Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2268d959-56e5-32dc-86ad-8afa9586ca48.roa
File:                     2268d959-56e5-32dc-86ad-8afa9586ca48.roa (raw, json)
Hash identifier:          uTGhAdfnArjIkxzj30wy619UNy3roirhxMWg5lmcp2k=
Subject key identifier:   EC:45:7F:45:CB:BB:07:9F:DE:6D:2A:F6:31:74:82:2E:5C:B0:D9:C2
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F5E62CC882FBCA09CB609C680
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2268d959-56e5-32dc-86ad-8afa9586ca48.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     214916
IP address blocks:        144.225.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:cc:88:2f:bc:a0:9c:b6:09:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=29bfcf6f-ac99-4312-85e2-b4e453d3c72f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:18:62:f4:12:07:17:e4:3e:c3:1c:45:76:3e:
                    a6:a4:93:d4:81:4e:90:96:07:1b:ce:53:15:63:4b:
                    60:77:a5:84:70:68:15:87:66:82:48:df:ba:5a:07:
                    0a:b6:ec:b6:9a:71:ed:d6:5c:e0:b6:74:1b:50:aa:
                    50:55:2f:ca:6e:f7:f2:bd:46:d1:63:8a:05:ee:3b:
                    cb:21:02:38:37:dc:9e:2e:54:9d:7f:cc:8c:4d:b4:
                    7f:ba:cc:02:c8:ec:1a:f5:82:5b:e1:fd:0e:29:c6:
                    08:f9:67:f7:69:e6:9d:00:b8:88:4b:0d:3f:0f:3a:
                    8c:0d:ee:82:6c:81:d6:9f:26:68:ed:17:a4:35:73:
                    3d:b0:14:30:0a:13:4d:2b:fa:c7:18:01:81:61:6e:
                    c0:48:cd:87:4e:04:18:90:b2:98:49:dc:10:23:58:
                    ab:32:4e:bf:b5:ca:d0:a3:68:40:b5:e9:0f:72:7c:
                    32:fa:58:c1:e3:d8:62:de:b3:a5:8d:8b:f7:06:4c:
                    43:4b:10:5f:6f:18:f3:97:d3:9c:57:e2:42:2f:8f:
                    54:e8:e3:9d:c9:3a:ca:c2:f4:9e:82:7a:0d:dd:ed:
                    a1:a4:25:d1:2f:03:48:6b:51:0e:81:16:98:af:b7:
                    58:13:cf:7d:e5:2c:43:3b:8f:16:20:3b:6f:22:4f:
                    cb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:45:7F:45:CB:BB:07:9F:DE:6D:2A:F6:31:74:82:2E:5C:B0:D9:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2268d959-56e5-32dc-86ad-8afa9586ca48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:57:92:60:0a:00:7a:71:25:32:25:18:ea:1b:9f:d5:a2:2a:
         81:d5:84:1c:1e:cd:37:27:95:8e:d7:04:94:14:61:ae:e4:ab:
         8f:e7:d9:3c:76:c3:00:9e:fb:64:a7:e1:5b:29:2d:be:47:1d:
         b6:6f:8b:a6:96:fd:fb:0d:71:55:58:b7:ce:f8:a1:14:bd:42:
         a1:c5:03:9b:6a:c8:77:65:ed:d3:42:33:03:21:49:dc:95:55:
         9d:51:e1:1e:d0:24:f0:bd:e2:cf:af:54:14:a8:97:a2:30:df:
         84:0c:4b:d5:85:6e:9a:a4:d3:63:0e:f5:c1:b5:2f:26:6b:e6:
         4d:b6:94:87:78:91:c8:5c:48:94:ff:2d:b0:6a:8a:d1:30:fd:
         b3:9e:47:fa:d7:df:c5:43:d5:62:94:37:47:75:c4:52:02:da:
         0c:75:cd:65:90:30:6d:f4:1e:7f:dd:6a:30:de:42:37:b5:db:
         92:b1:12:24:62:c1:54:2a:f0:21:55:c2:b0:19:0b:87:d1:c3:
         c8:93:74:30:45:2c:23:9c:79:e4:4e:b5:78:81:c5:cf:f3:42:
         75:94:3c:a3:cd:0e:1d:14:d4:87:d7:36:5b:bc:69:cc:22:a8:
         fd:3b:f5:44:72:c8:88:05:34:ac:8f:8a:ef:44:76:91:91:fb:
         91:2d:27:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:58:24 2026 by rpki-client