Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8ef92948-0169-3b2b-bf2e-18b50da80bd3.roa
File:                     8ef92948-0169-3b2b-bf2e-18b50da80bd3.roa (raw, json)
Hash identifier:          ovjNBR/3yMzF3s0ll7IH8/GCjYd2kPOsdsYuZwRvE9E=
Subject key identifier:   12:26:17:A3:46:43:71:CB:8B:20:AE:CD:A0:A6:13:DB:60:DF:54:5C
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584CF2BD0BCF02727026D953D880
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8ef92948-0169-3b2b-bf2e-18b50da80bd3.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     11404
IP address blocks:        142.111.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bd:0b:cf:02:72:70:26:d9:53:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=76f1b904-1a1f-48c5-b0ea-1ce17f63adee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:67:31:63:7c:3b:66:91:56:2c:e2:ee:48:3f:
                    8a:9f:3c:ac:d9:a2:9d:8b:fb:ee:55:d6:4f:1a:58:
                    86:82:ab:5b:6f:ac:da:6b:eb:12:04:c8:79:ec:18:
                    c7:d8:1d:ee:94:23:9f:f4:b3:02:a8:eb:49:fd:2e:
                    88:8c:80:67:1a:10:6a:76:0b:48:bc:14:ac:ef:66:
                    52:b8:ff:29:25:28:6e:2b:bf:bb:fb:d8:19:fe:31:
                    85:44:e4:27:39:96:f2:8f:53:5f:6c:94:2c:d8:34:
                    eb:b3:11:12:38:50:15:5b:32:63:7a:c1:c4:19:fb:
                    9d:87:e7:08:5b:3f:06:75:12:a7:4f:dc:20:05:39:
                    f7:fd:2a:22:12:e6:4d:83:77:e0:fa:de:b4:9f:db:
                    5b:a5:a0:2f:44:eb:ec:58:74:38:50:65:82:e1:24:
                    c5:f9:a2:a7:9f:76:ed:31:97:ba:10:8c:b0:49:de:
                    a5:e4:38:61:0d:56:e5:33:c3:60:fb:0d:ee:67:82:
                    0e:57:be:3e:08:eb:65:9c:da:85:00:07:a5:fd:e5:
                    3d:0b:65:9c:5c:68:6b:34:b9:b1:c0:f8:89:d6:f6:
                    15:34:18:9c:d8:4c:b2:9f:f9:bf:ed:8e:94:2e:27:
                    99:c8:80:7a:69:51:13:73:9a:12:97:13:c8:eb:21:
                    46:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:26:17:A3:46:43:71:CB:8B:20:AE:CD:A0:A6:13:DB:60:DF:54:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8ef92948-0169-3b2b-bf2e-18b50da80bd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:c9:26:a7:b6:29:0e:5f:a5:56:94:51:db:64:bc:c0:03:20:
         c3:78:42:fc:e3:04:36:bf:76:32:66:70:96:03:b4:55:48:aa:
         45:3b:0b:e1:ad:ea:be:c2:1c:e9:52:65:40:55:f5:ce:aa:ab:
         7b:38:a1:40:ac:ae:bd:57:b5:f7:50:bd:8a:bf:bc:ef:6c:14:
         8a:d7:d6:9d:dd:41:df:c4:f5:83:a5:93:b6:64:4d:7c:97:b1:
         6e:d0:36:48:80:39:35:ea:1a:bb:83:60:c6:fe:22:07:f0:a3:
         aa:2a:b5:6e:ae:31:b7:09:81:3f:96:2f:1f:0b:1f:2d:d8:83:
         f7:68:0f:ce:e9:78:0a:32:10:13:31:63:29:f1:31:2b:fa:db:
         57:f1:2a:ce:1e:9a:68:8b:d5:df:17:e2:b1:c0:b9:89:f1:21:
         b8:f4:d7:dd:db:bc:82:62:e3:cb:62:b4:92:61:9e:c1:54:00:
         51:01:37:f2:c5:cc:82:aa:7c:f4:85:f8:8b:ce:5e:ac:24:75:
         54:5b:9d:65:9c:f0:79:f1:ef:7e:41:b1:1e:bf:6c:1c:6a:6c:
         47:9f:0f:d3:ea:44:6e:ab:60:ba:79:6b:28:3d:65:ba:4e:0a:
         5e:c4:65:c0:d0:09:84:a6:2e:c7:f7:16:0e:e5:2d:c8:41:47:
         3b:ac:9d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:27:19 2026 by rpki-client