Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d35cf3dd-bddb-3406-915a-8eed315d58d4.roa
File:                     d35cf3dd-bddb-3406-915a-8eed315d58d4.roa (raw, json)
Hash identifier:          jaFNBZLNR23Jmy10+rA9OI7sz3YnJLyJsWfyv/6as3c=
Subject key identifier:   60:2F:2C:3A:AF:50:FB:61:09:19:B9:2E:54:F7:61:73:A0:F2:C5:C6
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E90BA4FF694A610DDED8C2080
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d35cf3dd-bddb-3406-915a-8eed315d58d4.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     8881
IP address blocks:        142.111.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:4f:f6:94:a6:10:dd:ed:8c:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=a85f242d-8986-471a-9751-b13d5419d26f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b6:ba:fc:a2:68:c5:fe:a3:4c:da:12:b9:52:
                    25:fd:92:37:a4:1d:44:95:f6:e5:16:4e:b8:c1:78:
                    b1:1f:a0:01:08:ca:93:27:7f:0b:f0:0d:69:46:81:
                    d9:52:f6:86:8c:c0:6b:dc:bb:fb:3a:d7:36:a7:de:
                    77:b2:cf:81:96:98:22:38:7e:7f:8a:f2:18:d3:f3:
                    01:c8:b4:63:6f:f9:00:54:96:50:d2:52:d6:9c:7c:
                    cf:56:06:52:9e:62:f8:e0:cc:96:7b:30:08:c1:f1:
                    ee:ec:d1:e2:66:f7:bd:bc:7f:0d:29:8a:05:77:60:
                    f8:bd:5a:0b:44:1b:2a:37:92:7e:12:00:a3:32:df:
                    6e:74:c7:02:c4:b5:8f:a2:7e:2c:8d:12:72:68:bc:
                    3a:e8:76:55:e7:58:18:65:d3:d0:5a:9a:08:76:e4:
                    e9:6e:51:56:60:70:fd:7f:1f:95:8f:80:a6:35:99:
                    38:2c:d6:b8:be:e3:bf:a5:2c:03:6c:ff:5d:b9:0e:
                    a0:88:2a:47:3a:e3:31:d3:5b:45:ff:7a:2e:93:2e:
                    98:a9:dc:0e:59:53:e7:8d:3a:35:d8:14:2b:78:46:
                    ef:17:3a:47:57:d8:e7:b9:d4:93:1d:9f:1c:23:64:
                    05:a9:b9:09:eb:56:c3:74:4b:7c:23:9e:31:c1:f1:
                    32:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2F:2C:3A:AF:50:FB:61:09:19:B9:2E:54:F7:61:73:A0:F2:C5:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d35cf3dd-bddb-3406-915a-8eed315d58d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:15:b9:8e:94:9a:d7:22:35:bb:bb:4b:32:3d:77:2b:d9:24:
         5f:85:74:82:a1:f1:62:79:20:a5:ba:e5:dc:03:79:36:5f:cc:
         91:0e:fe:36:b4:8c:f7:b1:7d:07:e0:5c:d5:92:8a:34:5a:9c:
         84:2f:c0:32:33:cf:58:88:f9:15:5f:db:87:17:e6:85:5b:2c:
         ec:b9:aa:2c:68:60:8c:e2:ba:69:45:0c:41:51:c2:e7:60:a4:
         01:98:23:0a:ce:ce:9f:25:63:81:ca:f1:bf:42:81:e4:91:69:
         3f:6a:f1:ee:45:cb:9a:40:ab:a6:3c:2b:a3:ff:c9:ee:39:7f:
         22:2c:3e:68:44:99:70:09:7b:e2:30:13:8c:5b:cb:e8:20:79:
         35:df:f0:c5:83:3a:06:cc:02:9e:7f:f9:b1:ba:f2:20:41:83:
         14:ff:1d:92:74:1e:bb:97:44:04:3c:2b:36:85:d5:bd:f5:59:
         1d:16:82:ed:2a:28:7b:bb:9d:8d:d9:b0:08:10:12:f1:4e:6c:
         0e:3c:33:2c:81:36:89:ba:4d:db:97:96:84:42:b3:6f:f0:93:
         eb:1b:d0:1f:52:de:83:67:76:52:42:06:be:11:91:65:52:bc:
         39:57:cf:9a:d4:25:fc:61:3d:de:94:03:44:ec:c4:d0:14:53:
         5e:02:3e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:01:18 2026 by rpki-client