Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9d3179f8-8255-390a-9827-795ce2638b85.roa
File:                     9d3179f8-8255-390a-9827-795ce2638b85.roa (raw, json)
Hash identifier:          Bi3lazwLrBFq1xhFWN/B46tNgl+oChhZuaE0Rt7T9YA=
Subject key identifier:   C9:FF:BB:4C:74:1D:11:4D:62:76:5B:BB:F7:D9:16:D2:8F:D9:0C:2E
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F497E2EE6E8C86E47E31A9980
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9d3179f8-8255-390a-9827-795ce2638b85.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     18779
IP address blocks:        142.111.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7e:2e:e6:e8:c8:6e:47:e3:1a:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2fef93eb-932a-4642-95a5-ff5901f80ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:43:0a:2b:32:29:0d:ea:e2:19:23:66:b4:c7:
                    fb:cd:e6:3d:0c:d1:1e:92:d7:c6:8d:85:bf:b6:25:
                    a9:c4:89:f7:54:16:fd:ce:f5:46:a0:85:e9:1e:84:
                    f7:78:93:fd:1e:ab:a6:22:83:16:da:fa:11:45:23:
                    ee:ad:89:38:65:36:7c:b3:50:89:ad:2c:9e:48:0b:
                    66:51:62:81:0c:9d:8e:60:82:f6:ca:dc:7a:08:61:
                    25:5f:31:b7:d9:28:f4:e0:a2:bb:83:ff:64:65:f8:
                    b5:c2:25:9e:53:c2:c1:4e:af:22:05:da:30:6d:7d:
                    3a:d2:94:c8:a1:88:4d:b7:01:82:61:27:d7:d4:5d:
                    c5:de:58:d0:d4:ec:79:7d:c0:3d:0e:93:be:77:e8:
                    35:58:ac:3f:72:71:31:be:77:18:03:a4:8f:77:00:
                    c0:60:9c:96:e4:cc:c4:f6:99:74:1a:f2:58:ab:09:
                    0a:4c:40:ea:46:6a:b7:4a:3f:09:27:8a:5e:3a:ed:
                    69:60:b0:ae:84:67:a2:9d:6f:1d:32:33:b1:4f:f1:
                    37:61:ad:64:a6:93:0c:71:77:41:dd:8a:90:fc:94:
                    d9:c8:82:fd:b7:6b:a3:e4:21:6d:a0:55:1d:f9:6c:
                    d5:ce:c5:0f:2c:1f:f3:b9:a4:96:66:cf:8f:c5:e0:
                    82:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FF:BB:4C:74:1D:11:4D:62:76:5B:BB:F7:D9:16:D2:8F:D9:0C:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9d3179f8-8255-390a-9827-795ce2638b85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:fa:a2:2f:41:ab:33:76:4f:bd:2e:0d:a1:f4:8b:d3:56:dd:
         b3:fa:52:5a:73:4c:de:2d:9d:69:27:94:4d:a2:0a:b5:a0:64:
         67:f0:8d:9c:fe:39:94:a1:76:4f:d3:87:0e:2f:fc:37:6f:86:
         3c:57:a9:8f:6a:18:b1:4c:a0:63:43:a5:06:2c:3b:7d:12:97:
         0e:79:cf:12:32:fb:95:38:86:5e:24:b8:09:d2:e2:39:a2:9d:
         b7:ca:cb:56:f0:59:61:41:ed:62:58:bd:83:e7:bd:32:c4:11:
         52:3b:6c:49:ca:6b:15:16:00:fd:df:0e:c5:d5:56:90:1f:8c:
         b5:b8:91:8e:88:39:02:79:c3:87:98:c1:00:c6:a1:bd:30:8f:
         c8:e2:6b:d2:95:85:b4:af:8a:28:a7:03:29:da:ef:4e:3e:cb:
         38:da:34:b2:fa:f5:89:35:4d:94:c6:d4:0e:34:62:82:44:3c:
         45:2a:62:73:9c:ad:b3:26:37:d9:b6:a1:6c:e8:18:6a:68:68:
         9a:cf:30:ad:e1:e2:56:13:6a:55:53:05:38:0b:4e:ea:0a:54:
         4b:98:06:c4:30:fd:c2:94:c0:43:fd:73:09:10:88:91:8d:84:
         4b:53:7e:c1:2f:5e:7e:24:5e:45:ea:80:fc:aa:3d:e4:17:f7:
         7b:a4:17:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:28:32 2026 by rpki-client