Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/299b50d6-14aa-3a83-b39b-c3c6908daec2.roa
File:                     299b50d6-14aa-3a83-b39b-c3c6908daec2.roa (raw, json)
Hash identifier:          dWPF6nXtn5L6EeqVYFi2PXyAS5RPynFAbZ4Y79Ek8Dg=
Subject key identifier:   E2:BF:51:67:85:8C:6A:84:10:26:0D:1F:3C:FF:15:8B:FC:A5:C3:BA
Certificate issuer:       /CN=8b53f56f-a586-4e85-9c61-c3a278e13120
Certificate serial:       010D0C9F4328584D5243520DF7B379C99E2D2000
Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/299b50d6-14aa-3a83-b39b-c3c6908daec2.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     14618
IP address blocks:        144.81.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:52:0d:f7:b3:79:c9:9e:2d:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=f4836a22-53ad-4525-bc3e-95d0e6eab3b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:62:e2:1b:d8:85:3b:62:bd:c5:bf:30:bf:b3:
                    97:4c:a4:0e:e7:26:f8:1a:59:c5:6a:4b:8e:73:48:
                    50:a4:33:ca:bf:a1:25:c3:89:c7:4b:0c:91:87:51:
                    6d:97:81:05:54:60:f7:18:94:ed:83:9d:7b:38:bf:
                    61:76:fc:9f:45:ed:b5:fe:cb:1a:e1:ce:5d:45:80:
                    30:74:67:1f:de:e0:00:e2:e7:46:64:62:cf:d3:7a:
                    bf:ec:77:46:88:19:c2:0b:60:00:2c:77:e2:e0:03:
                    18:09:02:fa:20:d5:3c:03:5e:1b:d7:69:3b:e7:33:
                    21:d5:c7:34:06:cb:01:d2:d6:bf:b9:31:5a:a3:af:
                    2e:a6:f9:d4:91:b5:d7:90:df:ff:d6:7c:e8:f4:48:
                    fb:cf:72:fa:3a:74:4b:6b:97:cd:09:fe:53:dc:bc:
                    f2:66:df:b0:eb:08:11:47:53:0d:1b:23:e7:f4:1d:
                    75:04:12:3b:f4:40:14:a7:fe:fe:c1:9d:af:3f:ac:
                    7a:6d:5d:56:89:64:dc:7a:14:cf:fa:84:91:35:44:
                    21:4e:c4:92:96:bf:c8:45:b8:5a:ad:6d:37:88:67:
                    0a:ce:1d:cc:72:95:45:12:a7:ae:78:b6:92:d8:82:
                    d7:34:a1:df:05:d5:3d:c6:e6:69:08:eb:16:93:7c:
                    3e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:BF:51:67:85:8C:6A:84:10:26:0D:1F:3C:FF:15:8B:FC:A5:C3:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/299b50d6-14aa-3a83-b39b-c3c6908daec2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl

            X509v3 Authority Key Identifier:
                keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.81.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:a2:3d:cd:84:57:84:c0:3f:f3:32:a4:f5:36:31:01:8d:c7:
         12:58:d8:cb:a1:23:60:e0:c3:99:10:2d:1c:71:40:16:fd:11:
         08:fd:ac:ec:45:99:fd:1f:6e:9f:9e:39:9a:e3:14:be:8d:ef:
         1d:d8:1e:42:e2:f1:e9:0b:7b:1a:91:b0:4a:30:ce:d0:8a:77:
         e1:ac:8c:15:64:ba:84:82:c8:ca:1b:c0:1b:16:ea:ae:cd:07:
         e6:f1:5f:c7:d8:f4:da:40:bd:42:15:74:d6:3e:83:d7:68:0c:
         f5:82:cf:09:45:24:76:3f:13:cd:fa:26:e2:24:31:38:26:3e:
         7c:71:c5:76:98:65:63:4b:6a:99:44:24:6d:99:bb:9c:de:0a:
         55:60:31:09:b0:50:06:c1:89:99:84:f1:2e:d8:b1:45:db:d4:
         27:df:46:25:9c:0c:00:63:5e:d4:fc:91:00:9a:8e:93:81:68:
         bc:2f:a7:96:86:bc:d0:2c:e4:3a:73:7b:79:73:36:c7:cb:d6:
         16:01:58:ba:b8:9e:d2:8d:c7:95:c6:55:fe:07:8f:e1:ca:2c:
         8b:86:ec:13:2c:4f:56:89:73:e2:f5:0e:27:e0:cd:65:3e:78:
         1f:f5:c5:4f:c8:12:f9:91:03:81:eb:e7:bb:6a:cc:ad:4d:1e:
         79:cd:5f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 10:33:16 2026 by rpki-client