Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cb231173-8fdd-3329-b610-56c2d048d651.roa
File:                     cb231173-8fdd-3329-b610-56c2d048d651.roa (raw, json)
Hash identifier:          pYGHec9MMt8SiYgyq4GfGxIOG2pWA2iKnARwNY8wkNA=
Subject key identifier:   FF:DF:AA:D3:E6:2C:52:28:9F:E8:BE:6D:3E:4A:5E:AD:05:7F:7C:F3
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E15E4A665B6704FF400182080
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cb231173-8fdd-3329-b610-56c2d048d651.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     401152
IP address blocks:        142.111.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:a6:65:b6:70:4f:f4:00:18:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=4e59996b-88a5-4cb3-88e6-622c8c4f30e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dd:de:56:29:4b:6e:2b:3f:8f:06:ee:f2:9a:
                    d6:54:56:81:ce:6e:e8:56:ee:49:2f:a8:35:41:5b:
                    a4:2f:6e:5c:5d:b6:a4:d7:7e:c8:8f:6e:6c:61:12:
                    3a:02:f6:e4:dd:63:1c:ce:eb:0c:3a:61:3d:2f:3b:
                    e0:40:46:35:29:1f:74:f6:7e:ea:ad:88:01:c1:63:
                    6d:84:03:13:fe:60:09:15:93:65:ef:b6:2c:bc:c2:
                    c5:8e:2e:7a:61:08:29:d5:fc:8e:59:e1:30:db:8f:
                    07:1d:88:3e:86:53:8d:74:49:b3:b5:25:88:56:d2:
                    5c:7c:b6:5b:c5:34:19:f0:0e:17:9c:3c:ed:d9:27:
                    62:7c:a0:bd:90:21:d1:a8:71:cc:1a:7d:5c:1d:0b:
                    ee:11:eb:71:2f:b4:c9:65:4e:e1:d6:d3:ce:9e:5d:
                    da:2a:b8:67:d7:54:25:b8:81:ea:02:03:8a:48:a3:
                    c4:3f:ad:78:d9:f1:1e:90:fb:3c:18:a7:89:b4:1c:
                    df:b3:2c:5e:ab:c8:b0:49:2b:c1:8d:42:ec:14:be:
                    c6:cd:73:0f:82:64:07:98:4b:ed:fb:f2:fc:7e:51:
                    c5:ae:bb:4c:bc:c8:db:0e:7d:bc:46:97:99:8d:c7:
                    93:e7:be:9c:14:0e:05:54:07:46:47:c3:c7:b4:37:
                    ed:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:DF:AA:D3:E6:2C:52:28:9F:E8:BE:6D:3E:4A:5E:AD:05:7F:7C:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cb231173-8fdd-3329-b610-56c2d048d651.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:ca:a9:ec:de:08:93:da:88:40:8d:0b:c4:55:77:98:11:ef:
         cc:59:ce:10:b9:06:e5:c4:db:6e:c1:ef:e1:2c:99:51:92:2d:
         64:85:34:10:0a:e1:41:3e:34:0b:58:cd:52:83:ab:8a:ed:a2:
         37:f8:73:c3:e0:e2:90:71:f3:ad:e4:e4:cb:13:cb:de:93:56:
         3b:c1:72:45:62:28:b4:f7:31:06:30:3d:ce:a6:14:5e:ad:77:
         55:f7:79:1d:eb:ac:21:98:78:89:5f:3a:80:e4:e1:fe:37:92:
         51:0c:93:b7:d5:5b:19:3c:8e:8c:2b:f7:ce:bf:e4:38:2a:8e:
         c7:54:dc:e4:e3:e6:21:5c:29:f2:db:d7:70:16:da:77:50:81:
         e0:76:cd:62:4f:59:52:05:7a:9a:07:d3:68:c5:72:28:ee:c2:
         5e:11:10:49:af:44:dc:30:66:00:09:1d:ad:d9:db:0e:ca:12:
         d0:da:98:a2:9d:17:fe:18:1d:ec:ae:ec:ac:3d:00:47:ed:1a:
         2b:18:bd:d7:2a:07:c8:e1:d4:da:81:aa:90:a6:dd:7c:ea:89:
         fc:6e:20:6e:89:a1:9f:4d:7f:c3:64:72:78:03:0e:23:f3:11:
         37:bd:08:8a:4e:c4:fd:ac:d6:2c:e9:a0:0d:44:fc:8f:09:61:
         b6:bc:7d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:50:59 2026 by rpki-client