Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5fbb05d4-bb20-39ce-b442-d9c372e9c233.roa
File:                     5fbb05d4-bb20-39ce-b442-d9c372e9c233.roa (raw, json)
Hash identifier:          ydzLDC43i5MqhIL+H041yhK9AycFkakDZcKGpqouxrk=
Subject key identifier:   86:CD:C9:4B:C9:AF:20:EF:F1:8D:F5:AC:8F:BD:C0:E5:9E:36:FC:45
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584AD66B9E657329A552B5BDAC80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5fbb05d4-bb20-39ce-b442-d9c372e9c233.roa
Signing time:             Wed 13 Aug 2025 01:00:32 +0000
ROA not before:           Wed 13 Aug 2025 01:00:32 +0000
ROA not after:            Tue 11 Nov 2025 02:00:32 +0000
asID:                     214238
IP address blocks:        142.111.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d6:6b:9e:65:73:29:a5:52:b5:bd:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 13 01:00:32 2025 GMT
            Not After : Nov 11 02:00:32 2025 GMT
        Subject: CN=d85b5acf-771c-441a-9094-918d8c07219d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a6:46:bf:da:ac:2f:1a:d1:64:d7:55:bd:19:
                    57:eb:3d:8a:b5:b0:95:4c:37:e7:ae:b0:32:e9:31:
                    70:2d:3a:ac:78:ad:ff:08:c6:1a:e0:f4:84:63:e3:
                    ed:9f:cf:3c:76:92:77:a7:f3:95:18:ab:95:07:82:
                    91:94:73:3c:90:3c:fa:9a:6b:7d:4d:f6:3d:49:5a:
                    81:a1:f0:ce:23:db:50:4d:fe:fe:26:5e:e9:d3:7b:
                    c6:63:78:a2:86:6c:4e:e0:25:84:46:e9:1d:32:c9:
                    15:69:0d:d0:bd:94:49:f9:5b:fa:6b:bc:38:16:da:
                    80:f7:10:f4:16:03:fc:c3:37:f9:da:d0:10:72:2c:
                    2f:89:5f:12:2b:8c:e4:b7:5f:c2:9f:11:9f:4e:6f:
                    2e:9c:c5:d9:70:17:5c:ef:96:3e:f6:8b:2e:59:6c:
                    a7:17:8c:c5:4a:0b:12:f7:2a:a4:92:7a:11:ec:b5:
                    45:cb:95:85:36:46:8f:bf:ce:1f:34:67:7f:8e:9d:
                    ed:74:23:53:c1:81:7c:1c:fb:46:8c:e4:21:f3:a2:
                    24:31:9c:ef:61:01:f7:e2:c1:41:64:ae:db:e0:20:
                    f7:f3:55:8d:d1:fa:8b:eb:5a:ab:67:4a:ee:7d:d3:
                    8f:c1:f3:36:34:27:4b:e2:ec:86:66:89:4f:5a:94:
                    88:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CD:C9:4B:C9:AF:20:EF:F1:8D:F5:AC:8F:BD:C0:E5:9E:36:FC:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5fbb05d4-bb20-39ce-b442-d9c372e9c233.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:18:e6:b0:72:23:46:48:38:3f:99:87:31:5d:40:e6:e7:68:
         43:05:40:80:89:9b:31:11:af:7c:74:9a:ec:30:4c:be:8f:b0:
         e2:d9:87:87:12:0d:af:9e:ab:70:61:6a:3f:0c:c0:d4:55:3b:
         a8:3c:19:7a:da:5a:c6:fd:f8:f3:e8:56:b9:7b:d5:10:c4:5d:
         6f:5d:38:d0:73:d8:ef:b3:72:ee:7b:ae:7e:03:73:43:1b:88:
         bc:d0:3a:89:d3:01:59:fd:12:c0:7e:a3:a7:b4:57:e2:a3:25:
         73:e2:7d:31:c3:6a:ee:e4:d8:de:06:e7:47:89:9b:2a:6d:5d:
         ef:c7:fe:3e:e2:0e:81:20:c5:c8:0f:fc:d1:71:ab:68:f8:f3:
         3e:28:5c:9f:c2:d2:09:43:57:fa:d7:ad:1c:ed:08:6e:0d:c1:
         c3:60:45:05:10:99:86:94:df:ac:c3:b6:c3:7e:dc:3c:43:f9:
         0b:77:5b:ec:24:a7:6c:4e:47:06:70:81:c8:e7:d4:06:9a:69:
         cd:d3:a5:71:15:92:45:0e:2f:ea:73:b4:15:14:b3:f7:28:ba:
         fa:a0:62:b7:4b:09:f3:d9:90:6b:2b:40:34:4f:ea:f4:7a:a1:
         a9:7b:11:ca:f1:bc:d1:df:35:7e:c7:3c:73:3a:7c:8a:a7:10:
         c0:6f:a7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:07:31 2025 by rpki-client