Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/491818b1-54a6-3d34-ab8c-7164695b496d.roa
File:                     491818b1-54a6-3d34-ab8c-7164695b496d.roa (raw, json)
Hash identifier:          8Vt12dYLTpjoLrV5rc8LO1yCYwPUCx7XFmgKLqYuuAI=
Subject key identifier:   FE:69:FC:34:EF:A8:CD:1B:F8:92:3F:74:15:BC:24:A4:8D:80:DF:8A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D93256646D291CA0CAD383880
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/491818b1-54a6-3d34-ab8c-7164695b496d.roa
Signing time:             Tue 21 Apr 2026 01:00:24 +0000
ROA not before:           Tue 21 Apr 2026 01:00:24 +0000
ROA not after:            Mon 20 Jul 2026 01:00:24 +0000
asID:                     16265
IP address blocks:        142.111.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:93:25:66:46:d2:91:ca:0c:ad:38:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 21 01:00:24 2026 GMT
            Not After : Jul 20 01:00:24 2026 GMT
        Subject: CN=2059131f-73cc-4276-932d-cccfbee00585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2a:b4:82:c4:20:fd:c8:24:46:b2:17:01:dd:
                    5d:a8:12:4a:dc:03:bf:74:69:5e:c1:2e:92:97:74:
                    ac:34:21:b3:9f:32:dc:af:6a:01:8d:3b:78:42:ec:
                    9b:79:eb:a8:e4:23:39:27:a7:b5:05:4e:a3:56:08:
                    7f:73:ad:0c:24:dc:21:be:2e:bc:d2:38:5a:22:3c:
                    d9:bd:15:56:a1:b5:21:a2:66:42:ba:84:0e:5d:56:
                    b4:c0:d1:23:89:1e:21:02:d0:da:f3:2b:c1:e5:ee:
                    15:85:18:87:0c:12:10:44:26:49:53:ae:b2:2e:67:
                    2e:f3:83:bc:94:9e:30:00:96:2f:c5:ea:01:fe:37:
                    fc:33:6b:f4:7f:23:62:3b:52:59:97:3d:e9:30:3e:
                    e7:38:92:16:b6:36:1d:db:38:dd:2f:38:66:e0:1a:
                    8b:58:c5:69:e9:03:21:98:bd:34:d2:ac:a6:b7:4e:
                    e1:35:33:0e:06:9d:7c:d1:49:19:4f:30:08:1c:25:
                    af:6b:aa:c8:50:85:1c:bd:23:b9:3a:1d:5d:73:04:
                    a6:f6:e0:60:41:ac:1e:7e:d2:47:0d:8e:f1:fb:f6:
                    9e:67:7c:1d:b9:d0:a7:6d:28:87:8a:04:32:06:08:
                    c8:52:a1:d7:09:7d:b8:ae:b5:25:00:0a:f5:f7:10:
                    20:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:69:FC:34:EF:A8:CD:1B:F8:92:3F:74:15:BC:24:A4:8D:80:DF:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/491818b1-54a6-3d34-ab8c-7164695b496d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:94:cc:51:40:d6:aa:06:ad:2c:fd:f8:24:11:57:d2:37:e1:
         ca:22:99:35:98:1f:fd:1d:93:0b:60:8e:e3:92:50:c1:45:32:
         d2:07:53:22:e9:97:79:19:af:03:50:f0:9c:3a:a5:35:28:2e:
         03:7a:56:b6:8d:7e:91:f7:76:34:95:f3:f0:7f:4f:1c:15:ff:
         67:02:39:8a:7a:72:eb:87:37:87:75:fc:20:8e:dc:e2:86:fb:
         e7:55:b0:8b:5c:f1:ca:2c:5b:08:b8:00:b9:f7:66:78:60:17:
         2e:f2:a5:7a:70:ed:e0:30:94:59:7a:40:e0:88:03:ce:c6:51:
         2b:1a:cf:0d:3c:a3:86:9f:a2:f8:bb:8a:89:85:f1:7a:8e:1d:
         a4:2d:0d:0e:0c:f0:3b:b9:39:a2:ee:5e:a3:a4:ad:a7:5b:df:
         e7:a3:a9:e2:28:4a:34:59:5e:b2:6a:1e:a0:e2:f4:a3:d6:c7:
         36:ac:c8:c0:1b:e1:1f:1e:bd:b2:b1:56:fe:8d:04:10:52:73:
         70:b8:8a:59:0a:ef:b1:a5:15:2a:46:b6:87:80:1a:6e:7b:49:
         5e:88:56:61:e2:65:d3:26:ae:19:fb:f4:b2:1d:b8:da:2e:1f:
         08:77:6d:46:31:27:2b:ff:1f:6e:1f:c9:53:55:e3:a8:b5:9a:
         0d:8f:92:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:44:56 2026 by rpki-client