Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4c5f6bac-5427-316f-ad21-82b97c9ad5ac.roa
File:                     4c5f6bac-5427-316f-ad21-82b97c9ad5ac.roa (raw, json)
Hash identifier:          JN2Lh87N7rqvsm8NPl2OYD62yJZfyIxzify+DTiaMPM=
Subject key identifier:   2F:B6:1B:D6:96:F9:CC:6E:CF:A0:66:CB:2A:AF:60:F9:A9:B2:C1:AF
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D27AA19AB9777523AC2E8B880
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4c5f6bac-5427-316f-ad21-82b97c9ad5ac.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     44559
IP address blocks:        142.111.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:19:ab:97:77:52:3a:c2:e8:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=ebc4d4f9-2fc3-4f99-ad89-eb87d0049c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:81:bc:ed:9e:b1:5f:b1:f0:fb:f7:ae:a2:11:
                    83:3b:2d:f4:1a:0f:24:09:38:c1:f6:99:3b:40:54:
                    b2:b4:46:31:d2:61:e9:61:63:4d:2d:85:b5:16:b2:
                    2b:73:e5:8a:40:30:f6:7d:84:c9:c6:1b:d5:65:d8:
                    a0:5d:db:42:7c:0a:12:92:2a:cc:2c:43:06:51:6b:
                    f6:2b:04:a4:4d:08:f5:62:a9:c5:5b:2a:98:1a:5b:
                    84:84:1e:15:60:c1:8e:79:87:a0:b4:2c:e8:ed:47:
                    47:8d:1c:d1:c5:69:94:cb:e7:4d:8d:a1:6b:7a:9b:
                    15:c1:5b:ae:1f:3c:66:91:28:0e:69:3e:da:dc:20:
                    53:c6:a8:d1:45:99:b0:bc:f4:dc:54:4a:5b:4f:17:
                    7c:d4:23:11:87:b4:a2:d9:c4:89:20:3e:f0:6b:0c:
                    ac:39:19:e2:c3:eb:d6:e0:cc:5f:d3:4a:8f:73:de:
                    5f:e2:1e:59:18:ce:22:65:6d:ad:8a:b6:9b:c5:4b:
                    2a:a4:e5:05:af:e0:c0:b0:f0:cc:d3:3f:2c:11:f4:
                    e0:d8:3f:0e:58:f0:03:38:30:c1:c1:e7:2c:86:da:
                    09:6b:c0:7a:32:36:70:dd:c5:86:78:4e:03:79:96:
                    14:ff:3a:d0:d7:a4:a9:05:ef:88:21:81:f9:72:ee:
                    06:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B6:1B:D6:96:F9:CC:6E:CF:A0:66:CB:2A:AF:60:F9:A9:B2:C1:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4c5f6bac-5427-316f-ad21-82b97c9ad5ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:ee:f7:1d:3d:bd:d0:b6:17:ea:86:62:82:29:7f:0d:30:be:
         5f:e7:5c:70:c2:7a:80:ef:70:7b:d0:9d:a0:ef:0b:a4:10:64:
         4b:88:d4:05:8d:c5:31:8f:e2:cd:d1:2b:e8:46:73:2a:36:68:
         b9:c1:76:7f:65:c7:ee:c1:b6:67:7c:03:71:77:b1:11:7a:5b:
         82:15:42:56:75:91:6b:35:90:b3:7f:ce:8a:60:6b:87:01:dd:
         69:0f:eb:9e:5b:c1:09:55:fa:f2:7c:78:e0:eb:af:f1:40:ca:
         e3:b6:c5:d4:5f:ea:ac:0c:eb:1d:fa:aa:21:4d:55:fc:8f:91:
         c2:7c:25:22:06:98:0a:8a:08:64:e3:46:f9:09:0d:c9:6b:e5:
         2a:56:a6:47:c8:39:28:65:9b:a4:f6:46:ba:7b:86:e2:79:43:
         e1:87:f2:11:52:6e:b0:a6:7d:34:99:0f:ef:a1:de:d7:23:ef:
         75:c2:60:df:2b:f0:de:d5:5e:db:3a:14:9b:e0:01:20:67:8f:
         3a:69:98:e9:e1:67:a2:3d:25:81:06:ee:39:ab:a4:84:35:7d:
         55:5c:31:26:f1:8b:1a:21:38:69:a9:d6:81:e5:3b:0d:58:ed:
         18:e7:20:05:28:82:bc:e9:18:7d:bd:69:35:b8:17:25:2d:d2:
         41:50:ad:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:02:40 2026 by rpki-client