Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3c87e828-98d7-3e31-b1f5-342d25a06f0e.roa
File:                     3c87e828-98d7-3e31-b1f5-342d25a06f0e.roa (raw, json)
Hash identifier:          P1as7or/g88nOGkiIOOzjW1aMCv2wbODgmNgVmh8crY=
Subject key identifier:   ED:F5:16:A1:ED:84:9E:4C:08:F5:73:58:37:02:C3:51:E5:2B:A2:35
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D70EED4E0FB8C6EA289EC6280
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3c87e828-98d7-3e31-b1f5-342d25a06f0e.roa
Signing time:             Wed 08 Apr 2026 18:53:20 +0000
ROA not before:           Wed 08 Apr 2026 18:53:20 +0000
ROA not after:            Tue 07 Jul 2026 18:53:20 +0000
asID:                     11798
IP address blocks:        144.225.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:ee:d4:e0:fb:8c:6e:a2:89:ec:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr  8 18:53:20 2026 GMT
            Not After : Jul  7 18:53:20 2026 GMT
        Subject: CN=e392af87-79c1-43d1-9d39-d3b4025de034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:34:42:77:6a:43:b5:7f:82:1c:52:3b:f1:93:
                    41:50:aa:97:1f:3a:a2:d6:3d:cd:bd:13:49:f1:50:
                    b1:d6:a8:11:e4:eb:ae:71:ea:02:22:cd:b6:f0:22:
                    8b:fd:be:95:89:fb:66:9e:fb:b4:2d:1a:92:77:e5:
                    f8:58:df:c6:3b:3b:a1:e5:b4:8c:f8:42:14:0e:4d:
                    92:fc:89:20:97:ff:ab:0f:5c:ee:02:1c:19:ff:65:
                    e8:3e:60:b1:f0:63:fc:95:34:2a:55:50:a0:9f:c5:
                    df:6f:02:a2:9f:c3:a7:69:3d:16:35:1e:77:eb:7c:
                    e0:ef:3f:6a:f1:4d:7e:71:f7:88:35:15:5b:f2:2d:
                    e7:17:d1:e0:3a:fb:ac:7b:08:01:30:07:52:21:bb:
                    2e:30:3e:db:65:73:b9:cb:ce:60:42:a7:88:f9:01:
                    ed:41:fc:dd:7b:55:b4:a7:fd:ab:90:66:de:16:7d:
                    f6:74:25:e8:c5:30:d7:31:25:f2:93:44:81:b5:70:
                    f9:a2:1e:73:ce:7b:12:c2:b9:33:6b:50:5c:a7:de:
                    a5:b5:2c:68:e1:c4:4c:a5:75:d3:5b:6e:db:18:6c:
                    03:d1:eb:17:84:11:e0:97:61:e2:d4:7e:3a:9b:fa:
                    9b:a3:dc:a9:2f:10:cc:2d:cb:ad:8f:a7:40:4d:ea:
                    95:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F5:16:A1:ED:84:9E:4C:08:F5:73:58:37:02:C3:51:E5:2B:A2:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3c87e828-98d7-3e31-b1f5-342d25a06f0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:1a:7a:3c:59:18:74:b7:c4:61:37:15:7a:ab:e6:46:f9:79:
         97:b5:b8:29:be:70:66:fc:ff:0f:e9:64:4b:a3:bb:f0:f2:88:
         79:bc:56:85:e4:39:41:da:64:a0:7e:a3:ce:ba:ba:4a:84:46:
         bf:9a:43:32:4a:64:a0:4d:a8:b2:31:ed:d0:a8:57:04:f7:74:
         a6:a4:e2:42:6c:a7:b3:f0:e0:c1:87:f7:7e:90:0a:47:b6:9c:
         7a:40:5a:41:01:0e:46:8a:16:6c:1c:57:8a:9e:49:f1:c2:7a:
         04:16:dd:40:94:c9:9b:58:20:65:37:52:b6:e9:50:45:d7:40:
         c9:6a:64:49:87:e1:5f:6f:de:2e:5e:d4:14:7a:c4:19:e7:52:
         93:a0:f0:33:c6:37:ab:04:db:11:59:96:81:40:1a:0d:b9:05:
         a9:f6:20:49:d9:dd:fb:6b:55:d6:1d:69:52:06:99:b3:fb:43:
         d3:82:f0:71:56:e3:3a:09:ea:92:14:9a:ed:ec:ef:84:ae:74:
         da:1c:1c:1d:c5:8d:d0:6d:0c:f3:08:e2:d1:56:6c:b1:5d:58:
         20:9c:23:6a:5a:de:ce:ec:b8:82:68:dc:4c:70:55:cf:5b:23:
         3c:57:4e:83:8d:f9:53:ea:14:97:5a:72:a5:39:09:28:a0:16:
         9a:c0:e8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 09:28:37 2026 by rpki-client