Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7f82907d-7433-36ca-b05f-dedf7dab56c3.roa
File:                     7f82907d-7433-36ca-b05f-dedf7dab56c3.roa (raw, json)
Hash identifier:          cXungNxQ23uTF6vTLD4LxGMX7EMvY2Ry07ydzJ4OaIQ=
Subject key identifier:   EF:88:F6:65:EC:80:B5:EF:A5:D8:CA:1C:35:7D:9D:86:C4:00:74:5C
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EA787FBEF335D438A4B424EE0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7f82907d-7433-36ca-b05f-dedf7dab56c3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     212238
IP address blocks:        142.111.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:fb:ef:33:5d:43:8a:4b:42:4e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b0dab55f-7b19-4a21-a25a-335290870ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:18:67:7d:43:c7:fe:7f:fd:6b:41:3a:9f:af:
                    aa:56:f3:80:27:d8:58:9b:a9:db:93:3b:b8:f2:4e:
                    ad:34:c7:93:f3:a2:a6:49:5e:58:60:87:62:41:bc:
                    d3:99:86:a4:20:40:0c:a3:8a:8e:c7:82:4c:c1:ca:
                    b3:7e:5b:6f:9c:09:e0:23:40:69:f3:50:ac:65:97:
                    2b:1c:f7:37:30:5d:ea:40:13:e7:b5:3b:57:10:93:
                    32:55:c1:c3:fe:f0:04:75:70:6f:b6:7a:7c:92:31:
                    58:83:80:14:24:6e:f5:90:0c:d9:4a:82:2b:39:b7:
                    57:a8:f4:3c:da:47:a0:0f:5c:62:79:c4:ff:8b:8d:
                    fc:1f:2b:9c:f0:d3:af:0f:47:31:01:a5:e4:ad:06:
                    fe:75:9c:4f:35:40:d8:40:79:70:32:db:e3:ca:df:
                    a9:bc:a6:5e:03:94:07:d3:c8:3e:35:73:4e:fd:6c:
                    5c:16:cf:5e:2d:d1:2f:04:4e:9e:3a:74:79:59:fd:
                    55:6b:e0:c5:4a:37:da:8e:6f:28:4f:2e:69:31:67:
                    52:77:79:a3:b7:e9:02:9a:14:f6:3c:2d:ba:6d:cd:
                    53:a3:d0:07:0e:d8:bb:07:29:c6:d4:37:bf:51:56:
                    37:43:b3:56:04:7f:34:1f:b1:0f:dd:e8:d5:90:db:
                    a1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:88:F6:65:EC:80:B5:EF:A5:D8:CA:1C:35:7D:9D:86:C4:00:74:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7f82907d-7433-36ca-b05f-dedf7dab56c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:a8:83:96:e1:dd:5e:7b:df:a2:98:ec:18:97:d2:02:56:47:
         7a:72:81:96:dd:c5:14:bb:ac:70:40:0d:62:97:bc:19:c6:1b:
         0d:64:c2:81:c7:e8:5f:fc:48:95:5a:08:01:c2:9e:6e:a4:ed:
         d9:af:67:71:2f:96:1f:f1:66:8d:60:96:b3:d8:cc:d8:46:af:
         94:2a:f2:d0:17:d2:88:dc:a5:25:89:0f:d4:08:0a:b1:6b:28:
         e5:5b:83:2a:75:7a:f6:6d:f6:b7:42:f3:7f:ab:92:9a:84:8f:
         81:f9:c0:c9:47:e5:90:9d:52:13:5e:ae:b9:90:39:68:fc:40:
         1d:69:d8:56:4a:c8:85:ef:28:9c:80:bf:d1:7c:7f:66:24:fd:
         7a:3b:f4:22:f1:2a:7a:32:af:19:ec:06:77:28:71:69:98:a1:
         75:fc:c2:fc:dd:07:70:2a:ba:0e:22:e2:8e:6a:1b:14:18:45:
         15:24:19:23:b2:f8:4c:01:f1:08:c1:56:98:77:4b:5f:dd:e7:
         7d:c5:ec:2c:88:cf:59:60:34:17:6e:22:f8:ec:93:a1:01:49:
         a3:7c:bc:99:86:b2:37:51:88:1f:52:44:c1:b6:5f:f4:9c:60:
         60:ee:68:cc:39:5f:c8:d3:b9:25:d0:60:6c:42:5d:48:fd:01:
         70:5f:94:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 15:17:54 2026 by rpki-client