Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/95e7cb0e-590d-309d-9bc5-3cde69b6e037.roa
File:                     95e7cb0e-590d-309d-9bc5-3cde69b6e037.roa (raw, json)
Hash identifier:          2wIrNCXPlE3hydcGMvs01oF0iq6jiqZJTaFAEEzCPX8=
Subject key identifier:   A0:86:5C:2C:5A:7C:EE:29:D2:6B:FE:1A:65:DD:6E:8D:E3:1B:04:06
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D0EA7D3887D08036F39DE9CA0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/95e7cb0e-590d-309d-9bc5-3cde69b6e037.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     18779
IP address blocks:        142.111.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:d3:88:7d:08:03:6f:39:de:9c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=2917ad8d-c63b-46cc-919a-ed3ef8e6729b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:25:56:16:44:03:df:f6:d8:98:62:ca:94:35:
                    45:f5:00:03:2d:65:f8:5f:09:fe:f1:66:b1:67:6e:
                    bb:1c:c6:9d:96:ab:7a:83:83:f0:21:f8:5f:3b:98:
                    5a:10:2c:3e:60:22:a1:70:aa:a9:bc:12:c2:d1:f0:
                    cf:49:db:94:2b:35:dd:de:b7:26:69:0a:6e:20:0f:
                    09:e7:d4:46:8b:71:f8:b6:1a:d1:68:69:fb:54:b1:
                    6f:bf:bf:34:1e:f6:7b:23:66:d5:bf:d6:9c:a9:1a:
                    87:de:bd:7f:ad:9c:60:22:fb:4c:de:25:1d:ef:25:
                    87:7d:d5:ee:da:ec:0f:b8:02:61:3a:31:78:a0:44:
                    43:43:3e:24:32:0e:56:8f:03:61:d0:96:68:18:33:
                    fb:68:57:f7:35:43:72:1a:7c:39:8d:83:12:cc:13:
                    1a:30:02:9c:f7:00:8d:1b:34:13:c9:44:be:5b:ba:
                    06:ed:70:a5:b3:8c:84:ea:d1:ce:94:1c:b4:47:01:
                    de:99:d3:0a:f2:61:1d:5f:8f:cf:ac:62:b7:ef:94:
                    df:83:26:a8:22:b6:50:f3:6e:a8:c0:78:4f:73:2a:
                    e0:69:13:03:5e:0e:40:6c:51:db:57:98:df:95:c1:
                    70:63:91:5f:08:1f:f0:cf:c9:b3:36:f4:6d:4e:11:
                    6a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:86:5C:2C:5A:7C:EE:29:D2:6B:FE:1A:65:DD:6E:8D:E3:1B:04:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/95e7cb0e-590d-309d-9bc5-3cde69b6e037.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:87:82:7e:54:b8:62:d4:93:71:01:da:1e:4c:7b:9b:8e:8a:
         7b:de:ee:3f:4e:4d:14:bc:2e:be:41:6a:9c:d8:e4:b9:2b:70:
         db:6d:ea:a4:9e:7a:b2:29:12:5b:ff:65:1d:cf:88:c2:46:63:
         85:a7:21:b2:44:bc:15:00:2e:f6:f1:9a:25:72:c6:2f:8b:c6:
         ea:2e:d5:f2:46:54:0e:10:be:60:98:2f:ed:b1:5c:58:7a:0d:
         a2:57:38:13:08:62:5b:a8:05:9d:99:d8:bb:c7:5b:44:2c:e6:
         18:cc:6b:f9:8f:f5:1d:7e:0a:41:15:75:6a:e4:64:79:f9:d8:
         e5:28:07:bc:99:33:1c:4e:76:3c:39:50:52:31:31:71:4d:14:
         1d:4a:a1:60:de:37:ab:5d:9f:c2:fa:30:93:b7:6d:40:b8:1e:
         2d:60:24:05:34:97:c5:27:af:bd:d0:0e:4a:6b:65:c2:47:a5:
         98:0d:20:53:19:b6:4b:c4:f0:da:b3:5a:c1:42:f4:40:6f:15:
         ba:60:53:04:f8:0f:f6:51:28:31:16:84:fd:59:18:a2:a2:90:
         3e:c1:93:6f:0f:8e:93:29:cf:9e:fa:7c:1a:f9:31:90:92:18:
         c1:f9:e0:04:ed:17:0b:d2:3d:5f:b5:ff:36:c0:c1:5c:e1:b2:
         f1:94:1b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:54 2026 by rpki-client