Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a48b897d-a1f4-3301-96f4-dc57306a8a2b.roa
File:                     a48b897d-a1f4-3301-96f4-dc57306a8a2b.roa (raw, json)
Hash identifier:          IQ7Vh5u0reHvr93MctX5r1V0ByrQnWNqkzphEYD+W2s=
Subject key identifier:   E2:19:86:64:76:D3:0D:E6:66:D1:FF:6D:48:48:5A:7B:2B:5A:5D:D5
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D1707DF14BF559ED3B6FD7C80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a48b897d-a1f4-3301-96f4-dc57306a8a2b.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     3257
IP address blocks:        142.111.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:df:14:bf:55:9e:d3:b6:fd:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=76314eb4-7c71-44e1-b27d-2d4c3cf19cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:46:1a:d9:40:64:08:e5:4a:40:29:04:fb:18:
                    40:19:ec:68:ee:a0:d6:6b:f4:31:5c:c7:c6:31:87:
                    f7:da:2f:6b:dc:c0:4f:b1:57:9a:2b:e4:c8:9a:79:
                    db:b6:50:45:0a:61:31:87:f5:99:5f:cb:a9:bf:55:
                    d2:50:22:30:40:dc:71:b1:85:19:91:bd:09:8c:80:
                    6c:d2:95:5e:f3:75:f8:13:f2:e0:3b:e0:21:ff:71:
                    f0:bb:32:0a:87:cf:37:b8:ad:0b:f5:bc:0d:18:34:
                    3c:71:0f:36:6c:ac:79:27:c6:3d:90:fb:26:bb:ad:
                    2d:dd:c0:88:6c:f5:12:46:a4:c8:30:6f:c5:bb:66:
                    6d:c6:78:30:11:93:2f:45:62:0b:b1:eb:f3:55:c9:
                    f8:0c:fe:eb:c6:79:7b:23:89:11:68:7a:da:47:13:
                    71:38:06:4b:29:39:0d:43:de:0d:8f:26:24:14:80:
                    38:ee:fc:6e:f5:1a:98:15:ee:21:55:cf:89:83:42:
                    43:13:8c:d1:07:59:b5:4c:80:48:28:4c:42:f0:11:
                    89:6e:11:d3:ad:fc:c8:71:33:44:23:cb:64:b6:bf:
                    fd:ec:5d:d2:0d:62:b1:96:f8:3c:07:b0:c9:b6:87:
                    c6:21:2b:bb:6e:6d:92:cb:0d:aa:34:9a:89:4a:93:
                    a5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:19:86:64:76:D3:0D:E6:66:D1:FF:6D:48:48:5A:7B:2B:5A:5D:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a48b897d-a1f4-3301-96f4-dc57306a8a2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:c3:01:46:85:2c:7e:f0:cf:3b:74:d1:2a:8b:15:f4:e5:43:
         e5:48:e9:21:d1:09:75:03:36:0b:f6:cf:98:65:77:4e:a8:be:
         7f:45:cf:10:f5:50:41:65:d7:a3:c8:ae:ee:89:06:86:7c:d8:
         9c:3d:a1:b0:ab:dc:6f:df:ec:a2:27:5c:e0:cd:00:1e:4a:a3:
         97:23:05:29:c4:f5:59:ed:38:8c:14:08:50:14:49:55:be:b2:
         af:33:06:f0:b6:ea:eb:a1:17:48:d0:57:1b:2b:a4:2c:35:4c:
         8d:59:e1:b8:81:ce:26:01:bb:fc:f5:c4:87:42:09:d9:31:7c:
         3a:85:d4:38:ce:16:b9:9b:20:94:8b:cb:fd:d8:c6:1a:c4:28:
         ce:18:a6:7d:f9:53:f1:35:84:ea:b1:03:45:1c:d4:74:ec:61:
         aa:d2:6c:a1:32:d9:e2:ab:f7:b1:fd:94:e6:60:cc:5f:83:ef:
         12:62:d6:f9:33:1d:46:a2:f2:b1:45:83:01:d0:95:22:f9:57:
         45:c7:a2:e2:97:f5:dd:42:d1:6d:c2:29:2b:ea:6b:be:14:ad:
         8b:a5:9d:00:55:9f:46:aa:3d:05:9b:3d:b5:18:e3:c5:0a:3a:
         28:9b:7c:ae:1a:46:72:2b:5d:63:4b:25:77:5e:31:a6:f4:c6:
         22:40:9e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:52:37 2026 by rpki-client