Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/289e9b0f-5dca-3c2c-a6bd-97d4fb179627.roa
File:                     289e9b0f-5dca-3c2c-a6bd-97d4fb179627.roa (raw, json)
Hash identifier:          yfas5Lwi/5rueTgwlHcfhQxfv64nQgNMQ4COeob6kNs=
Subject key identifier:   03:E4:BA:D7:13:7E:0A:83:CB:09:12:C7:1C:C9:E4:EA:15:2F:E8:69
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E34228395DA8856C5E6C17E80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/289e9b0f-5dca-3c2c-a6bd-97d4fb179627.roa
Signing time:             Wed 17 Jun 2026 17:00:05 +0000
ROA not before:           Wed 17 Jun 2026 17:00:05 +0000
ROA not after:            Tue 15 Sep 2026 17:00:05 +0000
asID:                     7488
IP address blocks:        144.225.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:34:22:83:95:da:88:56:c5:e6:c1:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 17 17:00:05 2026 GMT
            Not After : Sep 15 17:00:05 2026 GMT
        Subject: CN=8b775cb1-a38a-4d51-90b6-ce005d910163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:13:f3:33:ec:c9:c4:de:24:69:71:5a:99:91:
                    3e:d8:c2:ef:4e:e9:aa:29:c5:35:a4:98:3e:b9:ca:
                    79:57:f0:8f:39:a9:fb:08:0e:94:71:f1:79:08:9f:
                    2a:94:22:d0:4f:23:25:da:2f:40:72:f4:8e:f7:91:
                    09:20:0b:e3:dd:37:67:a6:bf:2d:cf:be:f6:09:8b:
                    b1:3e:b7:95:d0:53:a4:e7:8d:a6:42:b2:0f:45:d5:
                    5b:72:dc:3c:ee:97:5b:9e:ea:66:c6:5b:ae:75:de:
                    8b:b9:a9:be:a7:25:e9:cf:14:ec:aa:20:b7:82:74:
                    e2:64:a0:10:e2:0a:ef:7b:39:08:bf:d0:97:0f:f7:
                    8d:b4:37:34:24:07:84:1c:ab:51:98:c7:8e:4a:31:
                    2b:40:84:e3:7a:1b:f8:5d:a4:01:e8:71:65:34:ad:
                    b1:50:f6:05:d1:41:62:8d:9c:fb:c7:3f:4c:8a:2b:
                    a1:b8:22:72:c6:13:26:14:b1:d5:f0:2e:9f:5b:a8:
                    c0:62:c0:6e:04:0f:32:c4:68:92:42:52:7b:48:73:
                    59:98:d6:18:df:d7:fd:07:29:4c:f4:40:f5:29:a6:
                    f3:90:0e:b5:14:c3:6d:4c:3f:d9:d7:cd:db:ff:f4:
                    1a:d5:6c:e8:45:22:88:96:a8:84:bd:68:bb:69:c7:
                    99:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E4:BA:D7:13:7E:0A:83:CB:09:12:C7:1C:C9:E4:EA:15:2F:E8:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/289e9b0f-5dca-3c2c-a6bd-97d4fb179627.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:fb:1b:d8:58:e4:3c:fd:aa:b0:f9:f2:b8:e7:1c:ee:ca:ed:
         99:10:69:66:b1:fa:03:bd:24:b4:42:c2:15:5b:37:6c:c3:9a:
         77:21:3f:cc:9e:f1:62:06:a9:06:d6:0c:e2:f8:3d:68:c3:2d:
         50:54:5f:f5:1d:11:4f:de:8c:68:02:3f:49:78:cf:75:ef:31:
         d6:6d:4b:03:3c:97:09:b4:6d:df:dd:ef:ca:f2:a2:26:da:6f:
         95:0e:df:9a:44:02:89:d5:89:b9:64:1c:c0:d8:bc:91:2f:b7:
         58:39:dd:83:5f:41:32:df:36:41:a1:f8:69:d3:5b:b9:17:50:
         59:08:85:d9:0c:fa:74:53:8b:1a:27:80:b2:f3:5d:d8:c9:1d:
         40:14:de:c5:35:3b:95:f7:41:55:72:ec:51:b1:8f:81:7d:de:
         38:51:13:30:24:c0:67:d1:c2:08:de:4f:8d:c1:96:17:34:36:
         65:1b:69:ce:b8:93:4d:d4:17:b9:3f:42:43:f9:47:0b:22:93:
         45:d6:c4:5f:e4:a7:54:db:cc:9d:0a:14:5d:59:45:21:62:a7:
         69:7f:08:a4:80:38:5d:59:c7:17:48:c2:c6:3a:85:5b:16:33:
         69:cd:9c:e9:3d:f6:e0:62:72:46:3f:37:a7:70:cf:ef:f1:8d:
         ff:d0:5c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 02:52:21 2026 by rpki-client