Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ffc90bf6-afc1-3eef-89c3-6b6892736388.roa
File:                     ffc90bf6-afc1-3eef-89c3-6b6892736388.roa (raw, json)
Hash identifier:          LQaVMOzTaALLz2PTn3XWLSr+GbeP23wb1V4gjTXVd0I=
Subject key identifier:   C4:81:63:E6:0D:93:93:1C:96:F1:DD:01:9B:2E:27:0A:1A:25:A7:74
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E3E5F4AEE49EF0308FE501B80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ffc90bf6-afc1-3eef-89c3-6b6892736388.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     134351
IP address blocks:        142.111.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:4a:ee:49:ef:03:08:fe:50:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=19680b08-eb41-411d-8ec4-bd0c4a6bacb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d4:a7:2e:fa:b6:5a:4a:15:d3:04:29:a4:3f:
                    0b:9b:37:d6:59:5d:69:34:2f:94:c3:85:0c:d3:68:
                    f4:f3:41:5e:c4:f3:19:d1:de:1f:1c:ff:35:f0:aa:
                    49:c8:e2:ac:5f:bb:cd:43:a7:a7:15:19:b5:00:a0:
                    ee:f9:98:52:eb:1a:af:c8:54:ae:1e:1c:29:a2:50:
                    44:db:aa:fa:ae:e7:21:90:b9:ce:6b:aa:ae:b9:ca:
                    0e:e2:31:d3:29:6b:a7:5a:b5:66:10:40:a1:9c:71:
                    8d:fe:71:06:5d:49:0c:00:00:a1:9c:19:06:3c:06:
                    6b:da:7e:c4:45:8f:f5:87:ef:b5:df:7a:c4:a6:2a:
                    22:fd:3e:ba:a3:97:3b:35:57:cf:b9:08:22:21:c7:
                    a0:ef:12:86:51:86:92:be:15:dd:f8:0a:ac:b3:fa:
                    a4:25:9b:2a:07:1e:b6:52:f8:1f:46:60:3f:29:70:
                    60:66:f4:15:1e:c4:a2:9f:4a:a8:fc:9d:39:7e:01:
                    b0:90:da:a3:7e:3e:d9:06:65:a7:ef:c9:f9:f9:48:
                    f7:11:f2:ce:33:d0:6f:b4:e0:d7:18:f9:51:36:98:
                    48:25:90:52:32:1c:ab:0c:7d:d2:9e:b2:2d:29:9a:
                    88:00:36:1c:7f:70:47:79:33:dd:75:8c:31:f7:ce:
                    f7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:81:63:E6:0D:93:93:1C:96:F1:DD:01:9B:2E:27:0A:1A:25:A7:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ffc90bf6-afc1-3eef-89c3-6b6892736388.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:a5:64:4d:d2:93:7a:33:1f:96:8e:21:86:de:3c:b3:44:8b:
         a2:b2:85:08:21:00:85:44:d4:6c:61:ac:2b:37:a5:93:35:f4:
         1e:e6:7e:d8:ee:83:0f:da:67:b4:8f:b6:33:3d:d5:13:f3:6c:
         ab:68:12:50:08:1a:df:60:26:c2:7b:c7:87:c7:53:58:3b:08:
         54:76:9d:fc:75:96:b5:41:82:a2:7b:a1:6c:52:ab:17:38:5c:
         ea:5b:92:35:b4:1d:e8:8c:13:90:b9:17:43:aa:02:8b:e3:47:
         68:d9:08:b8:ba:43:6e:6f:37:72:1d:10:cd:81:b2:70:02:10:
         d6:d9:71:da:32:81:04:4e:55:3e:72:1f:15:31:6b:66:8f:1f:
         74:72:46:cb:93:37:17:cb:35:45:e2:ad:63:55:d2:ab:34:9e:
         0a:9b:0d:ec:76:bb:75:6e:7c:a9:8f:64:67:3b:61:eb:77:a2:
         28:13:e3:1f:cc:6e:b2:1b:9a:36:46:6f:9d:1e:24:cd:76:d4:
         ba:fd:bf:d8:0b:41:3c:ea:70:d9:82:b4:7f:29:fa:dc:59:63:
         20:76:bf:eb:60:1a:b6:e0:d5:c7:bc:bb:0e:19:06:ad:87:c0:
         4a:d8:ef:d7:3e:fd:29:b3:c0:d6:63:81:8f:92:ce:82:be:03:
         31:48:15:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:34:40 2026 by rpki-client