Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a25adc19-0b0f-3e58-9770-caf9c965b218.roa
File:                     a25adc19-0b0f-3e58-9770-caf9c965b218.roa (raw, json)
Hash identifier:          9fWx9Z8EOqY5n3CP/0/kZn8h+/ebJfBQUT3bCJsYvhg=
Subject key identifier:   74:BE:D3:C9:8F:12:65:34:F1:6D:34:B4:83:39:A2:BD:43:FD:31:14
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DF7A5DC948FE5B3981758C400
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a25adc19-0b0f-3e58-9770-caf9c965b218.roa
Signing time:             Wed 27 May 2026 01:00:14 +0000
ROA not before:           Wed 27 May 2026 01:00:14 +0000
ROA not after:            Tue 25 Aug 2026 01:00:14 +0000
asID:                     3257
IP address blocks:        142.111.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f7:a5:dc:94:8f:e5:b3:98:17:58:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 27 01:00:14 2026 GMT
            Not After : Aug 25 01:00:14 2026 GMT
        Subject: CN=239ae8f2-79eb-4ba8-9257-8424089a2e18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7c:21:d1:b8:13:8f:f7:6e:7e:51:0a:84:1d:
                    56:55:9f:3e:6b:0b:c3:03:1d:3a:d9:e7:54:20:2b:
                    6c:a1:ce:e2:4b:5a:e0:d8:67:b0:88:fe:99:8f:23:
                    b4:ed:bf:34:14:e9:3c:b0:66:f8:8c:d5:4c:8c:43:
                    0f:30:62:e4:3c:dc:4a:2a:b4:76:76:0f:a0:a8:d6:
                    19:58:28:7e:74:58:0c:d3:22:e0:7b:17:0d:82:b6:
                    af:f2:9f:12:df:df:fa:e0:c1:73:04:8f:81:90:fb:
                    86:51:6a:16:92:20:83:84:bb:15:6b:7a:a0:c6:f4:
                    e3:e6:f5:7f:75:58:32:75:23:c0:89:fd:fd:05:b1:
                    00:3f:d9:a7:46:3a:0c:a7:ad:31:95:df:57:75:dc:
                    13:63:f4:33:e7:36:bf:1d:f2:47:d6:21:83:88:c5:
                    38:1c:4a:9e:7e:32:54:f0:15:c7:53:e4:be:1e:06:
                    90:17:c7:2c:87:61:f0:d4:85:02:e0:e2:bc:39:c9:
                    21:ed:ab:8c:2c:cc:95:2a:2f:c4:7d:12:84:dd:2c:
                    d6:e2:04:c9:cb:e2:75:79:0c:3d:20:0b:e0:ea:2e:
                    01:cd:c6:69:b4:03:44:de:d4:71:f5:3a:d3:17:25:
                    24:a7:a7:23:c8:ba:26:a9:fe:c2:2b:f4:ac:a6:b8:
                    66:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BE:D3:C9:8F:12:65:34:F1:6D:34:B4:83:39:A2:BD:43:FD:31:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a25adc19-0b0f-3e58-9770-caf9c965b218.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:f5:5d:6a:56:72:f3:3c:4a:73:bc:e7:01:dc:54:5f:0c:d7:
         05:b2:97:6d:e9:ff:b0:62:cf:6c:24:1c:45:fc:7b:8b:6e:8a:
         71:db:7e:cf:23:63:19:b8:2a:df:78:8d:cb:02:08:29:96:3a:
         85:a4:9a:a4:56:5f:b5:24:e9:dc:a0:93:cc:23:1e:71:67:d3:
         0c:30:b4:a3:a0:8a:8f:8a:88:ce:56:ad:7e:29:be:fa:b8:03:
         be:b6:f1:49:fa:0d:5e:78:8d:45:44:9f:14:bb:c7:fd:be:fd:
         96:e8:69:bb:b7:d1:15:6c:6b:0a:3c:0f:1b:34:93:bb:8d:d2:
         d5:64:00:75:b8:92:73:30:d0:57:61:d9:66:02:e6:19:e1:26:
         23:7b:2f:16:a3:6f:98:c1:7a:82:2f:6a:1c:7f:91:09:27:b7:
         5e:98:d9:e3:e8:35:cf:88:69:25:25:e3:99:1c:ba:e7:7d:04:
         99:0f:a7:f4:3b:ad:69:d5:fd:18:76:f2:ad:7e:f8:60:9b:6f:
         de:5f:49:58:d4:8f:c6:28:21:b4:2e:ae:4a:27:aa:ea:cc:ac:
         89:4a:bd:84:18:8d:3f:2a:2b:02:69:6c:7d:2e:fa:00:de:e1:
         06:f4:5d:14:93:15:9c:33:9c:88:03:7a:62:b2:47:b9:24:ae:
         07:ca:b6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:14:17 2026 by rpki-client