Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7bb1de99-6c89-3bdb-9d26-089872334658.roa
File:                     7bb1de99-6c89-3bdb-9d26-089872334658.roa (raw, json)
Hash identifier:          cLfwpIFeGNBmIIV9ijMZgb2edzMHA1uFgFkNJLUqwKk=
Subject key identifier:   7F:19:A1:0F:A3:4E:E1:06:E8:7E:AE:5C:E8:E7:D7:36:BA:75:B6:1D
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D343A2E2E9EA3626A059CEF00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7bb1de99-6c89-3bdb-9d26-089872334658.roa
Signing time:             Wed 18 Mar 2026 01:00:33 +0000
ROA not before:           Wed 18 Mar 2026 01:00:33 +0000
ROA not after:            Tue 16 Jun 2026 01:00:33 +0000
asID:                     7018
IP address blocks:        142.111.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:34:3a:2e:2e:9e:a3:62:6a:05:9c:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar 18 01:00:33 2026 GMT
            Not After : Jun 16 01:00:33 2026 GMT
        Subject: CN=bc0dc441-0735-4a36-b609-45dc7c949ce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4a:89:cd:81:67:5c:43:8d:f9:86:55:c8:8b:
                    0b:97:44:67:c6:f3:d4:83:dd:c7:6f:36:9f:94:a3:
                    ef:77:75:79:d1:36:f6:f5:0a:8f:7f:47:41:c4:0e:
                    ba:b9:a4:f9:27:d2:c1:18:53:42:fa:22:cb:90:09:
                    30:f3:96:22:a8:0c:fd:b9:ba:b7:4e:69:28:36:2a:
                    5a:c6:b0:ae:7c:bc:6d:44:37:66:67:48:f6:5c:10:
                    9e:a2:9b:c6:4a:58:08:eb:d8:bd:a7:d3:7f:1c:9f:
                    1f:39:eb:30:ba:3c:ce:81:33:dc:c6:fa:e2:cb:dc:
                    18:7d:3c:2d:2b:62:71:e3:71:24:cd:b5:48:19:cf:
                    aa:49:9e:06:6a:90:03:9d:0c:32:5e:2b:ba:a3:ab:
                    84:7a:bb:86:02:b1:a1:ea:b1:46:96:cc:e7:f5:72:
                    7a:97:c5:e2:11:b9:e9:8b:71:7c:6a:be:84:ca:f5:
                    fa:08:81:86:03:14:3f:7f:90:52:1d:1a:c0:f5:44:
                    3e:eb:33:37:52:39:5c:24:b0:ca:58:65:61:95:24:
                    ac:57:ae:c7:8c:6e:55:78:64:7d:54:48:b2:27:07:
                    ec:f1:46:61:7d:c6:71:8c:4a:d9:a1:76:fa:3b:4e:
                    25:67:0f:c6:2c:cd:33:54:f1:af:7c:66:d6:e4:a0:
                    be:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:19:A1:0F:A3:4E:E1:06:E8:7E:AE:5C:E8:E7:D7:36:BA:75:B6:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7bb1de99-6c89-3bdb-9d26-089872334658.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:af:2f:4b:db:28:5d:bb:81:a2:ea:53:e6:65:8e:52:0a:66:
         4b:0a:fa:86:26:60:17:e5:86:f4:ed:4b:7f:95:c7:ec:14:d7:
         b5:f4:70:05:df:0a:0a:b0:44:9e:77:de:8d:a4:4f:94:e9:d2:
         4d:30:b5:20:c4:16:f0:2d:31:ab:ba:87:cd:ed:04:ae:82:9c:
         7e:cf:d8:82:46:36:55:d8:d0:cd:dd:92:1c:a5:98:c3:ae:0b:
         4f:f9:a3:69:8a:9f:05:c6:8d:2f:33:0d:a3:d2:b2:96:7a:8c:
         8b:92:9d:4e:82:4f:fd:12:ad:c9:1b:0c:89:fb:b5:85:d4:ab:
         1b:ad:eb:74:8a:ea:72:69:dd:81:b1:fd:aa:32:3b:4b:ae:0d:
         e3:ac:35:84:54:e8:d2:26:42:ab:0b:28:cd:c2:49:89:41:89:
         66:69:7b:35:49:03:43:9c:e1:9e:e6:f7:48:e5:4f:70:1e:30:
         08:a7:8a:41:35:eb:45:b9:f4:d8:4c:22:a0:72:0a:f7:e2:1c:
         53:e7:6e:56:d5:f7:d0:94:a0:39:0b:19:ea:75:69:40:e1:b7:
         ad:c4:15:39:94:18:ad:5f:a9:a6:4f:d2:e0:b9:a7:95:1d:c0:
         97:3a:ad:e3:52:ae:d2:44:7a:74:ed:8e:0a:ed:0e:72:70:ab:
         3f:49:9e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:15:18 2026 by rpki-client