Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/61ff2e1d-8d8a-302c-9e79-1aff471b4bb9.roa
File:                     61ff2e1d-8d8a-302c-9e79-1aff471b4bb9.roa (raw, json)
Hash identifier:          01/wyR+5NaciBcgB6ij5WOj2ZNQ+dIb+2se6eVgtc2k=
Subject key identifier:   BE:F8:8A:DA:89:F8:CF:50:13:18:AA:7C:84:2D:C5:05:B2:25:63:34
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D26449F95B13A07B4B5C18C40
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/61ff2e1d-8d8a-302c-9e79-1aff471b4bb9.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     212238
IP address blocks:        142.111.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:9f:95:b1:3a:07:b4:b5:c1:8c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=ea126b83-8d54-44f4-bbe6-eee65cda61a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:de:18:4a:40:05:72:f2:4b:4a:98:2e:aa:f6:
                    c4:04:ab:35:9c:ad:ed:52:a8:73:05:54:17:5a:01:
                    82:5d:ca:78:43:4f:f3:b6:68:71:f9:8a:a4:57:7d:
                    9b:38:4d:e7:1b:c0:ec:5b:a4:bf:cc:f4:b5:9b:2e:
                    cf:93:da:08:0f:b6:ff:5b:31:a5:70:1c:f6:b7:d9:
                    52:8f:30:5b:c9:ec:52:e3:f3:30:47:95:c1:ca:23:
                    99:ab:aa:40:56:1e:62:e9:ab:70:4c:28:d4:b8:30:
                    7b:32:b2:fd:77:75:a9:86:e9:ba:26:5a:ba:a8:8c:
                    57:23:a5:12:42:04:fc:5a:b3:ed:6a:36:20:8e:d6:
                    ec:fb:56:31:a2:52:4b:0f:0f:9a:85:02:84:18:54:
                    a5:66:95:12:ba:02:bb:21:68:d5:34:43:8d:7d:ad:
                    be:2b:2d:9c:dc:ce:57:e4:45:37:39:9b:68:27:e1:
                    42:93:37:2b:ed:e3:56:ad:1a:a8:6b:94:9e:ff:45:
                    06:58:3f:c5:b0:05:96:55:99:a8:1b:30:79:3e:64:
                    7c:bb:23:c1:87:d6:e7:be:2d:ef:0c:ea:6a:79:5e:
                    32:1a:b2:ab:dd:df:e7:87:38:df:54:82:80:be:84:
                    4f:d4:f0:5d:90:2c:52:52:4c:11:0d:f0:8f:3c:1a:
                    05:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F8:8A:DA:89:F8:CF:50:13:18:AA:7C:84:2D:C5:05:B2:25:63:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/61ff2e1d-8d8a-302c-9e79-1aff471b4bb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:48:d8:4e:66:87:4f:39:fd:8b:a7:9f:b4:9f:cd:68:21:6a:
         8c:05:bc:56:f8:7c:1f:29:26:fa:69:e4:5c:9e:3a:14:26:93:
         f5:55:28:94:06:bf:62:ea:6f:ca:18:c2:98:e5:9d:4d:47:3e:
         9e:da:12:eb:1e:8b:7c:ae:14:23:d4:2a:27:ae:39:34:58:bf:
         96:04:0c:20:af:2e:88:9f:42:9f:f8:0b:8d:63:c9:1a:a1:ca:
         cc:d8:f1:4c:a9:b2:51:27:b3:6f:13:a4:b8:fb:dc:0f:83:6a:
         20:6d:a5:d9:6b:0e:ab:47:8f:a2:a1:94:09:2a:96:e9:7a:6c:
         88:6f:89:53:a7:7b:25:2f:50:47:cc:15:71:61:52:e4:ab:a9:
         98:39:65:a3:7d:84:16:02:9d:3b:03:a6:e5:be:db:5e:ba:12:
         8b:2d:77:86:ba:0d:37:64:9d:77:6e:f7:7f:12:7e:c2:dd:87:
         21:2c:11:7d:8b:3b:48:c7:59:38:ba:52:8a:36:b7:eb:b1:6c:
         1a:b0:98:a7:8f:36:83:7a:f2:76:fe:4c:14:d3:fc:96:df:1c:
         b3:a6:91:16:20:a7:72:e9:f1:52:88:46:28:d7:d8:4d:40:83:
         18:66:53:a6:c7:5a:4d:f2:14:39:4b:0f:aa:6b:0f:9e:9f:75:
         ec:39:e8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:31:22 2026 by rpki-client