Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d2ef21c9-b906-3823-8058-9111c3454995.roa
File:                     d2ef21c9-b906-3823-8058-9111c3454995.roa (raw, json)
Hash identifier:          YqwVsY7kYb4J7J+XcXGxUAB4IcwYK3x+F/pUOofkSoE=
Subject key identifier:   51:FC:7C:7E:EC:39:6D:A5:FF:6C:71:8E:56:ED:20:0E:96:C5:2D:6C
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E842A323BD1D2B634BC7C7600
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d2ef21c9-b906-3823-8058-9111c3454995.roa
Signing time:             Thu 16 Jul 2026 09:00:12 +0000
ROA not before:           Thu 16 Jul 2026 09:00:12 +0000
ROA not after:            Wed 14 Oct 2026 09:00:12 +0000
asID:                     137897
IP address blocks:        142.111.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:84:2a:32:3b:d1:d2:b6:34:bc:7c:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 16 09:00:12 2026 GMT
            Not After : Oct 14 09:00:12 2026 GMT
        Subject: CN=03907473-cfbf-4a55-9528-ffef94c57285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:15:70:d1:0d:36:4d:e5:ac:56:e3:0e:2b:f2:
                    8d:c5:9b:1a:95:ae:ac:64:a1:2a:45:85:5c:40:6e:
                    1f:e5:ac:d8:48:87:33:96:58:77:8f:ae:70:69:be:
                    8a:ed:f1:80:92:c6:de:86:ae:0e:f1:98:5e:e3:46:
                    82:2b:93:70:b2:d9:06:7b:f6:1c:34:05:83:d7:ec:
                    9e:01:82:46:34:3f:74:c5:72:6e:3e:f5:bd:c5:76:
                    f9:bb:63:d3:8e:54:c6:67:ad:57:de:f8:4e:0d:fb:
                    cb:38:37:1c:2a:f0:83:38:b2:4d:ae:cf:77:cc:1c:
                    ae:9d:3e:af:63:16:35:f3:22:c5:f6:c0:d9:7d:df:
                    b7:76:b6:0d:ae:a1:03:5a:d9:76:c7:44:1a:f4:10:
                    46:ec:f6:c0:e0:75:a7:b1:95:bd:a7:44:5c:78:49:
                    24:7c:c4:fb:18:ca:49:be:d3:2e:25:cd:8a:f4:7a:
                    3e:bd:bc:fb:49:8a:36:f6:60:14:17:da:0e:a9:0b:
                    48:a4:c3:e9:2e:09:97:8c:38:bf:0d:af:73:9e:a9:
                    d2:0e:9f:52:ee:14:6a:5f:00:19:08:87:20:cd:31:
                    32:79:06:fe:1f:bb:d3:81:84:24:d7:00:6d:63:0f:
                    a5:bd:dd:4a:70:eb:38:22:eb:4f:17:2a:1f:49:40:
                    34:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FC:7C:7E:EC:39:6D:A5:FF:6C:71:8E:56:ED:20:0E:96:C5:2D:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d2ef21c9-b906-3823-8058-9111c3454995.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:51:16:0e:c1:6e:a6:86:52:ba:41:de:c2:b6:bb:08:ac:2e:
         5c:4f:e1:b8:ea:05:b7:91:f4:9f:57:62:42:d3:28:36:78:1c:
         92:ad:26:6c:62:2a:b2:8c:cb:46:ef:02:66:ff:f4:27:e6:83:
         2d:59:3a:17:2c:a8:05:79:af:6f:bc:28:bc:ce:b5:0c:e8:b4:
         29:80:a8:84:06:00:8a:76:13:40:3a:8f:db:89:1f:b7:cc:27:
         27:f0:c9:74:4a:9f:e6:15:5d:39:d0:fa:68:a3:26:df:90:85:
         3f:47:aa:8f:f3:f3:cb:2d:40:96:f6:1e:2f:c9:05:07:29:8c:
         d4:21:61:2f:a7:64:a4:6d:56:a1:c7:cd:ae:f5:23:21:60:76:
         0b:72:24:ed:2e:75:1e:ec:db:cb:c1:05:1d:d2:2c:32:10:9b:
         72:ff:84:d1:83:30:97:ba:ea:57:e3:15:24:8e:5c:c2:16:1f:
         cb:ae:67:13:b5:4f:4f:f4:7c:ae:60:57:0d:52:7a:54:8e:a5:
         43:68:26:a4:53:d1:d6:8c:d5:90:de:de:dd:91:df:fb:53:cd:
         79:71:1a:1b:0b:33:61:23:e2:09:e7:6b:ea:af:9d:32:32:0a:
         5c:7e:cb:ee:c5:8f:a3:6b:b3:1a:2f:8d:8c:18:d2:ef:ca:84:
         c4:13:4f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:11:25 2026 by rpki-client