c56-3c2f-98b0-54903b0a18b4.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     209854
IP address blocks:        142.111.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:81:7e:59:15:2c:9b:ad:26:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=22551b4a-dcd6-446d-a6c5-7aff3a48937f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0c:65:f3:35:a3:c0:41:2a:51:05:e3:5e:e5:
                    43:a1:0e:c3:3e:d7:08:cd:d3:15:3c:43:2a:1b:40:
                    62:2b:71:89:4e:65:5b:72:2e:0a:5e:f1:8c:a1:5a:
                    9e:2c:b5:69:22:06:ab:69:b5:b9:52:dd:d4:03:c5:
                    64:6b:d6:f8:ff:4a:89:6f:d5:ce:93:37:07:64:4b:
                    32:3e:fe:f2:74:3f:d2:9d:6c:41:b9:73:a1:f8:4f:
                    12:2c:13:ae:33:3c:20:78:fd:37:c1:bb:4e:60:c6:
                    cf:95:1a:6b:b7:42:67:e0:42:39:d4:f9:f2:2c:32:
                    e2:be:4c:a4:ef:20:b0:a2:a7:1a:9c:14:a5:2c:d5:
                    5c:2e:57:db:94:2e:48:42:47:64:38:41:6d:fb:22:
                    64:ca:ff:e4:5f:32:ce:d5:6f:78:55:2a:2b:e6:10:
                    44:30:0f:da:0b:bf:87:ea:0d:bd:65:12:19:5d:3f:
                    3b:1a:12:35:2f:37:ca:65:52:96:f1:5e:2d:f4:16:
                    92:11:f7:37:df:8f:ea:cc:a1:9f:2f:c0:1b:ec:49:
                    9e:dc:aa:f6:8c:6f:00:53:76:d2:c5:43:6b:a2:0d:
                    bc:c8:16:10:7d:85:ac:65:b8:94:a8:01:b8:e9:44:
                    37:5b:86:e0:c1:08:70:c1:dd:06:ab:de:19:76:a1:
                    5f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:97:AD:AC:8D:E8:2E:B1:D7:6F:E9:62:FA:AF:E8:DF:6B:73:34:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6d2979b8-4c56-3c2f-98b0-54903b0a18b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:1a:5a:5a:09:9d:1c:71:50:05:aa:6d:a1:60:bf:52:36:72:
         b4:cb:a6:c1:21:e2:1c:da:67:86:8f:fc:ba:e7:03:99:17:99:
         11:6c:4c:3f:db:e7:8d:da:f1:8e:d0:ae:19:ac:00:24:78:72:
         b7:17:7c:3e:e8:0d:d4:0d:5b:21:f3:1c:39:fc:fd:26:9b:13:
         03:c9:64:0a:98:0d:ff:27:55:b2:80:28:49:6d:b7:73:39:67:
         db:b4:d0:57:56:cc:46:57:77:32:b8:bc:64:7d:ed:cb:36:7f:
         20:3d:10:2b:d9:af:bf:e4:c3:25:e0:5c:26:14:5b:26:2b:65:
         21:77:f8:47:d1:d5:3c:18:dc:ff:07:68:3d:9b:d1:27:7f:55:
         94:aa:1f:0a:8e:4d:9e:45:00:e9:8e:52:84:68:f2:fc:3b:a1:
         23:db:4f:b7:30:3f:04:d8:71:10:d4:26:ab:b3:59:57:20:ac:
         fd:14:ed:f2:24:f1:d4:b2:17:35:76:64:64:cd:ff:fb:fd:a3:
         ca:54:43:ba:28:68:86:c6:4c:16:e2:ea:13:f0:26:2e:6a:5e:
         7c:cb:3a:59:6b:75:ef:ad:79:cc:6c:da:b1:d9:ec:14:74:78:
         94:08:50:ee:ec:3f:f6:8e:46:47:6d:0c:c1:f7:fc:55:40:25:
         41:b9:4e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:15:13 2026 by rpki-client