Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/abe2a908-03b4-3ee6-bae2-3bf23cbbeec8.roa
File:                     abe2a908-03b4-3ee6-bae2-3bf23cbbeec8.roa (raw, json)
Hash identifier:          hz1GWuv5eEEq4n6OvTwrcYV2pXWzjhArfGCF5PDV6IQ=
Subject key identifier:   98:AB:64:67:3C:24:81:17:27:72:1F:C8:64:4E:75:29:7C:D2:0E:DE
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E4DCEA41DCA4C8AF99387A180
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/abe2a908-03b4-3ee6-bae2-3bf23cbbeec8.roa
Signing time:             Fri 26 Jun 2026 21:42:07 +0000
ROA not before:           Fri 26 Jun 2026 21:42:07 +0000
ROA not after:            Thu 24 Sep 2026 21:42:07 +0000
asID:                     213929
IP address blocks:        142.111.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:ce:a4:1d:ca:4c:8a:f9:93:87:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 26 21:42:07 2026 GMT
            Not After : Sep 24 21:42:07 2026 GMT
        Subject: CN=a666c4db-e3c0-444a-94aa-efce1eea05be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:dd:11:af:bc:1b:18:ea:3a:7d:71:51:80:b6:
                    17:c5:86:f8:d3:ce:7d:55:c8:99:38:90:7f:4e:5d:
                    be:df:03:bd:8c:34:40:0e:7c:be:e8:2f:b2:16:19:
                    38:0f:fd:7d:a3:c9:3e:a9:e4:66:38:b0:f6:b3:a4:
                    48:d0:65:5b:c5:43:2c:6a:20:36:6e:8c:12:10:08:
                    10:9f:2e:97:b7:1c:dc:d3:8a:1c:f6:51:d7:98:e1:
                    6d:53:33:8a:9a:4c:14:23:01:55:50:58:eb:c9:52:
                    91:0a:b6:4d:97:82:5a:93:be:ac:1e:eb:b2:cc:b4:
                    7c:39:c5:f8:45:81:9b:57:70:04:55:b1:c2:d1:95:
                    dd:55:a6:11:4e:3f:9d:b0:a2:be:f9:b3:e8:76:2e:
                    81:49:55:30:06:a4:1f:fd:ba:20:f2:b6:58:7d:a8:
                    b3:aa:a0:96:97:e0:d6:0b:a5:bc:40:72:44:71:4f:
                    b9:11:b7:cd:f5:48:9d:97:45:38:e2:74:63:ff:58:
                    7c:83:04:0b:f0:e2:c2:c1:52:df:35:82:1e:b2:df:
                    c7:6e:aa:f6:5c:79:98:e4:f0:a1:5c:45:7a:9b:d9:
                    76:e6:2b:59:b6:ad:80:22:63:81:7a:cf:b3:e4:63:
                    ed:c8:ae:86:2e:68:d2:77:2d:e8:33:eb:5f:c3:09:
                    ab:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:AB:64:67:3C:24:81:17:27:72:1F:C8:64:4E:75:29:7C:D2:0E:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/abe2a908-03b4-3ee6-bae2-3bf23cbbeec8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:e0:d6:60:14:b9:b4:c7:05:d6:de:e0:e4:87:ea:c1:8a:d0:
         39:ae:97:f8:6a:d5:1b:27:4a:ca:84:7f:70:0e:33:13:76:28:
         9e:98:d8:15:b6:9a:12:1b:c2:81:7e:d5:2f:be:31:ff:3b:9c:
         ef:2c:0a:d1:37:52:1b:06:82:73:46:33:3b:fd:dc:69:7b:22:
         9b:b1:2d:c7:33:3f:0b:03:55:b1:f6:65:8f:0c:cc:1f:50:7d:
         8c:8e:42:b0:f6:ef:47:e4:f7:8e:f5:04:79:83:4c:b2:c6:df:
         61:95:d5:3b:5e:f2:f8:a7:de:f3:27:3b:c4:09:72:8f:b3:ed:
         ad:6d:c1:e9:b8:06:8e:f7:4c:d1:bd:b2:e7:e9:36:04:98:48:
         8b:11:bf:ae:f2:a7:e1:cf:3a:79:d9:ef:6a:5d:d5:35:72:ea:
         33:17:e6:e8:4e:9f:52:ef:45:92:03:32:e5:54:3b:08:77:55:
         50:00:df:c4:75:07:08:61:4d:30:3e:91:d5:c9:f5:11:10:ca:
         9b:6d:c2:a2:87:c1:2d:4c:b8:bc:89:ad:b6:7d:43:e8:6f:45:
         6b:6f:55:44:e9:47:de:6f:76:d8:39:bf:3d:2c:26:08:99:d0:
         d1:60:6c:62:fa:ef:9c:a6:fb:37:9f:99:81:e5:9c:45:c4:21:
         5c:08:af:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 18:18:49 2026 by rpki-client