Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d35cf3dd-bddb-3406-915a-8eed315d58d4.roa
File:                     d35cf3dd-bddb-3406-915a-8eed315d58d4.roa (raw, json)
Hash identifier:          1AYK/zUz2RCG4zx/ctIifGREzdcHPQBDciwGnWYOH2U=
Subject key identifier:   9D:65:62:9D:AD:41:80:9B:17:3E:5C:99:67:CA:B6:1E:7F:7D:FD:CD
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F331D2720599F50870DD24280
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d35cf3dd-bddb-3406-915a-8eed315d58d4.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     8881
IP address blocks:        142.111.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:27:20:59:9f:50:87:0d:d2:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=90acef53-794a-4e26-b98b-5e2762f7de29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:22:55:25:1f:77:30:7b:a1:a4:aa:a1:61:49:
                    d9:c4:08:6c:46:70:6d:b0:16:4f:e2:71:fd:1e:3d:
                    23:6a:54:e9:3f:e8:60:21:6e:7d:c0:f9:ce:c8:72:
                    bd:83:53:3a:f3:e5:9c:a5:ff:2e:f4:2c:f7:2f:7c:
                    64:86:15:c2:4a:30:18:dd:9a:df:c9:bd:67:3f:71:
                    6d:5b:6d:ad:0c:c7:22:13:63:80:ac:24:27:f3:bc:
                    24:93:39:5f:bd:4a:a8:89:0f:5f:35:06:85:40:f6:
                    43:4c:c9:d7:a2:8f:f7:6c:e1:2a:59:e2:b2:b1:d6:
                    91:2c:ca:92:81:7c:7f:b1:39:60:9b:0d:c0:f6:bb:
                    f2:6c:e0:da:db:a7:2e:56:9b:e5:1b:1b:2d:02:bc:
                    4d:23:92:5c:34:64:17:63:a6:1a:67:ed:9d:c3:1d:
                    f9:03:09:94:be:30:50:be:0c:30:c9:eb:54:f4:96:
                    40:7a:2d:2e:97:a9:0c:83:c5:15:9a:43:8b:51:6c:
                    fb:86:b4:38:c2:5e:6b:5d:82:7a:2b:9c:a8:e9:9a:
                    38:50:9d:a9:12:df:7f:f1:fc:95:f1:df:37:01:ef:
                    90:46:7c:1f:1f:82:6c:b6:f5:87:8b:10:05:7a:ee:
                    89:67:67:1c:d0:b8:ca:3e:64:bf:bc:2b:04:82:8c:
                    4f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:65:62:9D:AD:41:80:9B:17:3E:5C:99:67:CA:B6:1E:7F:7D:FD:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d35cf3dd-bddb-3406-915a-8eed315d58d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:c4:a7:54:35:b1:ca:3a:7e:4a:d1:e5:a6:a6:b8:4f:a9:7d:
         5a:8c:8e:0f:6f:4a:0e:84:a6:90:c0:ce:f1:a3:57:c7:ef:b8:
         14:ff:e4:0e:1b:bd:5e:f1:91:90:a3:d4:10:43:c7:d2:68:15:
         73:1a:78:72:d4:91:95:cf:41:b2:88:62:2a:ae:06:9d:ce:95:
         98:91:86:4e:e9:a6:c5:fb:6a:34:21:43:83:b7:2b:cf:93:37:
         5b:39:1a:25:66:bd:20:a2:f0:35:ce:b1:f4:ef:0c:2b:4a:f7:
         ca:0a:3f:e0:36:c2:c7:92:5b:66:eb:b8:8a:ca:14:d5:ed:c6:
         1c:4e:14:98:f0:51:2f:fb:f6:cf:59:31:1c:80:64:ce:ac:09:
         bb:f1:e5:fe:17:3b:4f:84:6e:6d:21:b3:b2:3b:98:d2:7e:65:
         1f:73:06:99:e9:ec:b9:b6:a7:f1:5e:8c:26:e2:e8:80:85:2a:
         1a:24:01:7d:7e:13:f2:10:4f:5b:ef:2a:4b:b9:87:06:eb:ad:
         5d:1b:02:a2:01:0d:a8:56:aa:99:f4:86:93:1f:a7:05:53:8d:
         3b:c6:91:46:24:32:45:56:ce:a9:41:33:17:15:36:86:09:32:
         88:05:34:1b:6c:63:34:b5:b6:8c:a9:67:04:05:d1:2a:a7:28:
         d9:8a:8e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:04:23 2026 by rpki-client