Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7afc2cb3-4f95-303b-bcd7-6bf4d015d5b2.roa
File:                     7afc2cb3-4f95-303b-bcd7-6bf4d015d5b2.roa (raw, json)
Hash identifier:          MH5nMxu8eaVtvcXBrybAqfLsPvedkGHxUA3mtQIX3Zo=
Subject key identifier:   C7:A3:A1:25:F5:4D:F1:9F:EE:9E:F8:E4:98:D1:34:7C:63:06:B5:8A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DD625C6A56BD2CF8721383F80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7afc2cb3-4f95-303b-bcd7-6bf4d015d5b2.roa
Signing time:             Fri 15 May 2026 01:00:24 +0000
ROA not before:           Fri 15 May 2026 01:00:24 +0000
ROA not after:            Thu 13 Aug 2026 01:00:24 +0000
asID:                     7018
IP address blocks:        142.111.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d6:25:c6:a5:6b:d2:cf:87:21:38:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 15 01:00:24 2026 GMT
            Not After : Aug 13 01:00:24 2026 GMT
        Subject: CN=606f3384-f9df-487a-b1b3-2c389bd9be8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:80:de:e3:0f:75:12:84:26:9f:57:a6:87:3e:
                    79:5d:7b:8f:ab:85:45:29:9e:68:6c:4e:95:f1:b8:
                    f5:89:da:fc:8a:70:df:fc:fa:42:ff:cb:92:98:42:
                    c1:4d:13:0f:1b:63:ce:2e:d0:e5:ab:b2:92:fe:f8:
                    5a:d3:e8:c1:27:6b:83:4e:34:b1:7d:3a:c9:03:73:
                    85:b0:3e:77:06:94:21:ff:05:89:40:c1:3e:1a:df:
                    dd:5e:f9:25:ae:87:68:c4:d9:ec:1b:0f:eb:7a:0b:
                    e1:f1:a3:cb:8d:14:8e:01:22:8f:dd:42:01:c7:99:
                    8c:30:2f:95:43:a4:fa:a5:1e:3f:57:43:a6:38:c3:
                    0a:5f:8c:83:93:1c:20:0b:20:72:1e:f8:36:f3:6d:
                    93:8b:ae:e7:66:40:7d:2e:c6:16:df:40:ad:92:ba:
                    9f:11:d1:80:34:2a:90:9b:4f:f2:e2:97:83:94:88:
                    3c:0e:21:2c:c6:2e:63:92:d5:0f:5a:f7:c5:11:19:
                    ee:ad:18:6e:b8:e6:8a:1d:75:a9:12:95:d8:18:81:
                    25:49:ef:85:78:f0:f6:41:dc:37:96:2b:09:fe:c8:
                    cc:ed:3d:9a:e0:50:53:43:b6:6a:9f:18:ee:c5:3e:
                    7c:c8:25:5d:66:f0:df:e3:9d:d8:c7:e4:61:e8:7a:
                    7d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A3:A1:25:F5:4D:F1:9F:EE:9E:F8:E4:98:D1:34:7C:63:06:B5:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7afc2cb3-4f95-303b-bcd7-6bf4d015d5b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:7a:df:ef:82:d8:22:bf:37:0f:bb:42:51:1d:73:f4:a9:c5:
         d3:4b:98:0f:6c:73:b4:d2:6d:a1:4a:02:20:f5:88:13:1a:40:
         ec:3b:60:66:77:a6:f8:ca:1b:2e:9d:e8:f5:96:61:4c:9e:28:
         dc:81:1d:1f:62:67:72:f9:b8:6b:97:d2:40:b8:6b:32:2d:0c:
         6f:ce:d5:17:74:5f:ea:6c:20:53:d1:7c:19:01:b2:c1:29:fb:
         3e:51:03:57:a4:c1:bc:ad:56:5c:83:d4:49:10:05:da:06:a7:
         28:52:7a:99:5c:a0:31:16:8b:a8:cd:6c:69:df:49:39:8a:43:
         8f:1d:ca:ae:b2:9c:0d:c2:d9:13:7b:19:00:c5:9f:0f:b2:d7:
         06:4f:fa:29:da:82:a3:18:04:ad:59:8f:9b:9d:7b:92:e5:e3:
         d1:e7:2b:ed:66:eb:08:10:bb:f1:fe:f6:7b:d6:70:a5:8e:7d:
         b1:0c:0c:79:3f:42:68:a3:d2:77:63:cf:77:6a:d6:5b:ae:91:
         41:5a:9e:97:9f:4d:20:e3:00:a1:ac:10:00:71:d2:f6:ad:f3:
         af:e2:bb:92:f4:ab:b5:d7:9a:a9:88:bf:f9:78:e9:4f:b9:36:
         a5:4b:e1:83:f1:45:68:19:3a:1b:11:46:4c:92:7e:f5:3d:e7:
         27:f0:08:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:13:25 2026 by rpki-client