Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/39d0c9c4-e9c1-3c62-bb8d-3ee570e03259.roa
File:                     39d0c9c4-e9c1-3c62-bb8d-3ee570e03259.roa (raw, json)
Hash identifier:          DPTKMUMd8siakoNu7AGP68S3xwOCqiPTROETpKnVmy4=
Subject key identifier:   D9:6E:82:B3:D4:0B:61:35:CE:8B:18:85:1C:47:EC:3B:0E:A9:00:17
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D26449FBBA1D573F29BD3E300
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/39d0c9c4-e9c1-3c62-bb8d-3ee570e03259.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     212238
IP address blocks:        142.111.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:9f:bb:a1:d5:73:f2:9b:d3:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=c4c9448a-568d-41dc-9ffe-2e592edbd7cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:34:c9:b6:df:47:fa:23:c3:cf:a2:86:a8:b0:
                    c0:0f:be:13:ab:6e:f6:4f:f3:f2:71:5c:e4:ef:05:
                    95:1a:14:59:a4:4b:62:98:c8:85:32:1e:19:a7:40:
                    cf:63:ec:f7:ac:8f:68:06:ea:53:ea:f6:88:13:23:
                    c1:9e:6e:ee:47:81:08:1c:15:98:88:27:95:c7:bf:
                    72:41:e9:f3:d4:22:68:d9:4d:98:7f:dc:2b:15:cb:
                    98:4b:b2:2a:d4:9a:44:fb:b0:b4:2b:5b:a3:f2:eb:
                    7e:52:02:9a:0e:76:6e:2b:f4:70:ad:f3:53:8d:19:
                    82:40:ac:6b:6a:5f:7e:41:b5:4f:27:76:d2:e2:c8:
                    ca:6f:c6:85:7c:77:57:1b:12:9a:61:ce:da:63:d5:
                    d1:36:94:22:78:ea:2f:7c:a7:f5:ed:71:8d:ae:26:
                    d3:50:fe:66:a6:56:29:ac:95:b8:1f:2a:a7:72:98:
                    0e:81:9d:f6:c0:c9:c6:fc:cb:3b:b8:45:f7:fb:04:
                    bd:85:a2:3b:ea:75:fd:ec:80:b5:9a:d5:f8:13:6d:
                    1a:63:b2:af:a3:d8:e3:1b:f1:4e:11:d8:4a:aa:d1:
                    20:f9:79:2f:96:a9:fb:2c:48:dc:7d:08:8d:27:7a:
                    50:eb:92:be:10:ea:fc:48:7d:a1:58:4f:a2:e1:01:
                    0f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:6E:82:B3:D4:0B:61:35:CE:8B:18:85:1C:47:EC:3B:0E:A9:00:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/39d0c9c4-e9c1-3c62-bb8d-3ee570e03259.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:f8:af:59:09:a0:08:2d:ba:10:07:66:d6:67:ac:dc:20:32:
         ee:1d:31:22:a7:e9:60:24:eb:0b:56:41:00:78:89:e3:5d:f5:
         e5:16:76:34:38:50:85:35:44:3f:e2:18:d5:66:19:60:53:a5:
         60:24:ee:71:bf:55:5d:a1:60:9d:70:58:f4:da:36:8d:69:a5:
         69:8c:7e:b2:9d:c4:a0:ff:91:1b:e6:f9:1a:b8:56:52:57:93:
         8d:75:32:ab:11:29:21:59:07:e6:1b:84:33:6a:9c:75:10:51:
         64:c8:10:ac:e2:34:24:2c:de:8d:b7:2f:b0:59:26:a8:92:13:
         61:b8:4e:65:0c:04:1f:02:e7:a7:99:5d:da:f2:ae:99:04:76:
         00:0b:bd:c9:70:46:d9:4c:b3:af:b4:4c:74:ae:29:6d:b5:6f:
         c0:90:d9:24:b0:83:75:17:2e:a5:49:88:9b:af:e5:2c:0a:7d:
         0e:5c:64:b4:db:30:32:a7:ad:db:a7:69:ec:3e:bb:c3:b8:e3:
         0a:15:18:3e:d8:f2:0e:94:5c:1c:e8:64:65:b7:58:36:9e:6d:
         16:3b:86:c2:9b:b0:f8:a9:e4:dd:3b:a9:c3:2a:11:36:3e:b0:
         ce:f2:1f:68:86:82:9f:61:92:07:e4:c9:a7:3e:55:9a:15:55:
         a0:89:a7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:52:37 2026 by rpki-client