Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ffc90bf6-afc1-3eef-89c3-6b6892736388.roa
File:                     ffc90bf6-afc1-3eef-89c3-6b6892736388.roa (raw, json)
Hash identifier:          B1jRs81Rdjlv9mCQ0hrNJb3Eb4Fatn2Mj+Tw2Gjp/Yg=
Subject key identifier:   31:E1:06:0B:7D:5D:BB:5B:FC:1B:03:CD:7B:B4:65:54:59:97:98:59
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EE0C216A115431FC692DC1600
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ffc90bf6-afc1-3eef-89c3-6b6892736388.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     134351
IP address blocks:        142.111.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:16:a1:15:43:1f:c6:92:dc:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=a0f914fb-e53f-4c13-a505-42c782ce33af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:91:c9:c2:47:cb:0d:8f:b6:c3:a6:52:93:71:
                    81:b1:0b:0a:ac:84:60:16:95:58:b2:ae:e3:b2:a7:
                    74:cc:b4:22:27:51:cf:21:2d:1e:18:16:72:ce:ea:
                    b2:b6:d5:56:a1:f8:f3:a9:b0:24:ba:ec:3b:df:aa:
                    29:a0:68:da:61:3e:73:c9:f7:75:4f:a4:c6:85:a9:
                    ea:71:b6:e1:c9:63:b0:5b:36:93:6f:2d:b4:fb:0a:
                    63:4c:0d:6b:e5:f9:e3:5b:3e:9c:6b:ce:6f:45:d3:
                    5c:c9:1b:69:86:ae:10:d9:8e:b9:af:fb:c5:ad:d3:
                    5c:f4:0b:8b:a3:b9:f2:38:17:f0:4e:06:21:6d:93:
                    70:fc:c6:27:a0:84:a5:51:03:98:30:62:ef:17:a6:
                    b2:a0:cf:ee:ab:9a:c2:7d:f9:0e:8e:26:9f:37:28:
                    ac:92:c6:2b:34:48:b0:a2:68:9c:a7:7f:03:4f:55:
                    2c:74:c5:73:33:9d:63:b9:cf:13:82:3e:af:f7:f7:
                    75:dd:2a:be:67:39:35:8c:93:48:f4:61:a1:0c:2e:
                    c4:78:92:25:f5:d6:5d:88:be:65:99:ea:9c:0d:23:
                    99:fd:aa:ee:a4:c4:b1:b7:0a:c7:5e:8a:3b:6f:7f:
                    a8:bb:93:e6:cd:4a:d9:57:8d:93:83:3b:23:8b:3a:
                    99:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E1:06:0B:7D:5D:BB:5B:FC:1B:03:CD:7B:B4:65:54:59:97:98:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ffc90bf6-afc1-3eef-89c3-6b6892736388.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:e9:9d:39:2d:d5:4f:1f:4f:80:1d:15:85:b7:3b:09:68:37:
         ab:6a:65:54:bb:d0:6f:e3:13:5a:92:5c:38:b6:b3:6f:f4:1d:
         01:e0:b3:3b:45:b9:14:62:31:7c:a4:fa:41:36:36:fc:04:cc:
         f2:f7:e2:8e:bc:20:48:4b:32:91:54:77:09:e5:4d:33:44:ad:
         37:cc:0b:ad:f7:0a:7a:ca:13:06:a1:c6:ae:3a:1f:bf:b3:fa:
         2a:cc:2a:55:dc:37:04:de:8a:ba:00:42:17:5e:bc:74:4f:69:
         67:47:f2:3e:48:fe:2d:a5:7c:18:e4:bc:1d:0f:17:c1:42:36:
         1b:0b:97:83:ec:08:e2:c8:a1:27:8d:57:9a:a4:f8:47:9b:43:
         dd:11:46:60:bc:00:65:97:51:31:6f:27:cc:fe:50:72:3c:2f:
         49:6c:46:84:d0:8f:11:01:55:bf:e0:6e:f6:99:9d:2c:a4:3e:
         f1:d6:5b:d6:7c:42:d7:12:06:8b:f4:87:0d:97:4f:2a:a6:e8:
         13:5b:e6:db:38:f4:42:ab:21:5a:ae:70:54:25:27:e3:cc:de:
         0e:79:c3:43:c5:b7:82:45:0c:46:b2:77:c9:b5:3e:19:fb:15:
         df:f4:6d:87:a8:99:5d:3c:48:79:de:0b:0e:f1:e6:ea:49:db:
         39:e2:6a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 14:20:14 2026 by rpki-client