Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b92c9a33-1827-3b84-8a6f-e151a6505981.roa
File:                     b92c9a33-1827-3b84-8a6f-e151a6505981.roa (raw, json)
Hash identifier:          P3Hq+H5OI9T/0owy4aIY6iBVquBl3gciopqEcbBZ3j0=
Subject key identifier:   D5:75:BD:77:1D:58:48:A0:57:BC:2C:BE:F7:D3:6C:DB:07:42:DB:A1
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DEBD76CF38658E72FB96A8400
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b92c9a33-1827-3b84-8a6f-e151a6505981.roa
Signing time:             Fri 22 May 2026 19:30:36 +0000
ROA not before:           Fri 22 May 2026 19:30:36 +0000
ROA not after:            Thu 20 Aug 2026 19:30:36 +0000
asID:                     11798
IP address blocks:        142.111.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:eb:d7:6c:f3:86:58:e7:2f:b9:6a:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 22 19:30:36 2026 GMT
            Not After : Aug 20 19:30:36 2026 GMT
        Subject: CN=0fc7deb3-d439-4862-b11f-c6d44815c53b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:48:5a:1f:27:73:04:00:48:b4:f1:41:b4:d4:
                    0b:cc:52:d7:14:5a:c7:ef:50:34:83:c0:bc:ab:d0:
                    08:be:61:a4:cf:fe:c8:0e:dd:06:62:5e:16:e4:47:
                    16:95:ec:4f:79:05:ed:d1:ae:3f:52:57:ba:47:fc:
                    3a:9c:ad:53:18:37:40:3f:02:2f:65:be:0b:67:79:
                    99:2f:b2:d4:b8:ff:9d:d9:4c:1a:b3:a0:b9:ed:86:
                    9a:42:d7:6c:97:52:12:97:1a:e9:d6:13:aa:3b:71:
                    bd:0a:04:1c:e3:6d:44:20:6c:53:b1:0c:81:de:10:
                    e5:57:10:e2:4c:3d:a9:27:e4:5a:4e:8c:22:87:1e:
                    ba:3d:f9:49:b7:44:73:d1:76:a8:99:b1:6e:3f:dc:
                    a3:e7:76:6c:67:02:d5:ae:54:90:4b:f7:16:4d:c8:
                    42:1d:a2:ad:cc:7d:db:21:cb:26:83:ce:22:a1:29:
                    46:d4:f5:b4:a6:a3:13:e3:86:68:ac:85:76:c3:d1:
                    c8:fe:8b:25:04:d1:85:7b:5f:f8:ae:11:43:66:4b:
                    e1:f5:02:2e:07:50:12:12:06:bd:7e:be:d7:04:0f:
                    0a:85:c6:24:2c:86:43:78:3a:5a:2c:f7:ab:87:9c:
                    bb:69:05:5c:3e:6a:ee:af:71:28:62:60:d1:f9:bf:
                    5a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:75:BD:77:1D:58:48:A0:57:BC:2C:BE:F7:D3:6C:DB:07:42:DB:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b92c9a33-1827-3b84-8a6f-e151a6505981.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:57:7f:7d:04:0b:26:38:b2:6b:e8:08:e9:47:3b:55:a8:30:
         4b:5d:4e:38:02:d4:69:dc:58:7e:51:fc:32:ae:4a:fe:bb:31:
         50:f5:0c:d9:64:e5:f4:02:89:6b:9b:13:61:74:22:89:69:77:
         df:64:1f:12:c3:7f:87:25:f8:69:26:dd:c5:c7:6b:86:1d:85:
         1f:fc:fe:71:37:99:c7:b9:b8:2e:46:b7:73:2a:a9:ef:0d:74:
         44:2a:21:1c:eb:96:0a:67:2a:de:c9:f0:59:68:2b:6d:e4:df:
         70:3e:1f:dd:7d:bd:f5:fe:c6:6b:2d:a2:7b:fa:3f:c6:c6:9c:
         26:f3:ec:13:70:ae:c4:3f:7b:ff:ab:ec:20:8b:54:ff:a5:61:
         c2:66:83:b1:cc:b5:8d:4a:4a:03:2f:a0:64:9b:45:73:ea:cf:
         12:1e:d9:a0:af:70:7f:f2:ca:2a:94:c1:04:ed:29:e9:4a:a9:
         cf:29:2e:42:da:d8:71:86:87:00:0d:8c:3d:3c:e4:50:49:b7:
         53:83:65:b1:d4:a6:30:97:36:3e:a7:75:59:7d:4c:c7:0b:3e:
         51:bf:ee:13:c1:12:7b:a5:3c:fe:97:2e:74:ca:82:c5:f6:00:
         45:05:fc:1f:42:bd:45:b2:e8:68:af:8c:ee:e0:5a:d8:0c:79:
         e6:86:fe:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3r12zzhljnL7lqhAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDUyMjE5MzAzNloXDTI2MDgyMDE5MzAzNlowLzEtMCsGA1UEAxMk
MGZjN2RlYjMtZDQzOS00ODYyLWIxMWYtYzZkNDQ4MTVjNTNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00haHydzBABItPFBtNQLzFLXFFrH71A0g8C8
q9AIvmGkz/7IDt0GYl4W5EcWlexPeQXt0a4/Ule6R/w6nK1TGDdAPwIvZb4LZ3mZ
L7LUuP+d2Uwas6C57YaaQtdsl1ISlxrp1hOqO3G9CgQc421EIGxTsQyB3hDlVxDi
TD2pJ+RaTowihx66PflJt0Rz0XaombFuP9yj53ZsZwLVrlSQS/cWTchCHaKtzH3b
Icsmg84ioSlG1PW0pqMT44ZorIV2w9HI/oslBNGFe1/4rhFDZkvh9QIuB1ASEga9
fr7XBA8KhcYkLIZDeDpaLPerh5y7aQVcPmrur3EoYmDR+b9ahwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNV1vXcdWEigV7wsvvfTbNsHQtuhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYjkyYzlhMzMtMTgyNy0z
Yjg0LThhNmYtZTE1MWE2NTA1OTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/dMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABdXf30ECyY4smvoCOlHO1WoMEtdTjgC1GncWH5R/DKuSv67MVD1DNlk
5fQCiWubE2F0Iolpd99kHxLDf4cl+Gkm3cXHa4YdhR/8/nE3mce5uC5Gt3Mqqe8N
dEQqIRzrlgpnKt7J8FloK23k33A+H919vfX+xmstonv6P8bGnCbz7BNwrsQ/e/+r
7CCLVP+lYcJmg7HMtY1KSgMvoGSbRXPqzxIe2aCvcH/yyiqUwQTtKelKqc8pLkLa
2HGGhwANjD085FBJt1ODZbHUpjCXNj6ndVl9TMcLPlG/7hPBEnulPP6XLnTKgsX2
AEUF/B9CvUWy6GivjO7gWtgMeeaG/po=
-----END CERTIFICATE-----
Generated at Thu May 28 17:12:56 2026 by rpki-client