Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/95e40d8a-02e1-360b-ac22-22b348b04ae5.roa
File:                     95e40d8a-02e1-360b-ac22-22b348b04ae5.roa (raw, json)
Hash identifier:          CcbZH10jbFUh8q/8qCiM3RnErB94p8xuaObWLEMAeFw=
Subject key identifier:   3B:BA:D8:52:64:D7:AF:E6:17:6E:47:FD:98:8B:EC:7D:41:28:21:7A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EF01CF76062F23AECB156C100
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/95e40d8a-02e1-360b-ac22-22b348b04ae5.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     397373
IP address blocks:        142.111.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:f7:60:62:f2:3a:ec:b1:56:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=49547ffa-10d1-481a-bd1d-940792778ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1a:01:fd:da:a0:47:0d:4a:08:2a:64:37:cb:
                    a9:39:53:5e:81:16:e2:04:af:7a:ec:48:c6:67:0e:
                    d5:c0:a7:ac:43:a9:fb:e1:7d:87:6b:05:41:ce:8f:
                    50:11:dc:09:12:f1:ec:39:c4:38:d5:b3:9c:a4:3b:
                    6d:c7:1e:9c:32:0c:09:5c:1b:83:dc:54:b1:dd:2d:
                    6b:ee:83:e4:6f:03:55:11:33:11:2f:29:00:61:3b:
                    5b:11:59:41:ed:2b:24:1b:f2:63:ff:8e:1f:80:ea:
                    a3:51:d3:a9:f5:a6:00:ae:9d:15:0b:8b:7f:07:f1:
                    31:33:67:01:6e:7f:8d:fa:08:1f:63:33:83:f4:fa:
                    13:9e:32:ef:b2:7f:af:07:a0:54:23:dd:8f:ee:86:
                    64:35:58:c3:f3:fb:46:5e:b2:3e:25:61:de:29:fc:
                    01:e0:56:7d:12:dc:53:9a:49:1f:15:0e:07:e0:6d:
                    40:19:de:dd:e5:1e:af:80:f7:7b:37:aa:e8:91:94:
                    3b:b7:01:bc:96:d3:76:6c:ff:3b:d3:37:41:74:be:
                    55:c5:71:d4:bf:9d:8f:1b:af:ee:ed:d0:ac:bd:0f:
                    47:fb:c5:d1:f8:f8:e3:25:72:e2:46:56:fd:de:7d:
                    12:14:b9:87:21:f4:e3:dc:8a:1f:d8:bb:04:4b:30:
                    c6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BA:D8:52:64:D7:AF:E6:17:6E:47:FD:98:8B:EC:7D:41:28:21:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/95e40d8a-02e1-360b-ac22-22b348b04ae5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:97:f8:71:4d:9d:15:dd:66:14:27:80:54:21:92:9b:a3:ae:
         50:13:73:06:c4:06:53:18:ff:e6:48:79:3c:b1:5b:13:56:5b:
         2a:67:5f:83:11:91:2d:5f:fc:d3:fa:f9:97:88:c5:3c:e7:5c:
         3f:2d:02:e4:8d:51:f7:b0:68:63:6e:ff:14:23:a4:76:fa:c5:
         ee:9d:44:18:28:eb:ab:31:16:c3:98:71:6c:4e:89:01:a5:51:
         a5:91:8c:91:9b:44:e5:5e:4f:91:35:15:ee:ca:e4:5b:a8:a3:
         c5:47:5f:d9:f5:53:57:c0:21:96:e9:c1:c5:17:c5:1d:f0:de:
         41:81:a1:af:14:80:39:bc:40:41:3a:36:f0:fe:ac:8d:c8:f3:
         20:89:60:8a:79:34:ef:0c:7c:ae:c2:ef:3f:19:46:7d:ac:cf:
         64:c1:27:e1:7f:8a:53:de:ba:64:a7:5f:ef:77:88:b9:a5:0e:
         c4:85:5f:00:bd:eb:7f:e7:50:43:cc:ba:81:1c:cc:67:30:99:
         64:4b:7e:f2:51:e3:1d:8b:cb:6e:db:c6:96:e9:71:6a:bc:af:
         49:65:55:c0:9d:3b:58:e0:3a:fc:ef:23:47:93:e6:89:71:5e:
         10:e8:70:2c:a6:6f:91:f0:94:9c:b6:30:76:b2:2b:70:c1:a8:
         4e:3d:2d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 14:20:22 2026 by rpki-client