Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ab17e324-050e-363e-8fe7-2e2237814edf.roa
File:                     ab17e324-050e-363e-8fe7-2e2237814edf.roa (raw, json)
Hash identifier:          4glqRliAbRSnUrxnxTbQ2GqiYCfnoSelSOO9bV2cCT8=
Subject key identifier:   2B:C6:94:14:BE:1A:CA:F2:BA:46:A8:FF:57:11:0C:5A:DF:91:32:FF
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D7CCFE458196D2A1D7C14E300
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ab17e324-050e-363e-8fe7-2e2237814edf.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     10753
IP address blocks:        142.111.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:e4:58:19:6d:2a:1d:7c:14:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=486ede0c-334e-437d-af22-4749a33cec85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6c:9e:c8:31:57:4d:f4:ad:ff:62:ba:be:a8:
                    b7:ec:f7:11:47:53:1e:1a:1c:1d:86:b2:b6:38:b4:
                    98:1e:35:2a:fb:f2:6e:e4:d0:4e:b8:4d:c7:16:32:
                    bd:ef:b2:ba:6e:30:05:e6:ea:f0:eb:06:bc:8e:c9:
                    68:46:30:8c:56:c3:c0:cf:fa:73:bd:7a:1a:88:04:
                    1c:5e:21:6b:0b:bd:74:31:1b:e7:70:b6:a1:2e:ef:
                    10:5c:87:46:4b:3e:4f:c3:09:9c:68:35:5c:03:38:
                    98:bd:e6:57:2f:f1:15:8c:8d:8e:c5:e3:de:46:66:
                    38:71:b7:a2:f7:24:da:1a:3d:18:f4:55:90:5c:e3:
                    24:dc:83:7d:31:92:36:a6:fe:2c:e7:13:62:9e:42:
                    41:da:40:18:03:28:2b:17:55:e8:2c:ad:d7:84:05:
                    d4:08:20:2c:b2:04:f7:b8:75:a0:d6:3c:2f:87:37:
                    f7:7c:43:de:a5:94:2a:0b:a4:fb:8e:25:cf:ce:ed:
                    c6:ed:98:d2:80:0e:e4:26:e4:18:a4:34:ce:c9:0b:
                    11:c4:64:d6:19:3b:86:22:b5:37:5d:61:c9:bf:1c:
                    ab:6b:95:3a:85:d9:7d:83:21:3f:16:dc:ca:5b:72:
                    6d:05:06:d7:be:ee:af:f8:3d:cc:7f:52:f7:1e:f0:
                    e1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C6:94:14:BE:1A:CA:F2:BA:46:A8:FF:57:11:0C:5A:DF:91:32:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ab17e324-050e-363e-8fe7-2e2237814edf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:00:33:12:c6:2a:67:c2:91:c7:db:d2:44:c7:79:90:94:24:
         7c:f2:86:09:af:32:63:f8:8a:dd:77:05:10:4b:2b:7c:93:51:
         fb:ac:f5:0b:e9:e9:a6:c3:7d:37:d8:3b:af:b3:21:9a:f2:c5:
         76:e5:d4:15:be:0d:2a:a0:1b:94:ae:e7:69:cc:c5:16:ea:fe:
         ce:63:ea:e7:46:45:cb:87:cc:3a:fa:d2:35:e1:70:bf:da:c4:
         fe:58:12:b4:a2:40:78:97:5d:6f:86:e9:1b:a8:e1:22:ac:31:
         1d:97:08:16:1a:19:7b:75:40:cc:79:ad:27:a4:80:59:79:4f:
         0c:50:c3:6a:39:5b:81:5e:50:6f:1d:e4:0d:d7:9e:f2:f1:94:
         8b:61:ad:ba:c0:6e:9a:b1:41:49:33:3c:43:b0:e3:94:24:d1:
         96:86:e0:44:de:f5:17:09:59:2a:a5:81:20:77:62:83:25:24:
         38:5e:61:54:0f:73:3c:85:42:97:5f:85:b6:a8:81:8a:4a:2e:
         df:aa:19:7a:52:1a:70:2f:32:59:41:f8:5f:76:2d:0d:fd:fb:
         b6:38:6f:0a:0c:cc:fa:20:ed:33:4f:28:b0:41:ba:02:68:69:
         c8:60:bc:9b:9b:aa:ca:ba:4d:c8:98:30:6f:e0:50:81:99:16:
         d7:b8:f2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:35:54 2026 by rpki-client