Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/91571cb4-259a-34a2-b772-fd9e2bb9bcfd.roa
File:                     91571cb4-259a-34a2-b772-fd9e2bb9bcfd.roa (raw, json)
Hash identifier:          idFjNMachVXPjRswrXvYuIUE9K9phBf9YShXcbjMD4Q=
Subject key identifier:   8F:62:4D:FB:82:39:05:0D:82:F5:02:89:24:BF:17:CE:13:82:09:CF
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EB57C682AA935183CD07CF8C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/91571cb4-259a-34a2-b772-fd9e2bb9bcfd.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     2914
IP address blocks:        144.225.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:68:2a:a9:35:18:3c:d0:7c:f8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=6cc53549-2490-4e7f-b053-56cab0d403de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d1:45:3a:fd:62:9a:78:8c:cc:ee:d4:bc:b5:
                    a1:ee:73:0f:b0:ab:06:a8:9f:28:96:38:a5:cf:e1:
                    8d:98:6d:73:9b:91:13:45:50:9d:7c:58:3b:2b:eb:
                    93:5d:1c:18:b5:fe:ba:2c:9e:99:d1:bd:36:c6:7f:
                    87:54:b4:59:d0:7e:09:bd:03:74:66:00:18:d1:4e:
                    b9:0e:05:4d:8e:3b:9f:0e:a4:a7:2a:2e:6d:75:43:
                    fa:b5:b3:94:eb:aa:f8:71:3d:bd:49:9f:f4:78:26:
                    a9:cd:28:7d:42:fc:20:82:21:d8:63:e2:e4:11:76:
                    f8:be:cb:a2:6e:2f:94:66:eb:72:5d:f1:9a:33:ab:
                    96:bf:0b:3b:af:7d:36:06:72:3b:d0:1b:a0:06:54:
                    70:0e:0f:81:f8:f5:56:58:44:b4:1c:e5:c5:05:7d:
                    2d:37:3c:a9:87:15:67:a7:c7:87:e5:68:ec:06:0e:
                    9b:91:09:4d:31:9e:36:d6:9e:26:79:11:1c:56:68:
                    b0:ad:06:14:26:60:d7:7c:d6:15:6f:f4:25:d9:a8:
                    9c:4b:82:ef:95:46:fa:0b:20:6f:cc:dd:ca:96:0a:
                    5f:95:e2:5c:c7:12:e5:f5:18:3a:bb:fd:30:b5:1d:
                    79:27:49:0a:5a:c3:37:95:6a:78:1b:fa:a6:92:0b:
                    81:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:62:4D:FB:82:39:05:0D:82:F5:02:89:24:BF:17:CE:13:82:09:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/91571cb4-259a-34a2-b772-fd9e2bb9bcfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:74:b2:ab:92:a1:bc:e5:29:72:b8:d6:08:54:73:f0:20:1a:
         2e:fd:29:13:47:2f:8a:7b:c7:1b:53:2e:22:88:b3:cb:78:85:
         54:82:1c:28:fb:46:3b:5b:fa:4b:06:ea:dc:8f:d4:ea:0b:63:
         89:34:cb:ff:4d:c7:2e:84:55:bf:3b:fe:39:5d:f9:08:8e:f9:
         c3:57:38:47:ee:95:5c:52:f7:a8:6b:a4:d4:4a:f8:9a:1e:86:
         d7:b1:5a:a5:b2:8d:48:ae:30:b9:09:bc:04:77:0c:27:88:d4:
         39:c5:08:c8:c8:ec:40:5b:19:f2:4c:6c:b4:cc:ef:4f:84:59:
         90:7d:d6:3b:9f:94:f8:48:b2:38:af:45:0b:35:d1:16:20:c1:
         02:db:42:41:ef:d7:a6:dc:30:95:03:3f:7b:fd:e4:a7:c0:91:
         c1:a5:63:a2:4f:8f:51:99:ef:c7:b4:18:bf:a4:56:32:4f:bc:
         4e:a1:3d:43:b5:0f:c2:58:b3:f2:95:5b:c5:7d:36:a5:80:89:
         3f:da:4d:7c:c5:c3:17:28:fb:d7:d3:63:8f:a1:13:85:37:a7:
         4f:41:39:32:32:e4:e8:41:14:c2:03:50:ca:99:35:2a:26:2c:
         f5:4e:10:3e:5b:7b:41:87:29:dd:c0:bd:5f:1b:01:01:46:b8:
         6e:1a:53:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:05:00 2026 by rpki-client