Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ed31986e-845e-3cf8-b5ba-f351716d8235.roa
File:                     ed31986e-845e-3cf8-b5ba-f351716d8235.roa (raw, json)
Hash identifier:          BCTOyFeTM7rAxaZ+0xQ8+metvh276lYtw1ZbrOIYTn4=
Subject key identifier:   05:C1:D4:BB:D5:A0:AB:43:20:B1:58:3A:7D:BA:B5:4B:51:06:70:5D
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D4461D21727AEABC0D28D51A0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ed31986e-845e-3cf8-b5ba-f351716d8235.roa
Signing time:             Mon 23 Mar 2026 19:53:38 +0000
ROA not before:           Mon 23 Mar 2026 19:53:38 +0000
ROA not after:            Sun 21 Jun 2026 19:53:38 +0000
asID:                     11798
IP address blocks:        142.111.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:61:d2:17:27:ae:ab:c0:d2:8d:51:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar 23 19:53:38 2026 GMT
            Not After : Jun 21 19:53:38 2026 GMT
        Subject: CN=a67bf2a7-40da-4c0c-b23d-4978d03ed1f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ce:34:4b:1a:ff:31:81:d8:41:a7:78:12:27:
                    0f:f9:3e:40:35:70:92:aa:38:8e:5d:03:7a:66:25:
                    ff:38:ab:8f:f7:53:d8:d5:4a:36:fb:f7:88:87:f7:
                    52:b3:cd:5f:8a:9c:14:56:7d:3c:6f:98:f4:9c:10:
                    42:2c:77:b0:f3:6b:9c:cf:09:64:95:9f:9e:6f:34:
                    ee:82:24:74:5b:e3:d2:48:eb:cc:31:7d:4a:2d:7c:
                    3c:c0:43:ee:ab:12:31:6d:a4:93:3e:27:fb:77:72:
                    c6:8f:f3:8f:84:a7:5e:e4:c6:6d:78:69:47:15:48:
                    c0:b2:a8:8a:5a:96:b9:4c:09:a8:31:73:97:45:4b:
                    32:5a:4e:23:6d:3d:2e:9c:e8:68:9c:4a:dd:fb:77:
                    f6:88:8e:4a:4b:40:ea:c8:c0:a6:8d:09:0b:67:bc:
                    2a:52:4b:de:76:15:26:e4:2f:40:80:32:9e:78:a1:
                    66:c5:80:56:c4:ee:c2:4c:b5:d7:d0:f8:9f:3d:1a:
                    b3:3a:d8:37:6d:7a:1e:2c:c0:1b:7c:bc:12:74:9d:
                    da:db:e8:b4:15:19:9a:95:f7:f9:60:55:94:d1:dd:
                    68:97:ea:f9:4d:7e:7c:c3:34:18:6b:9a:f6:ce:8f:
                    64:60:a6:c3:f8:a1:78:73:5b:99:4b:d0:b3:60:26:
                    76:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C1:D4:BB:D5:A0:AB:43:20:B1:58:3A:7D:BA:B5:4B:51:06:70:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ed31986e-845e-3cf8-b5ba-f351716d8235.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:4e:4a:4a:c3:23:7b:4b:6a:e9:98:65:3f:42:a7:e5:d3:22:
         a2:06:8a:86:2b:dd:db:e1:c0:66:69:47:ca:7c:84:db:88:3a:
         c3:18:11:e9:3f:c2:d6:b8:09:fe:e0:1a:ac:aa:2d:2d:fb:d4:
         3c:69:15:84:e9:33:2e:3f:20:fc:1f:07:b3:6c:70:21:b8:38:
         3f:69:80:3d:4c:f6:48:b7:cb:44:6b:7b:23:6d:b5:43:fe:43:
         a2:22:26:a0:54:71:d5:2e:3c:b5:06:a3:83:3b:a6:46:69:8c:
         b2:b6:e2:91:1d:4c:89:58:1b:c7:f3:f1:81:18:fb:79:f8:80:
         86:32:8f:d2:c7:71:b7:ea:9d:de:07:77:ee:7c:4f:11:5d:ad:
         a8:87:b5:59:35:41:53:7c:b7:e3:06:76:cf:23:df:c9:21:49:
         f5:d5:0b:65:50:21:24:3f:66:7e:44:43:e1:c6:51:08:0a:86:
         73:28:92:0a:21:a4:59:88:c1:cb:54:88:a5:29:61:b2:91:98:
         26:7c:c0:af:90:b8:26:fd:86:b0:8d:34:e1:3b:d5:ca:9a:d5:
         a1:6d:16:cd:79:52:34:f6:5d:6e:2b:a3:c1:6e:19:28:a2:fa:
         5a:33:40:a8:6e:3c:62:75:9e:4c:3d:25:9e:1c:07:ee:53:29:
         22:84:75:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:49:00 2026 by rpki-client