Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1d92fd91-4ca7-33dc-ac70-589e48daa288.roa
File:                     1d92fd91-4ca7-33dc-ac70-589e48daa288.roa (raw, json)
Hash identifier:          1NubKUSHIqLMcvY+rVAPPmbW85614jkaF2yy33RODjM=
Subject key identifier:   FF:14:49:53:6E:17:91:9B:82:AC:B6:72:53:79:FD:71:2D:38:9C:F5
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E342183D0ACE26E8EABA32960
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1d92fd91-4ca7-33dc-ac70-589e48daa288.roa
Signing time:             Wed 17 Jun 2026 16:58:04 +0000
ROA not before:           Wed 17 Jun 2026 16:58:04 +0000
ROA not after:            Tue 15 Sep 2026 16:58:04 +0000
asID:                     36352
IP address blocks:        144.225.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:34:21:83:d0:ac:e2:6e:8e:ab:a3:29:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 17 16:58:04 2026 GMT
            Not After : Sep 15 16:58:04 2026 GMT
        Subject: CN=d945f32b-2b50-4e9d-9389-0a56b73667ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a6:f6:7d:f9:41:0f:af:f4:ab:5e:6d:42:f9:
                    8b:f8:bc:9d:05:38:39:6c:6b:e1:ac:f2:52:e3:47:
                    05:a3:4f:14:88:a7:3f:60:9f:9e:48:eb:b2:7c:53:
                    03:b8:48:4f:4a:88:82:e9:cf:af:78:91:6a:77:a0:
                    bf:08:dd:e7:53:b3:24:b8:e0:39:1d:f8:e0:4f:18:
                    d1:ad:d4:93:e4:74:2e:b9:22:56:e4:d4:a6:20:a0:
                    c1:cd:46:5f:19:3f:6b:5d:e7:1b:80:2d:ac:62:06:
                    f0:92:20:3a:f1:29:03:5a:41:7b:b4:f6:44:3d:f0:
                    66:60:27:ff:bc:5f:98:56:9e:28:6f:cb:9c:d4:95:
                    eb:cf:2e:b2:e2:26:3a:67:9a:69:eb:f6:2a:0a:24:
                    26:e8:f3:58:dd:ce:a2:63:c0:bb:d7:e9:b0:9b:a0:
                    e7:20:28:f7:d0:56:5a:fa:e2:89:97:d4:dc:b1:05:
                    86:4d:c2:53:68:cb:ed:7a:13:90:84:ee:61:89:72:
                    ba:5d:e6:2c:2e:23:a8:ef:df:b1:c0:8b:0f:db:bd:
                    b6:de:c6:b7:86:11:ea:da:29:2e:15:6a:26:5a:37:
                    93:20:cb:2b:48:e4:4a:ea:8e:db:e6:01:6e:bd:df:
                    70:3e:e6:e6:39:a5:f7:eb:8b:ee:e1:5f:b6:80:97:
                    94:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:14:49:53:6E:17:91:9B:82:AC:B6:72:53:79:FD:71:2D:38:9C:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1d92fd91-4ca7-33dc-ac70-589e48daa288.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:aa:94:dc:5b:a5:91:8e:2a:23:61:9f:d2:96:af:9a:88:30:
         ed:85:e8:95:72:76:80:bc:8c:dd:59:4b:26:48:a5:06:8f:31:
         11:0f:92:50:87:d4:58:55:68:1b:03:06:e9:0d:76:f9:a7:74:
         48:28:a2:7d:aa:f6:15:d1:33:4b:d4:c5:0e:f4:88:ff:1c:b1:
         fb:2a:fb:c6:dd:44:0d:6e:40:c1:21:c4:62:f6:20:82:41:a5:
         69:1c:b4:5a:6e:ec:10:6c:4a:46:92:e2:8e:5f:9c:ce:de:29:
         13:77:68:4d:c4:71:a3:fe:79:a1:2c:5d:c1:75:5d:b2:a3:6c:
         4e:ee:11:84:ec:45:39:db:89:d2:41:89:32:b0:f7:00:d7:04:
         88:48:43:c2:2c:34:a7:88:49:3e:46:59:5a:28:66:48:31:06:
         6f:db:71:14:32:36:1a:16:3f:01:fa:5c:94:5b:fb:49:85:f5:
         a0:a2:b7:03:4a:8a:01:a9:0b:1d:3e:f8:e6:92:59:b9:4e:de:
         67:dc:ef:02:72:94:39:28:54:01:8b:dd:50:a7:81:0b:b1:56:
         3f:46:d7:9b:14:01:21:e9:3f:af:67:f6:80:78:20:29:9d:af:
         3d:b1:d6:ed:12:68:a3:62:90:26:41:89:0e:93:e9:98:b5:71:
         74:5b:81:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE40IYPQrOJujqujKWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDYxNzE2NTgwNFoXDTI2MDkxNTE2NTgwNFowLzEtMCsGA1UEAxMk
ZDk0NWYzMmItMmI1MC00ZTlkLTkzODktMGE1NmI3MzY2N2VhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlab2fflBD6/0q15tQvmL+LydBTg5bGvhrPJS
40cFo08UiKc/YJ+eSOuyfFMDuEhPSoiC6c+veJFqd6C/CN3nU7MkuOA5HfjgTxjR
rdST5HQuuSJW5NSmIKDBzUZfGT9rXecbgC2sYgbwkiA68SkDWkF7tPZEPfBmYCf/
vF+YVp4ob8uc1JXrzy6y4iY6Z5pp6/YqCiQm6PNY3c6iY8C71+mwm6DnICj30FZa
+uKJl9TcsQWGTcJTaMvtehOQhO5hiXK6XeYsLiOo79+xwIsP27223sa3hhHq2iku
FWomWjeTIMsrSORK6o7b5gFuvd9wPubmOaX364vu4V+2gJeUtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP8USVNuF5Gbgqy2clN5/XEtOJz1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMWQ5MmZkOTEtNGNhNy0z
M2RjLWFjNzAtNTg5ZTQ4ZGFhMjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkOEUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGqqlNxbpZGOKiNhn9KWr5qIMO2F6JVydoC8jN1ZSyZIpQaPMREPklCH
1FhVaBsDBukNdvmndEgoon2q9hXRM0vUxQ70iP8csfsq+8bdRA1uQMEhxGL2IIJB
pWkctFpu7BBsSkaS4o5fnM7eKRN3aE3EcaP+eaEsXcF1XbKjbE7uEYTsRTnbidJB
iTKw9wDXBIhIQ8IsNKeIST5GWVooZkgxBm/bcRQyNhoWPwH6XJRb+0mF9aCitwNK
igGpCx0++OaSWblO3mfc7wJylDkoVAGL3VCngQuxVj9G15sUASHpP69n9oB4ICmd
rz2x1u0SaKNikCZBiQ6T6Zi1cXRbgfs=
-----END CERTIFICATE-----
Generated at Sat Jun 20 02:53:20 2026 by rpki-client