Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ba04abe7-bce1-3a26-9345-1eb8b4f16f15.roa
File:                     ba04abe7-bce1-3a26-9345-1eb8b4f16f15.roa (raw, json)
Hash identifier:          CfJMUPRX6ArTyI4G2lSMwA3IQ1Fbdg5KesAjz+KbvPY=
Subject key identifier:   98:B1:79:E3:EC:AC:7B:A4:B4:5C:19:DF:BF:D9:74:FE:1E:65:62:56
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D773A67652E8669456922A9C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ba04abe7-bce1-3a26-9345-1eb8b4f16f15.roa
Signing time:             Sat 11 Apr 2026 01:00:24 +0000
ROA not before:           Sat 11 Apr 2026 01:00:24 +0000
ROA not after:            Fri 10 Jul 2026 01:00:24 +0000
asID:                     214238
IP address blocks:        142.111.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:77:3a:67:65:2e:86:69:45:69:22:a9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 11 01:00:24 2026 GMT
            Not After : Jul 10 01:00:24 2026 GMT
        Subject: CN=b055ac56-1224-4afb-9126-eef2d15f3be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:df:77:e8:de:ea:a7:85:4c:5e:54:f1:c7:90:
                    c1:bc:d7:3b:9c:f1:e6:a9:dd:46:5c:59:56:0c:8b:
                    7f:5f:e3:11:a5:b4:d7:0c:51:02:1b:50:d0:16:83:
                    32:b0:6c:f0:f9:b9:fc:5c:93:62:ad:e3:8e:99:9f:
                    13:a4:9c:60:5e:67:89:1e:29:53:b8:74:52:13:92:
                    e7:05:cd:f3:b9:41:a4:dd:37:2b:80:fb:a4:f7:72:
                    51:ec:f3:9d:7e:ce:62:e6:c4:fc:e3:3b:59:61:09:
                    70:c1:5f:48:89:df:ea:0a:66:43:30:ea:4e:54:45:
                    6c:a8:29:57:3b:05:92:7b:21:e1:e3:f4:19:a7:b5:
                    60:69:a8:f2:76:67:ca:21:41:60:0f:82:8e:a6:9d:
                    10:7b:c7:76:ea:b3:bc:ea:0e:b6:77:fb:5f:5f:fb:
                    5b:8f:ac:61:54:e3:cb:61:41:38:59:db:f2:0d:b9:
                    f1:1a:a1:b6:24:78:f1:de:22:c8:ac:fe:e6:c3:83:
                    bb:67:4f:f1:c9:54:d5:bb:14:a0:e5:e6:9a:57:90:
                    bc:11:d7:b7:28:2f:61:5f:4c:d2:c4:90:cf:ad:84:
                    f0:34:d6:45:6a:b3:ca:cc:b1:28:f6:c0:72:b0:e1:
                    c1:52:99:ca:e0:fa:86:5f:b5:5e:b5:21:c2:10:e6:
                    30:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B1:79:E3:EC:AC:7B:A4:B4:5C:19:DF:BF:D9:74:FE:1E:65:62:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ba04abe7-bce1-3a26-9345-1eb8b4f16f15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:79:91:bb:5e:56:23:c0:c8:cb:2a:31:74:a6:d8:49:a2:cd:
         8b:35:0a:b1:ca:56:a9:52:84:a4:3f:de:98:91:30:3a:6a:11:
         0c:ee:33:15:a9:1b:10:55:90:bb:d7:bd:4c:e7:00:ea:5b:a9:
         8a:d7:d3:1b:df:b2:3f:3a:69:c0:ec:35:0c:7c:e9:ea:85:7b:
         60:be:53:98:b3:e4:cf:ad:c0:e1:1c:32:a9:56:5e:29:4a:70:
         42:96:19:0a:d2:b2:a0:2c:46:37:d6:f4:d8:e4:dc:10:80:13:
         a2:17:d9:f7:83:34:ee:9f:c3:3b:b6:ed:6a:46:00:e6:b3:5a:
         c2:66:7d:ea:c7:f2:c1:f9:f3:21:3f:64:f3:34:27:84:5a:2f:
         e0:e2:2c:ad:ed:e5:48:ca:29:16:37:07:9d:8c:2c:89:c9:51:
         23:dd:0d:24:87:32:db:02:4f:bf:51:19:27:94:92:8a:ee:59:
         d5:68:b2:95:aa:41:cc:c1:01:ef:d6:27:8d:f8:0c:c9:eb:b9:
         bd:d2:de:fb:73:a3:0e:d1:31:5d:ee:d0:64:34:a5:9e:6d:07:
         bf:1a:e5:a0:5f:a7:83:14:53:ec:b5:e2:65:06:dd:14:8b:6a:
         3a:92:61:ce:54:12:a9:7c:a9:98:38:f0:9a:03:4d:f9:f2:44:
         f1:cb:df:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 09:31:47 2026 by rpki-client