Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ab987f0e-2de8-3442-8334-5e9eca7c8609.roa
File:                     ab987f0e-2de8-3442-8334-5e9eca7c8609.roa (raw, json)
Hash identifier:          vmh9qH7zEa+wexQeCGKRIdXUa8fGZG9hut7E+dULvb8=
Subject key identifier:   1F:B2:B9:29:22:48:DF:AA:E3:E5:3D:8E:9B:89:BC:3E:48:E0:14:32
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DEBBAC10C6F431C600FBBBA80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ab987f0e-2de8-3442-8334-5e9eca7c8609.roa
Signing time:             Fri 22 May 2026 18:32:49 +0000
ROA not before:           Fri 22 May 2026 18:32:49 +0000
ROA not after:            Thu 20 Aug 2026 18:32:49 +0000
asID:                     9009
IP address blocks:        205.186.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:eb:ba:c1:0c:6f:43:1c:60:0f:bb:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 22 18:32:49 2026 GMT
            Not After : Aug 20 18:32:49 2026 GMT
        Subject: CN=a68bd199-b524-47b2-8b31-1102a806f1fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:22:cd:e0:40:18:0d:c8:29:ef:ec:88:eb:28:
                    4f:5f:fe:0d:9d:30:03:80:8b:dc:02:c8:f2:ba:e2:
                    22:cf:fb:c9:76:ef:e3:76:eb:41:c0:a5:4b:f5:3c:
                    8e:6d:56:ab:1a:9b:a0:4e:3a:de:f6:90:14:db:fb:
                    50:29:16:f1:df:ba:50:a8:53:b1:b3:17:1f:33:39:
                    75:38:5c:01:61:b2:9c:bd:7b:cd:49:a9:0e:a7:fd:
                    98:a6:b9:8a:0c:a3:9b:34:db:0d:04:91:74:b9:2f:
                    08:1d:30:8a:1f:64:ba:fd:24:57:cc:77:de:ea:19:
                    e9:2c:ab:fc:0f:b4:95:66:25:5a:ce:39:fd:8f:8d:
                    69:5e:93:06:80:e5:c0:a3:11:da:56:3c:cc:44:23:
                    2a:4d:b3:62:17:85:e5:10:fc:75:06:8d:ac:87:2e:
                    f1:de:8e:ab:d5:d6:89:34:f8:03:18:f5:1d:3e:0a:
                    d5:b3:52:3e:e2:ee:0b:c8:d9:7d:86:91:d7:30:4a:
                    fa:a8:48:dd:7a:fb:58:42:0c:7a:51:88:df:ef:60:
                    1d:a8:51:12:a8:4b:b9:f4:18:ba:a2:da:e8:19:32:
                    79:ca:97:8d:55:f1:a7:be:f8:dd:fc:58:fa:40:65:
                    37:a3:1d:c4:16:8a:e2:8f:5b:58:b5:33:ac:4e:c8:
                    4f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B2:B9:29:22:48:DF:AA:E3:E5:3D:8E:9B:89:BC:3E:48:E0:14:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ab987f0e-2de8-3442-8334-5e9eca7c8609.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.186.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:9d:33:fb:d7:24:0e:5a:1d:a3:f7:9e:f8:cc:26:a2:ae:05:
         fd:fc:6a:26:51:eb:c8:c1:e1:8e:14:d2:e6:cd:97:b9:2e:7c:
         a2:ea:26:a8:39:47:bb:7d:21:df:63:e7:7c:7a:e3:75:bc:e8:
         f2:08:c0:a9:42:22:55:d0:49:39:e2:01:45:5e:10:32:b3:a1:
         16:6c:35:e9:4c:64:d0:cd:94:01:83:17:19:d7:e5:9a:d6:30:
         06:1b:1d:62:0c:03:c5:d4:b3:a7:8d:97:ed:99:cd:fe:da:b2:
         c5:e1:30:8e:a4:8b:51:2e:db:23:ed:2f:7d:6d:ce:d3:a1:b5:
         42:08:80:7e:62:37:f6:ae:4a:a7:0c:b4:e7:43:f1:a6:2d:69:
         d1:1f:ff:37:91:74:8f:c1:5b:ed:33:b7:3d:35:1a:05:83:b5:
         a4:1b:7f:77:c1:38:19:b0:c1:18:33:ac:bc:2e:a5:71:27:70:
         4f:34:1d:6a:2f:79:a4:f3:ae:2c:78:66:89:c1:1f:7e:dd:b1:
         b8:88:6d:7b:fa:62:5f:e4:6f:e6:cc:34:66:6e:23:ae:9a:9a:
         6b:3f:65:60:3e:25:2c:d4:cc:f2:64:d3:1a:d1:13:5e:4f:8d:
         93:fd:8f:da:00:30:f4:3e:97:f9:0e:59:3b:ec:6b:e4:1c:d4:
         1e:28:67:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:12:50 2026 by rpki-client