Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f7a81d82-4293-32c6-a981-471e670faf33.roa
File:                     f7a81d82-4293-32c6-a981-471e670faf33.roa (raw, json)
Hash identifier:          RiWLmmiyrY/FITx/zv3pyZtFgZjERHwyFe88QTDmPKQ=
Subject key identifier:   C2:E8:37:94:F5:43:72:CA:62:B2:9C:C9:0D:8F:6A:5D:02:BA:EC:68
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EA445118D7C1499A7FC024EC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f7a81d82-4293-32c6-a981-471e670faf33.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     6079
IP address blocks:        108.171.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:11:8d:7c:14:99:a7:fc:02:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=c4e1230a-8197-4787-a40d-9c6be3adcace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f6:c9:d1:43:d2:98:35:67:09:fa:b2:ff:59:
                    8f:63:e4:98:5f:e0:56:ce:45:68:dd:b6:84:8a:32:
                    13:5d:92:f0:88:06:5d:60:e3:f4:5e:08:c9:bb:72:
                    57:37:17:f9:18:b8:3a:53:e3:27:61:bd:86:8c:2b:
                    db:6f:40:31:05:54:c7:f5:df:a0:ef:20:ac:c9:1f:
                    0a:24:dd:42:bd:1a:ed:f9:2a:4e:93:b2:a9:84:b9:
                    59:ad:95:44:a0:7e:49:f8:ea:58:71:cd:c7:5c:db:
                    50:7f:f1:e8:b1:ae:7e:3c:2c:11:7f:d6:51:d1:32:
                    fb:42:df:d5:33:e9:f0:fd:37:04:61:3c:ad:e9:77:
                    1a:00:5a:28:0a:9f:cc:42:7b:c2:74:ae:00:57:79:
                    89:fe:44:0f:6f:ef:7e:43:45:8b:fc:80:7b:ee:e7:
                    35:ae:95:06:3f:ee:df:b6:9f:e6:bd:5a:af:0d:27:
                    63:0d:b4:74:29:96:f3:5e:3e:31:94:20:41:a1:16:
                    bf:99:d5:72:4c:74:57:d8:01:87:86:9c:01:78:78:
                    c9:b8:f9:24:35:4d:d0:32:31:d6:c3:9d:9b:b2:96:
                    83:07:2b:49:2d:ed:00:a6:e5:d0:cc:69:1d:49:f5:
                    6c:d6:3b:4d:28:a0:7e:50:00:3e:14:3b:4d:c5:1e:
                    6a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E8:37:94:F5:43:72:CA:62:B2:9C:C9:0D:8F:6A:5D:02:BA:EC:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f7a81d82-4293-32c6-a981-471e670faf33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.171.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:35:04:12:9d:be:0d:8b:6f:03:36:21:b3:e4:cd:52:5b:b9:
         e5:22:ee:59:e8:d9:0f:da:1a:ab:d1:64:92:bb:cc:f8:4e:ee:
         f9:27:3a:f0:cd:a7:12:4e:92:1a:16:f3:86:19:c2:d7:89:00:
         03:d5:2a:c1:c9:fa:db:d6:a6:f4:91:5a:1d:8c:c5:b6:b1:d3:
         bb:1d:5d:14:9e:57:bb:e7:db:94:96:10:16:1c:97:dd:58:2f:
         17:f5:d7:c4:25:cf:42:23:a9:f5:ef:29:96:a6:1c:ba:20:b8:
         46:72:aa:ea:a0:5f:51:27:68:39:30:da:d8:06:e5:1c:49:47:
         e6:20:68:6f:0a:f2:44:2e:1e:05:0d:01:50:b5:5f:87:91:89:
         cd:98:06:12:d2:4a:7e:ad:e5:f1:8b:cd:61:f4:52:b8:91:29:
         c1:5a:c9:c5:87:d7:c2:f1:c7:98:e8:dc:09:64:2d:5a:e0:d1:
         c1:6e:03:f0:ed:27:14:de:e2:ca:30:dd:97:6d:aa:a3:8c:d4:
         01:18:08:bf:42:00:fa:c7:c6:6a:be:27:ff:8e:35:e0:a2:34:
         3b:b4:c6:84:75:6a:5f:5b:0b:9d:8a:6c:ea:15:27:6b:b4:b0:
         95:71:40:88:90:f0:72:5c:04:9e:bf:d4:37:0d:3d:79:9c:71:
         24:68:3e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:40:23 2026 by rpki-client