Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/32771085-2efd-3e60-8c31-bf5755680482.roa
File:                     32771085-2efd-3e60-8c31-bf5755680482.roa (raw, json)
Hash identifier:          KHLNySJeoMF7ZcHXHXaZEQsStWHYxmx5xKGhC6Q+ceE=
Subject key identifier:   1D:A0:22:8E:25:8A:EC:D0:82:9F:F7:67:B2:66:4A:BA:42:FB:AE:8A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E0CF694D161906922B90F2E60
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/32771085-2efd-3e60-8c31-bf5755680482.roa
Signing time:             Wed 03 Jun 2026 16:15:03 +0000
ROA not before:           Wed 03 Jun 2026 16:15:03 +0000
ROA not after:            Tue 01 Sep 2026 16:15:03 +0000
asID:                     20473
IP address blocks:        144.225.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:f6:94:d1:61:90:69:22:b9:0f:2e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun  3 16:15:03 2026 GMT
            Not After : Sep  1 16:15:03 2026 GMT
        Subject: CN=b720ef71-7c17-4741-b254-6b80df9dcac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bf:6a:cf:10:44:ea:30:8c:98:5a:fd:02:f9:
                    cd:bc:90:a9:61:c2:ed:23:85:89:5b:5d:9e:0d:f3:
                    2c:46:80:cf:d2:ca:49:1f:79:4c:54:f8:ac:b5:16:
                    c5:8f:bf:db:6d:0e:c1:6f:12:4a:02:a1:1a:7a:aa:
                    d1:c7:86:cd:e5:35:b5:de:da:91:d5:b2:49:5f:44:
                    f7:a6:75:13:e3:f4:07:c8:8d:6e:0f:18:86:e4:0a:
                    45:a6:10:64:5c:a2:45:0f:02:e0:6b:80:95:d0:a2:
                    eb:ef:48:43:02:a4:f4:f3:2d:96:0c:ff:1f:ef:97:
                    47:b7:a2:60:0d:bc:45:e9:b0:fa:a7:03:f0:d2:9e:
                    00:c7:6d:a3:47:a1:c5:40:60:ff:12:50:9d:11:65:
                    8d:b8:b6:6c:c7:fa:db:b0:96:42:5b:33:af:ef:5b:
                    3b:1e:70:eb:06:9f:7d:2b:2d:3c:da:0e:19:e9:70:
                    83:a2:63:bd:44:3b:d5:91:09:5b:b2:03:01:f6:cb:
                    f1:1f:b8:a0:b6:13:55:23:f5:71:7d:90:b0:57:04:
                    f3:a6:57:22:28:d1:c6:0a:37:38:72:13:5d:08:57:
                    9b:d9:f0:20:93:de:bb:cc:c9:64:3f:29:1d:92:59:
                    c5:fc:a7:93:ab:f7:1f:54:ee:53:da:f3:5d:fc:83:
                    c7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A0:22:8E:25:8A:EC:D0:82:9F:F7:67:B2:66:4A:BA:42:FB:AE:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/32771085-2efd-3e60-8c31-bf5755680482.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:4a:9f:33:e7:f8:09:f1:0d:68:0c:62:fb:a2:b2:88:8d:f5:
         9a:77:b5:2e:02:9a:9f:1f:57:9d:3a:00:e4:a5:1d:8b:8f:1e:
         1d:13:a6:de:40:d0:35:d6:7f:73:c0:c6:1f:ac:a5:ef:59:ca:
         00:d7:97:f8:f7:6b:c7:84:0a:6e:d6:62:1b:1d:29:75:8a:34:
         16:8d:00:8e:f9:0e:13:4b:ec:27:f8:9f:5a:9b:63:04:c6:10:
         a4:39:e4:9e:f3:4a:13:2c:75:40:c2:ec:67:35:a1:a9:00:1d:
         de:0a:e8:0a:e0:9f:60:7b:54:6c:97:53:90:8b:e5:72:4d:ee:
         ec:b2:f0:4d:8e:76:06:b4:1e:1a:00:ca:5e:e1:69:29:c5:a8:
         37:a2:c8:df:fc:5c:af:10:81:3f:e1:3a:ef:de:bb:92:3b:a9:
         43:99:96:be:12:7f:5a:c2:91:00:4a:69:94:d7:4a:63:da:6c:
         1b:22:1a:4c:b4:fd:21:be:8f:15:2f:d1:86:89:12:f1:1e:f0:
         46:24:1c:d1:62:e1:0b:bd:1d:b0:b4:8a:50:7a:6d:2b:5e:64:
         0d:d0:bf:cd:66:e3:fa:8c:2c:d9:14:df:6c:89:46:95:0b:7a:
         1a:7f:e8:1b:81:7b:f7:e5:cd:67:e5:10:43:9b:15:31:d5:0e:
         c3:03:81:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:34:29 2026 by rpki-client