Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e17bd4b4-31ed-320c-8b16-b5a06ab080ea.roa
File:                     e17bd4b4-31ed-320c-8b16-b5a06ab080ea.roa (raw, json)
Hash identifier:          od+5t4JX0+zC2d4hiogr4RJ2/aA3lNauelLoNqMYU7k=
Subject key identifier:   D1:71:4D:53:1E:EE:D9:3F:82:9B:BF:04:A7:07:1A:1B:53:6A:D7:71
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D237A6C8EF76AA0A4C4A1AE40
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e17bd4b4-31ed-320c-8b16-b5a06ab080ea.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     212238
IP address blocks:        142.111.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:6c:8e:f7:6a:a0:a4:c4:a1:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=59c9fa62-4a34-45e3-b3b1-d31c1b683a1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:20:3e:f6:77:93:d2:2a:48:4e:fe:32:28:c0:
                    95:de:a8:f0:e2:00:34:5a:1b:46:74:c7:58:0c:30:
                    0b:8f:aa:33:6d:d9:e2:d2:dc:fe:da:c2:17:ef:f5:
                    b4:16:bc:51:ce:ff:3a:fc:70:af:dc:a6:50:b3:38:
                    f1:50:12:e3:23:f1:dc:48:21:2f:ae:54:10:f0:a2:
                    ba:4b:2e:6c:a9:60:60:16:fb:33:c2:35:0a:8f:99:
                    51:02:b4:30:b6:63:7f:f6:50:91:eb:78:eb:bd:c6:
                    20:db:4e:20:ca:3a:fd:25:97:d4:b2:cd:2e:7f:36:
                    ec:88:60:9b:3f:c0:3a:65:10:2c:c8:87:6c:01:4b:
                    10:d9:f8:2b:0c:03:c8:56:96:0d:48:d3:8c:4b:af:
                    40:09:c9:cf:0c:58:74:50:68:5f:b4:d1:6d:44:1b:
                    ef:93:07:1c:70:8e:ea:37:14:ce:8d:e7:8e:7a:27:
                    07:a8:bf:41:fc:32:4e:89:fa:58:22:63:b3:47:3b:
                    b0:39:25:81:60:ae:8f:cc:d6:24:f9:62:c3:1d:df:
                    9b:a3:e8:f9:bb:80:0e:41:43:6c:ce:f8:fe:a8:60:
                    56:23:06:57:fd:ae:f8:b6:91:8f:ca:93:35:a1:53:
                    62:c0:ad:eb:ce:75:03:a2:18:8b:39:f6:6d:8f:c9:
                    0d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:71:4D:53:1E:EE:D9:3F:82:9B:BF:04:A7:07:1A:1B:53:6A:D7:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e17bd4b4-31ed-320c-8b16-b5a06ab080ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:b7:f8:be:c6:99:8a:56:fe:95:4d:f2:cb:46:6e:79:48:b0:
         18:f7:e9:95:e5:f1:d7:bc:5b:ba:7b:75:18:63:38:68:90:c4:
         d4:01:cd:88:23:b8:77:dc:9f:00:e1:88:3a:66:7a:a2:90:68:
         79:c3:83:1f:27:ee:37:6d:e1:33:69:95:d2:9a:b9:46:40:61:
         13:17:64:2c:ef:f8:92:ee:67:80:e9:af:5a:85:fc:b8:af:32:
         2a:7e:7c:b8:bc:1d:01:21:41:a0:8d:49:ba:5a:50:73:a9:f8:
         91:e3:fc:6d:4b:4b:bc:c2:e9:2c:26:64:6b:e0:65:35:b0:6f:
         82:c9:c0:8a:7b:41:d4:88:45:46:55:5a:04:22:41:34:64:1a:
         35:93:2d:cb:a1:3e:c9:ee:79:6b:81:1d:fe:02:3a:b3:df:7e:
         26:e0:c8:f4:e7:8d:57:15:1c:07:74:fe:14:52:32:2e:f5:6e:
         fc:7c:51:5d:26:64:84:ab:10:61:1d:6a:55:bb:85:39:7f:57:
         08:df:3c:01:fe:06:a2:9c:11:80:ae:86:26:91:e0:76:f4:b9:
         5c:4e:ff:b7:0a:b5:54:0d:f9:ad:d0:04:2c:07:1c:50:8c:8e:
         bd:12:12:29:46:7f:97:c7:57:b1:10:46:47:66:d5:fe:84:de:
         9f:1c:c2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:34 2026 by rpki-client