Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/654bdc7b-04b1-3df9-ac88-4975f787e057.roa
File:                     654bdc7b-04b1-3df9-ac88-4975f787e057.roa (raw, json)
Hash identifier:          4MiwPDJVHJoq3mlEraTuhWXaGEE0xwT8ilScPkWCTpw=
Subject key identifier:   CF:47:36:D5:BD:12:2D:BC:E7:39:C9:57:B3:9A:87:BF:CE:0E:F2:6B
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E23D99B4BD67097DB27A9E740
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/654bdc7b-04b1-3df9-ac88-4975f787e057.roa
Signing time:             Thu 11 Jun 2026 21:00:11 +0000
ROA not before:           Thu 11 Jun 2026 21:00:11 +0000
ROA not after:            Wed 09 Sep 2026 21:00:11 +0000
asID:                     11798
IP address blocks:        142.111.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:23:d9:9b:4b:d6:70:97:db:27:a9:e7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 11 21:00:11 2026 GMT
            Not After : Sep  9 21:00:11 2026 GMT
        Subject: CN=ac84e68f-0807-43df-9dcf-b4341a0f5767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:80:a6:ab:54:52:c5:33:62:19:e7:f7:42:21:
                    ed:2d:bc:8a:e4:6f:dd:95:da:5c:b3:09:29:8d:2a:
                    e1:3c:b2:3b:59:fc:b7:c3:35:cf:f6:0e:5b:d8:0c:
                    d2:d8:16:82:b4:86:d0:36:d7:fa:5e:ca:49:c0:80:
                    aa:ad:f9:f0:a7:b0:42:27:fa:9f:de:08:ac:86:c0:
                    d5:a1:52:84:e4:71:e6:da:a3:82:19:26:da:15:aa:
                    8f:73:2e:a9:f7:18:96:5f:40:0a:f9:22:5e:9b:8a:
                    d8:c9:c0:a4:d7:46:e8:3f:79:e5:af:e3:c1:d5:dd:
                    d4:33:41:13:5a:2c:2d:7b:eb:92:b6:a9:c6:7f:d9:
                    a2:ac:8f:1f:b7:27:bf:a4:8b:40:02:05:de:cb:19:
                    8d:ed:5a:01:0c:f5:be:62:46:e4:a6:17:17:d2:fb:
                    7b:ad:69:c9:4b:04:b9:fa:dc:b7:15:39:61:cd:c3:
                    98:16:b5:fa:4b:87:e0:4b:94:57:e3:68:f4:1b:37:
                    7d:b4:e8:02:36:79:82:d0:5d:d3:e6:fd:35:21:d4:
                    df:d7:9e:62:e9:29:52:ba:62:f1:00:d5:0d:73:cd:
                    fe:77:b0:fa:9f:cd:c3:db:eb:6f:c2:3d:7e:57:bb:
                    57:e1:be:78:47:f5:3a:d0:89:8a:4b:dd:3a:b8:f1:
                    28:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:47:36:D5:BD:12:2D:BC:E7:39:C9:57:B3:9A:87:BF:CE:0E:F2:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/654bdc7b-04b1-3df9-ac88-4975f787e057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:25:7f:5d:ed:99:35:b0:e5:09:e2:89:c8:7b:fb:3c:75:1d:
         b1:39:c4:9a:ac:80:27:2e:f5:e7:d4:5c:dc:45:17:36:e7:d5:
         f0:f9:55:97:c2:67:41:7e:eb:36:07:b9:53:3c:cc:a4:b9:fc:
         1a:ea:35:9a:35:e7:98:bd:3e:92:8a:52:8f:34:ae:86:df:16:
         7c:2f:f5:8c:75:81:ab:30:22:58:a1:ba:dc:b6:70:6e:f5:46:
         f5:85:4d:f2:77:4e:7a:c9:01:e5:be:d6:80:5e:94:e1:e6:6b:
         97:45:7b:8e:55:77:c4:0b:ac:d2:f7:df:18:4d:24:a8:ea:90:
         b0:3b:b1:d9:69:b9:bc:96:5c:77:ad:5c:c6:33:ae:e4:40:61:
         9b:0c:4a:cd:49:67:cc:0e:f3:d2:eb:58:fc:75:d2:13:cc:ca:
         dc:4d:da:b8:7c:23:2e:ae:09:11:2c:4c:82:80:b2:e4:df:11:
         77:b2:25:7e:cd:d9:81:4f:d8:d3:52:6d:69:bb:69:98:0c:27:
         27:2a:e7:c1:65:8b:35:92:57:4e:f8:b9:99:f1:87:eb:1a:5b:
         fa:92:9c:8d:53:86:67:ea:ef:eb:0c:da:71:b1:65:fb:2e:c5:
         00:32:00:ec:69:9c:2c:89:cc:3b:b9:4a:17:b6:79:02:69:78:
         40:1d:c2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:45:39 2026 by rpki-client