Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0089895a-f07e-338a-8f0d-7cfbcbddb741.roa
File:                     0089895a-f07e-338a-8f0d-7cfbcbddb741.roa (raw, json)
Hash identifier:          +n9ELB6r2JAmj/e2ffCuTGs0ePcTEbswkeRHn+/bJZ8=
Subject key identifier:   81:84:DA:4E:08:F8:5F:AE:0B:02:49:24:AB:0E:FB:57:15:C0:0D:C5
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EF2E755974088EC0D71A95800
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0089895a-f07e-338a-8f0d-7cfbcbddb741.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     5511
IP address blocks:        144.225.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:55:97:40:88:ec:0d:71:a9:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=4e244033-404e-4803-a430-71a8d3180b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:39:5c:7a:0d:9a:03:a3:8f:a3:e5:fc:24:a7:
                    e5:1f:4b:be:88:81:2b:1f:dc:6d:60:c1:fb:73:9b:
                    c1:86:2c:d5:8a:74:2e:15:32:bd:b8:b9:82:21:cc:
                    a0:33:34:a4:2a:db:fb:05:61:2b:3f:66:f7:0a:e3:
                    57:1d:d8:31:09:b6:2b:4f:59:62:6d:2c:04:6f:55:
                    6c:73:e7:06:7f:48:2a:51:21:95:d5:e0:f5:87:2a:
                    f9:5b:15:e8:ce:80:83:76:d3:7a:b2:e2:de:5d:9a:
                    bd:81:a3:cc:db:8f:e6:e1:73:15:b9:d5:d3:ea:78:
                    97:71:bd:71:65:ff:01:1e:76:c1:28:32:dd:44:40:
                    45:5f:79:15:0c:95:35:37:ee:7c:74:55:7a:8b:62:
                    0e:b8:5b:52:fd:26:97:b6:6a:9d:d7:82:14:c0:f8:
                    da:c0:96:a7:8a:ef:89:4f:19:cb:ff:d7:02:3a:87:
                    d6:70:85:fe:1c:03:28:16:13:2b:81:b8:37:2b:33:
                    11:71:8c:f4:3b:7c:df:46:7a:15:08:33:c5:e4:02:
                    23:bf:da:26:33:91:bf:b2:c8:0c:59:36:e4:e1:b4:
                    00:0e:b8:d9:62:39:4e:2c:77:20:b3:11:46:3c:35:
                    f5:6a:8f:94:48:90:8b:02:95:21:49:67:bd:ad:b1:
                    37:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:84:DA:4E:08:F8:5F:AE:0B:02:49:24:AB:0E:FB:57:15:C0:0D:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0089895a-f07e-338a-8f0d-7cfbcbddb741.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:40:44:bb:31:ae:d7:d4:90:35:f1:f3:87:b9:18:5e:2d:97:
         40:ae:f7:59:65:28:f8:a5:e9:53:7a:7d:54:3b:de:90:db:55:
         75:36:22:eb:2f:f2:c3:51:83:f1:e5:05:75:c2:43:da:f2:6c:
         85:29:c9:3d:5e:b2:58:d5:38:26:c1:70:44:c0:ec:a8:9c:58:
         f3:ec:92:eb:b8:bd:6f:33:73:34:7a:62:ff:ce:03:bb:97:2e:
         e6:ad:6a:32:1f:f4:48:f5:00:43:63:1d:72:8b:c8:be:6e:ec:
         46:5b:aa:24:22:b9:f5:85:91:c4:3d:19:4c:96:66:f6:33:5c:
         55:c3:74:41:af:a8:d4:ab:4a:c8:58:62:7a:4d:26:d4:51:88:
         81:51:9a:61:e5:53:b1:9f:b2:dd:da:bd:d1:b1:19:b4:55:54:
         fb:57:07:03:b4:bf:08:2a:34:05:75:16:ed:be:84:8a:93:5d:
         27:a6:6f:4a:87:f9:aa:e9:a4:32:56:e0:87:92:41:6d:9a:d4:
         2a:b7:57:88:9c:6d:59:ce:08:4a:01:97:ba:52:df:5a:79:aa:
         b2:aa:21:f0:fc:31:03:23:0d:b1:3d:cf:28:81:66:27:ca:86:
         98:42:30:46:9d:e3:cb:a8:b9:6b:7d:9c:7b:02:f5:7f:e9:ce:
         8f:43:6e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 14:21:13 2026 by rpki-client