Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/89c0b5a0-f9e0-3e3d-abbb-e9a59f2ad359.roa
File:                     89c0b5a0-f9e0-3e3d-abbb-e9a59f2ad359.roa (raw, json)
Hash identifier:          rLd2anxX4V97BRUy7srSK6LYmDQFgK8yN6GBlH8+eMg=
Subject key identifier:   10:14:FE:ED:42:03:10:AD:07:84:2D:6F:56:7F:E0:BF:1F:DF:E7:47
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E59AFB3ACB99831BBC91D91C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/89c0b5a0-f9e0-3e3d-abbb-e9a59f2ad359.roa
Signing time:             Wed 01 Jul 2026 03:49:28 +0000
ROA not before:           Wed 01 Jul 2026 03:49:28 +0000
ROA not after:            Tue 29 Sep 2026 03:49:28 +0000
asID:                     13335
IP address blocks:        144.225.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:59:af:b3:ac:b9:98:31:bb:c9:1d:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  1 03:49:28 2026 GMT
            Not After : Sep 29 03:49:28 2026 GMT
        Subject: CN=92ab599e-b406-4508-9d2c-f5bbd82b32db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:b6:e0:e2:b0:40:4e:32:4a:d9:f5:f3:74:fe:
                    1d:e7:55:11:48:18:cd:6e:33:e5:c0:10:45:82:58:
                    93:35:48:ac:e7:33:91:57:1b:2f:89:d4:e4:b0:05:
                    d2:c7:fb:40:c0:9f:f2:5f:e4:af:e7:2b:92:27:22:
                    7f:84:0e:f7:53:52:9c:87:4a:c3:91:c1:d5:24:b0:
                    18:aa:f0:ea:8d:b2:52:03:f3:a5:ca:2f:29:e1:2a:
                    97:81:f7:18:f8:59:47:0c:05:fa:ab:57:fd:22:68:
                    12:ec:6c:ff:a4:a9:38:6c:60:26:81:0a:31:1e:b4:
                    6c:60:9e:99:d5:9c:33:0b:30:c0:d8:12:11:16:27:
                    12:93:7e:50:51:d4:e1:3a:00:f3:1c:8a:86:e8:76:
                    30:ee:bf:70:54:01:ce:d7:d6:74:2c:42:e5:52:76:
                    70:6f:b0:1c:f3:93:ab:63:c7:d6:a0:c5:42:31:10:
                    57:f9:fe:b5:ce:8f:4d:a8:13:a5:6b:1a:fb:93:02:
                    ec:e0:d9:75:2e:23:95:1e:dd:f8:bd:e1:91:74:c7:
                    78:00:38:06:a5:b4:d1:c4:65:7f:62:a2:be:97:a5:
                    98:9d:32:f4:22:af:2b:af:94:13:ce:8f:85:41:77:
                    87:b2:bb:cd:c9:9f:22:08:ab:58:3b:4c:4a:87:71:
                    ca:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:14:FE:ED:42:03:10:AD:07:84:2D:6F:56:7F:E0:BF:1F:DF:E7:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/89c0b5a0-f9e0-3e3d-abbb-e9a59f2ad359.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:53:e4:16:bb:dc:cf:62:71:57:09:44:3b:60:98:08:c7:d0:
         b0:72:c5:f3:aa:b4:87:38:e2:e6:8f:c7:0e:5e:46:07:6d:0e:
         1c:ec:6f:57:aa:2d:38:d5:61:45:05:e5:17:91:8b:e4:27:41:
         dd:8c:58:44:db:5d:f6:f4:f9:b8:46:96:aa:68:f8:b6:f0:53:
         7c:cc:55:9e:bc:9f:d9:cc:b4:39:e1:b4:88:21:97:b5:ee:f9:
         c9:f8:e9:dd:e5:1c:e1:ea:3c:ce:a3:39:5c:3e:44:d6:c2:3a:
         bc:71:d9:aa:28:bc:b7:d9:ae:fd:f0:a6:97:d1:8d:a1:7e:7a:
         24:6c:b7:24:55:36:6b:3b:ba:67:1f:36:89:6e:8a:00:97:be:
         31:95:37:17:1b:d1:20:d5:a5:6c:34:e9:34:43:96:e3:da:24:
         a8:43:f5:e1:a4:9d:c5:66:9b:cc:f6:48:18:65:fb:76:58:18:
         61:fc:59:81:b6:87:52:6b:82:b5:05:6d:24:db:76:b2:45:cf:
         ff:c3:fc:72:64:1d:f6:3a:53:84:e4:95:70:48:39:cd:ae:07:
         5f:6c:c2:b1:ec:50:06:5a:b2:77:9a:f3:0e:4e:3d:e4:7a:63:
         5d:89:11:77:48:2e:f7:db:b1:b6:3c:85:b5:a8:6e:f9:63:2a:
         e2:02:ba:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:33:12 2026 by rpki-client