Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8b0f3903-08ec-369d-9a5c-0a00ce86368c.roa
File:                     8b0f3903-08ec-369d-9a5c-0a00ce86368c.roa (raw, json)
Hash identifier:          JB2uGwmEtbu2Ri3QLfMlbfpBYGfp8OaKmLbQYqlAEw8=
Subject key identifier:   75:9B:CC:23:C5:0A:CF:78:0A:A1:DE:AF:0E:10:39:61:56:73:BD:50
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F576826901F3CD932E0814040
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8b0f3903-08ec-369d-9a5c-0a00ce86368c.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     2914
IP address blocks:        143.109.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:26:90:1f:3c:d9:32:e0:81:40:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=5599329a-3f0c-4c24-a91a-cc194278dcc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:71:0f:3c:94:33:56:84:90:99:21:de:fe:80:
                    07:17:2b:28:ef:a2:78:bb:b0:d1:fb:e1:69:37:cf:
                    9d:4e:80:a1:c4:4b:42:f2:a1:49:5c:3e:17:c9:e3:
                    04:53:d7:82:7c:a9:20:cf:c7:ec:48:fc:5a:4b:33:
                    9e:c0:02:54:f4:00:55:e0:d4:72:53:96:ac:45:af:
                    51:99:ce:42:8a:cf:f1:d5:d7:64:2d:2a:ac:c9:aa:
                    16:d5:87:86:e2:9a:06:e1:a1:2b:ec:62:47:b9:0f:
                    42:46:83:07:ee:4d:dc:84:c5:26:37:b1:a0:1b:3f:
                    80:d2:66:36:c4:53:c3:bf:97:41:27:a4:14:29:4d:
                    08:1f:47:4f:e0:00:e8:7c:59:8b:f5:0c:df:e0:d6:
                    39:55:af:73:cb:40:c0:80:f9:d2:7e:61:c8:65:a5:
                    1e:bb:8c:98:7d:6b:a5:f7:78:2b:bf:49:7b:0d:33:
                    dd:93:9f:88:c8:bf:73:dd:a0:0e:18:3e:b4:3e:c0:
                    e9:90:b8:6d:50:1e:04:3c:bb:8d:51:0b:f6:a6:3e:
                    c3:26:ad:8a:dc:ed:49:f5:56:a1:58:4f:80:64:a3:
                    69:c1:ea:56:fe:06:7e:0a:7c:a0:0c:de:fa:20:de:
                    4f:c4:d5:a9:b1:6f:5e:52:dc:ad:46:93:5f:cc:1e:
                    ba:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:9B:CC:23:C5:0A:CF:78:0A:A1:DE:AF:0E:10:39:61:56:73:BD:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8b0f3903-08ec-369d-9a5c-0a00ce86368c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.109.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:8d:23:4b:e5:04:22:ab:ff:60:19:c9:e5:cb:4e:f7:55:8d:
         ff:4a:91:f2:f5:93:62:fa:3f:11:12:5f:87:6b:e0:e8:f9:ca:
         d8:a2:90:60:42:9a:62:58:fe:b0:ac:a3:f8:53:b4:31:18:97:
         6c:a5:29:f2:36:01:e7:29:f0:bc:48:c3:6a:c3:ec:3c:c5:07:
         ed:48:2f:74:9b:6b:62:46:50:4b:a6:7b:fe:5d:23:82:5a:1d:
         3e:30:59:bf:f6:b6:b9:8d:47:ed:96:06:95:04:56:c9:7e:25:
         b0:75:74:c0:bc:ca:fb:57:9e:7a:4d:97:21:79:7e:79:d0:1f:
         97:8a:35:74:ad:3a:1c:40:c6:71:89:01:cc:24:18:aa:31:1a:
         94:8b:09:58:c8:3e:98:c8:f4:2c:b2:e7:ba:a3:fc:6f:f2:ba:
         12:cc:b5:bd:d0:b7:94:c2:c2:ff:ed:9a:c8:07:a3:16:9d:fa:
         3e:25:c0:9c:13:0c:e1:d0:c4:62:7e:12:64:a9:c9:48:72:7f:
         33:8e:47:a8:0c:91:08:cf:e0:95:58:21:a2:cd:89:e9:5f:83:
         ad:79:1b:78:3c:a0:4b:17:76:25:84:83:b6:c2:87:14:92:d3:
         74:91:88:ca:61:39:b8:94:f5:3e:6c:4f:91:42:ad:72:f4:34:
         b3:97:f0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:58:04 2026 by rpki-client