Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ba9e75c8-c492-37ea-ab00-be6d7e0208c4.roa
File:                     ba9e75c8-c492-37ea-ab00-be6d7e0208c4.roa (raw, json)
Hash identifier:          FRXjylypmYlndaCQR4ox5q5Pvu5AFRd++gIMm1rrExU=
Subject key identifier:   C7:B2:78:6F:B0:66:AC:5B:86:8C:BF:91:15:1B:25:92:F2:AD:1C:5D
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DF7A5DC7B12528F8FC255D000
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ba9e75c8-c492-37ea-ab00-be6d7e0208c4.roa
Signing time:             Wed 27 May 2026 01:00:14 +0000
ROA not before:           Wed 27 May 2026 01:00:14 +0000
ROA not after:            Tue 25 Aug 2026 01:00:14 +0000
asID:                     3257
IP address blocks:        142.111.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f7:a5:dc:7b:12:52:8f:8f:c2:55:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 27 01:00:14 2026 GMT
            Not After : Aug 25 01:00:14 2026 GMT
        Subject: CN=f3df7740-42b1-4a04-9e24-37fa391964d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:77:c1:04:d6:ce:26:b2:02:eb:e2:f2:20:9d:
                    d5:3b:dd:ab:42:4b:05:e9:55:2a:26:1a:ee:16:6e:
                    29:bb:7c:c6:a8:f0:c5:8d:bc:23:ae:62:ca:4f:9a:
                    a9:02:47:b9:d0:9d:a0:bb:e7:fa:73:f5:26:a5:41:
                    ec:95:ac:28:e1:b6:39:30:dd:02:83:13:c2:f9:e0:
                    d3:65:5e:bc:ff:d1:d0:ef:24:ff:cf:ac:ed:1a:30:
                    89:4b:ee:c3:0b:d7:07:0d:00:94:d9:5e:e6:d0:4f:
                    8e:d4:39:b1:74:88:83:86:15:e0:f8:99:ef:b9:95:
                    85:cf:ac:76:dd:be:9a:54:4d:b1:1a:50:cf:63:5e:
                    f7:ff:8f:5b:0f:0a:c4:23:8c:f8:09:83:96:8e:08:
                    c2:c0:5c:68:90:35:dc:07:7c:31:1c:1e:b8:99:1b:
                    95:a3:5e:b3:9d:7d:41:03:ad:8d:3a:1f:ec:54:c7:
                    27:51:db:ae:54:69:34:9f:f6:ed:1e:75:d2:fa:79:
                    10:12:f4:b0:16:e4:a2:5a:22:bc:31:99:99:e0:09:
                    f9:ee:fa:54:47:5f:1c:b0:e3:d6:7a:af:f3:e5:e4:
                    dc:e8:5e:b6:a5:56:6e:c7:94:07:63:b0:a1:76:bc:
                    3b:c9:8b:9e:30:bd:9e:47:ee:1b:73:5b:37:43:30:
                    67:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B2:78:6F:B0:66:AC:5B:86:8C:BF:91:15:1B:25:92:F2:AD:1C:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ba9e75c8-c492-37ea-ab00-be6d7e0208c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:95:d3:4d:b8:f9:4a:d0:ab:51:b3:bf:88:00:48:f5:71:09:
         41:83:d4:b5:f3:71:0e:e5:fc:2d:d6:9b:fa:a2:1c:15:34:33:
         97:8b:1f:1b:14:45:0a:ce:93:a6:19:a8:4d:df:44:00:19:2d:
         54:77:fc:87:19:23:e1:c3:a2:71:a0:d9:59:6a:e8:1e:33:84:
         fb:df:e8:a4:73:aa:8a:11:82:16:c4:29:c8:1a:7a:88:81:34:
         92:2b:2a:cb:7a:b1:e7:ba:25:1d:c2:83:67:7f:be:dc:57:ba:
         59:43:62:5c:ff:53:46:04:76:18:08:dc:85:04:af:7b:b6:52:
         fb:a3:fc:b9:fc:c1:f3:4c:c7:17:02:9a:17:07:c5:49:56:f5:
         3e:da:a6:f6:db:00:8e:79:fc:86:ae:10:2d:4c:5a:d7:3a:aa:
         e4:75:3a:95:6c:5e:03:02:57:83:17:c8:a1:c7:e5:ce:39:5a:
         0a:a3:70:44:83:d5:33:0b:89:d5:06:ba:39:d2:88:05:e7:0e:
         e8:02:4a:0d:49:47:f8:17:70:be:a3:1c:29:65:6c:c8:ff:6a:
         21:01:66:09:28:b7:63:5c:f6:b1:c5:a6:fe:85:ea:fb:cc:68:
         a9:b2:a1:1c:ff:3c:51:31:da:19:ed:46:a4:48:98:aa:a0:7d:
         8b:dc:b5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:13:34 2026 by rpki-client