Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8608a8b8-c6c9-32d5-8446-8b5405b55ec3.roa
File:                     8608a8b8-c6c9-32d5-8446-8b5405b55ec3.roa (raw, json)
Hash identifier:          +Ylg9D1y+dry0ugvitUtyU8HASb3FiSc2bZqBItThTM=
Subject key identifier:   AE:8F:54:1A:94:3D:76:E1:8C:73:77:3B:2B:57:3B:04:5E:1D:02:8A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EA7884AC5197CA5990E031900
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8608a8b8-c6c9-32d5-8446-8b5405b55ec3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7018
IP address blocks:        142.111.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:4a:c5:19:7c:a5:99:0e:03:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=eebf8e23-a272-4511-b03f-4f69e28c52f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8b:dc:02:12:88:91:f7:e9:ec:41:b4:9c:c0:
                    6b:ab:09:20:68:5b:e5:2e:d9:5c:96:c3:ba:a3:e0:
                    05:59:94:e7:f3:bc:e6:d1:0c:29:13:bc:14:c1:c4:
                    ee:b0:68:51:a9:01:26:39:6d:50:9c:11:25:84:a8:
                    3e:cb:88:cf:46:f9:ed:86:ec:35:99:73:23:ea:21:
                    60:e7:67:9b:ed:9c:4e:7e:3b:95:88:a1:d6:3e:91:
                    a5:6e:24:41:85:9a:59:1d:b6:de:15:b0:98:71:31:
                    32:05:86:65:37:c9:bc:80:3e:82:38:2e:58:65:9a:
                    6e:9a:34:59:75:51:13:a7:e2:ea:71:7c:74:65:ff:
                    63:0f:11:cb:a0:54:01:5d:fb:9d:45:fb:3e:a0:48:
                    b5:f6:86:49:54:7d:29:07:e8:75:3b:9e:8f:41:5e:
                    3e:06:71:c7:48:64:fd:46:a2:be:bd:0b:e3:2d:15:
                    9d:10:f2:da:c9:75:6f:cc:c2:79:a4:1d:a4:6c:78:
                    29:6f:ca:73:4a:ff:93:6d:f0:16:66:67:a6:92:8a:
                    75:9f:c8:be:fc:b4:01:bb:58:49:00:b4:96:dd:c4:
                    56:ee:a6:60:6f:e0:54:9a:16:39:68:96:74:c7:ce:
                    f8:25:94:e7:b6:04:02:f8:c8:27:f5:4e:b4:9b:0d:
                    29:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8F:54:1A:94:3D:76:E1:8C:73:77:3B:2B:57:3B:04:5E:1D:02:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8608a8b8-c6c9-32d5-8446-8b5405b55ec3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:fa:cd:9c:74:dd:b8:4d:d1:2c:ab:aa:0d:96:cc:12:9d:06:
         78:df:a8:07:1b:6b:bd:a2:da:85:cf:08:e5:fd:be:26:eb:28:
         90:e4:41:ef:ac:da:23:74:e4:9d:a2:28:b7:7b:e9:67:6c:5d:
         87:f2:27:cc:ef:74:89:ad:4f:05:f0:23:a6:d1:28:13:43:7b:
         6d:e4:ef:15:96:04:03:e0:da:82:54:df:04:7e:6c:a0:59:a3:
         30:fd:68:55:2b:20:91:56:2c:f7:58:f5:19:43:8a:28:54:4e:
         02:f3:89:fc:e7:47:d1:a8:5d:99:91:de:3f:6c:c0:07:e5:d6:
         28:89:71:32:5a:15:8e:f6:a4:77:9e:2f:0e:c2:28:89:8b:54:
         1a:a8:be:a7:a5:76:95:8f:67:17:59:4d:33:59:f8:87:28:53:
         e9:d3:6e:00:b9:de:3a:b2:72:47:9d:df:76:f9:c8:2e:57:78:
         10:b2:1f:06:43:d6:ee:37:fe:76:2b:72:2d:13:c7:39:42:46:
         e4:e2:68:9b:52:ca:4f:a2:e5:0c:c1:bf:56:c1:09:a8:06:ee:
         7d:3a:5a:27:f4:fa:50:94:7e:2b:5d:70:b8:46:15:66:a3:da:
         7f:2c:f5:71:a5:b8:ce:e6:f9:39:a5:04:71:2e:fb:1f:38:77:
         0c:c3:0d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 14:22:59 2026 by rpki-client