Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9d84b3e2-f1b6-3879-881f-f3567670063c.roa
File:                     9d84b3e2-f1b6-3879-881f-f3567670063c.roa (raw, json)
Hash identifier:          gNRoxeCCAQ8Fjs4gbJjIitCiVtYRFIzXTtI5RweuRyw=
Subject key identifier:   41:65:C0:00:18:BF:A5:74:FB:93:4B:32:2B:65:A9:35:D2:06:45:A4
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584CD4077CD5D204AC8318585E70
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9d84b3e2-f1b6-3879-881f-f3567670063c.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     9009
IP address blocks:        142.111.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:7c:d5:d2:04:ac:83:18:58:5e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=378c2a0a-0515-4f4d-b0d9-8b3e0faf14cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ba:d0:9b:16:db:a8:8f:e8:9e:a1:03:43:87:
                    88:f4:36:d4:ce:1d:7d:58:6b:6b:dd:7b:13:ca:fa:
                    52:02:c8:6e:20:84:6d:9d:62:9f:87:21:ba:7f:51:
                    0a:7e:cf:da:c5:31:32:f4:0e:f3:01:65:f9:bf:1f:
                    14:50:2c:01:a7:e6:2f:38:47:b9:5d:70:fe:28:b1:
                    98:c8:fb:1d:fa:86:b3:d7:87:65:c2:24:63:26:d2:
                    e7:4e:ad:a3:78:13:8f:d0:7c:13:4e:61:1a:3b:58:
                    f1:ec:92:6f:1f:94:e4:71:bf:a7:64:4d:49:a7:da:
                    b1:c8:02:cb:37:90:d9:ad:10:f5:71:85:08:1c:78:
                    d7:ab:4d:93:51:11:be:54:ce:42:69:ce:bd:28:f9:
                    53:1d:8f:b7:ae:9c:1e:5e:eb:a3:39:22:7c:3e:76:
                    2e:10:a4:3f:a5:d6:d9:26:6f:ec:ee:58:92:e5:b9:
                    c3:64:5c:db:1a:91:87:2a:87:25:c2:54:9a:49:6e:
                    a9:e4:b8:f9:0a:f3:00:c7:16:e7:a7:8e:9e:ba:78:
                    d0:4f:81:ed:12:24:f1:73:e7:f5:60:39:ed:ad:09:
                    05:bc:3f:1f:61:bd:b8:6c:7c:b1:fe:11:5e:0e:7e:
                    3f:11:c3:d9:fb:82:d7:b6:72:2e:97:4e:e1:7d:92:
                    54:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:65:C0:00:18:BF:A5:74:FB:93:4B:32:2B:65:A9:35:D2:06:45:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9d84b3e2-f1b6-3879-881f-f3567670063c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:7b:80:ac:5d:6c:09:81:a1:fc:17:66:45:34:18:fc:b8:25:
         8a:b8:52:46:2d:cd:a7:3a:c0:e8:a6:f8:48:ce:00:b3:8a:74:
         54:ff:4b:5e:75:2b:97:93:d1:23:25:90:4e:0a:98:0b:a2:99:
         5a:67:fa:50:63:75:8b:06:7f:91:8e:64:c7:73:81:17:75:ac:
         0f:90:fc:4e:47:e3:7d:c9:c5:b8:c7:84:3c:98:df:0c:d3:0e:
         88:98:ed:05:80:fa:a4:a3:5a:50:98:0c:f9:eb:23:02:a7:bc:
         dc:d6:a3:8b:fc:a8:84:ad:e2:a3:f9:24:0a:b0:11:dd:c4:9f:
         1d:b1:36:1d:16:18:18:8d:65:e3:84:8b:9f:94:03:8f:78:2c:
         ca:90:7a:d0:98:1d:1b:7f:b0:24:b2:33:54:5f:13:9b:57:3d:
         91:d7:f7:7f:e8:07:90:85:be:d2:37:7f:c4:18:15:3d:07:67:
         05:1b:3d:6c:4d:95:65:64:a1:1e:10:4f:2b:14:92:47:08:de:
         a6:62:a5:36:5b:b5:5b:66:8d:40:04:96:87:08:18:1d:b7:d5:
         5c:07:05:e7:db:3a:0d:8f:dd:d2:43:a1:ff:07:4c:16:c2:0f:
         dd:6a:d9:9f:2f:8f:b7:cc:6b:91:d4:59:94:00:c3:39:82:e3:
         95:bf:a9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:28:55 2026 by rpki-client