Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/96a9b0a1-666d-3eb0-94a8-899f77e0652f.roa
File:                     96a9b0a1-666d-3eb0-94a8-899f77e0652f.roa (raw, json)
Hash identifier:          CGYlZYVFsUvhP+oIoAG9f+Y1lPEBq4bS7tLUSKzY40U=
Subject key identifier:   E8:DA:80:18:F6:98:A9:3F:D5:A5:FF:B8:CB:1F:4A:67:8D:A9:8B:F3
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D773A63BF27F2F75958AD42C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/96a9b0a1-666d-3eb0-94a8-899f77e0652f.roa
Signing time:             Sat 11 Apr 2026 01:00:24 +0000
ROA not before:           Sat 11 Apr 2026 01:00:24 +0000
ROA not after:            Fri 10 Jul 2026 01:00:24 +0000
asID:                     214238
IP address blocks:        142.111.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:77:3a:63:bf:27:f2:f7:59:58:ad:42:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 11 01:00:24 2026 GMT
            Not After : Jul 10 01:00:24 2026 GMT
        Subject: CN=433c5be4-7052-4ba1-8928-c8f0b81ee35d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dd:2e:ec:89:9a:f4:ac:cf:81:d2:22:74:89:
                    09:8c:c1:7d:3d:48:c0:eb:3e:ed:26:f7:c1:6f:d3:
                    d4:0f:31:52:87:7d:05:be:a3:bc:13:1f:ce:f3:e7:
                    ba:79:8e:fb:ba:ef:35:79:6a:e7:c2:f1:01:bd:f9:
                    c5:29:93:5c:03:33:81:f6:7e:f3:fb:dd:d3:58:f2:
                    a3:a0:ff:3d:a7:4f:53:79:0b:7d:4f:38:71:83:76:
                    ee:c0:73:48:ae:2e:79:4b:93:80:f3:74:ad:2d:eb:
                    dc:f9:1d:bb:9d:8b:c9:83:5e:11:b3:4d:bc:6b:d1:
                    c6:de:cc:0d:b6:3c:77:13:f8:67:17:b0:21:7d:9a:
                    2c:24:b4:32:3e:9c:b5:c3:ed:fa:16:b2:55:cb:ed:
                    2b:12:74:39:66:04:9f:32:23:8d:2a:5b:7b:1e:c0:
                    62:83:2e:c7:80:92:9f:0f:45:2b:7d:10:14:71:e7:
                    28:e6:3b:75:84:77:6a:87:43:c3:c3:12:a9:9b:93:
                    84:be:7a:3a:a1:41:ea:3c:9f:47:55:2a:b2:ee:22:
                    76:a9:6a:14:62:22:96:9c:52:e1:b5:79:c9:36:6e:
                    36:5f:46:34:cd:ec:f3:a3:25:ad:bd:71:6c:3a:ee:
                    9e:33:59:f6:2d:59:65:f5:5d:84:8a:ca:fb:7d:b0:
                    5e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DA:80:18:F6:98:A9:3F:D5:A5:FF:B8:CB:1F:4A:67:8D:A9:8B:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/96a9b0a1-666d-3eb0-94a8-899f77e0652f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:1a:33:4f:d4:e8:a7:b7:0d:97:57:f7:26:db:d5:09:ae:03:
         dd:2a:29:7d:55:a1:e5:9e:a8:f9:06:fb:af:1d:e3:9f:ea:53:
         f9:7b:35:da:57:41:03:25:f5:e0:f1:3e:96:bc:20:cf:50:e4:
         40:db:bf:c2:e5:6c:31:fc:80:0e:15:b7:d6:a2:a6:2c:c9:b4:
         77:a2:40:95:49:80:ed:d3:d3:94:2f:3a:06:64:9e:05:e4:0c:
         f7:e8:35:b4:0b:5a:d7:e1:d3:2e:02:26:17:7c:bd:9f:43:4e:
         ae:28:72:d0:01:fb:96:a7:7f:f6:4d:85:f6:44:d4:d7:1f:4d:
         90:ad:20:89:8a:a1:d9:20:8e:4b:16:14:50:56:7e:08:f1:fb:
         b9:88:00:70:69:73:0c:52:ea:24:5c:46:1d:71:8f:54:21:eb:
         80:6f:a7:54:f3:85:0f:70:00:e4:3a:c3:53:7b:93:a6:04:e6:
         7a:05:c9:e0:bc:e4:58:f1:3b:f8:9c:5e:57:5a:b0:d9:39:54:
         8c:1f:11:27:fe:10:9f:07:14:23:29:89:4d:83:d6:e5:d0:9d:
         05:2d:ac:57:d7:9f:8e:ff:fe:d0:e6:cd:78:56:9d:ee:3c:3a:
         8b:bc:cf:15:b3:6f:cc:95:38:e8:03:15:0b:c9:a1:07:6d:22:
         42:da:1c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 09:31:24 2026 by rpki-client