Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/02d23824-3544-30ec-9b14-a7eaadabbf21.roa
File:                     02d23824-3544-30ec-9b14-a7eaadabbf21.roa (raw, json)
Hash identifier:          Qy5XZ5gEMSKzlsiU9hBE/PlGaLiKytS3OoT0edGoX8g=
Subject key identifier:   99:62:0A:F5:B8:71:0D:48:14:15:E2:74:D5:AC:40:91:57:E5:5D:E9
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584ED9C739D46A71EBDA2DCF5580
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/02d23824-3544-30ec-9b14-a7eaadabbf21.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     402646
IP address blocks:        144.225.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:39:d4:6a:71:eb:da:2d:cf:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=bed8ad91-74c3-4b0d-93e8-bb434b1b56eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:30:62:d3:94:23:ee:85:63:63:4b:0f:88:d4:
                    65:36:94:9b:60:65:ce:1a:83:e1:9d:2d:03:59:a0:
                    ce:d6:9f:74:70:ec:0a:76:0a:1b:59:f4:95:51:15:
                    cf:8b:f8:82:5d:af:59:83:3e:e2:ef:09:22:bf:d1:
                    35:50:fe:e3:6d:47:4b:05:c5:f4:e7:72:f5:86:5e:
                    ba:10:04:c7:1d:aa:e0:05:3d:3b:f1:ea:70:56:2a:
                    7e:89:df:97:f2:8e:60:31:04:5e:cd:35:c8:23:a8:
                    7c:d3:15:e4:49:53:95:9a:93:77:e6:0b:f6:b4:30:
                    4e:4f:20:49:aa:9a:d9:62:db:13:90:44:9b:8f:e1:
                    1b:d6:67:3a:e3:a9:29:d9:89:ba:79:73:63:aa:78:
                    95:13:f1:79:06:e8:aa:80:23:04:96:b1:63:12:b9:
                    93:2a:cf:da:ac:6f:fb:ea:f9:c9:be:37:e8:c4:2a:
                    0a:d3:38:ef:0d:bf:b7:f6:79:55:4a:2f:c1:da:a0:
                    2d:80:e2:38:45:ee:d0:3b:f3:cc:3f:91:26:79:60:
                    2b:00:75:bd:9f:85:0a:52:4b:c9:4b:95:bc:4f:61:
                    d7:eb:e3:64:41:cb:51:cf:d0:bb:19:f2:92:ca:14:
                    df:85:42:5a:5b:d7:62:da:83:9f:9e:f5:61:d2:3b:
                    73:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:62:0A:F5:B8:71:0D:48:14:15:E2:74:D5:AC:40:91:57:E5:5D:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/02d23824-3544-30ec-9b14-a7eaadabbf21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:ad:69:ba:65:39:b8:c2:d3:ee:10:5b:f5:d6:71:bd:20:dc:
         e2:08:29:9a:e5:6b:6c:70:31:49:38:44:0b:dd:9d:49:be:77:
         a5:24:23:a3:40:27:ba:d6:c0:61:b1:e2:d0:54:1e:7b:a5:6e:
         1b:20:8d:db:1d:49:e0:9d:33:98:36:74:3e:4e:14:3a:01:bc:
         61:09:e6:32:37:ec:a2:a7:49:20:c9:03:c7:08:6f:d1:96:f4:
         90:d5:93:36:b8:5b:15:57:60:ee:8c:fa:8c:bd:9c:ae:a5:c4:
         a7:00:fa:5a:52:f4:f9:11:08:5c:cf:a7:6a:fb:80:5b:6f:2f:
         f3:f1:9f:c9:3a:f3:82:04:69:e2:37:71:5c:8f:53:9c:bb:82:
         eb:80:19:39:60:ad:1b:c0:66:f2:f1:b2:25:f7:6d:ea:c6:18:
         35:df:37:1d:4a:bb:6e:de:10:8a:d2:9d:da:e2:bb:1a:3d:ed:
         68:81:71:ef:1f:7a:63:db:a0:8c:cf:88:62:26:4d:d8:22:f0:
         00:52:29:b8:df:72:90:58:67:e4:44:f1:2a:a1:f4:4c:0c:b2:
         09:4c:3b:1b:3c:c6:7c:19:63:1f:49:4a:dd:65:cb:bf:36:6b:
         c4:bf:75:9f:c0:c5:81:d8:bb:40:62:d1:37:65:06:79:63:66:
         8f:ee:6e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:07:59 2026 by rpki-client