Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/925adfaf-f757-3dbc-9807-6d72af207f2f.roa
File:                     925adfaf-f757-3dbc-9807-6d72af207f2f.roa (raw, json)
Hash identifier:          tOztDJyKqEHMe8XI89Ia1rBjBspxJ4ukIgARlEbpXUw=
Subject key identifier:   57:40:3B:4F:78:96:1D:82:70:92:D0:F1:F4:5F:14:81:9F:C3:6A:3B
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EF2E77E0FE03A3C1EFC346310
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/925adfaf-f757-3dbc-9807-6d72af207f2f.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     1257
IP address blocks:        144.225.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:7e:0f:e0:3a:3c:1e:fc:34:63:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=e16f4321-b2dc-428a-8ffc-8d94fa6671ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:26:8e:ff:43:c2:96:9e:a3:bb:6a:c5:a0:f8:
                    0d:16:52:eb:bd:c7:98:4d:3c:be:40:40:cf:23:db:
                    83:3c:29:f0:5b:9d:8f:da:de:0a:07:2d:2e:9d:cb:
                    d5:7b:a1:ec:a7:c1:08:ec:42:17:da:5e:c2:76:1d:
                    43:7b:3d:27:ff:e8:f3:b5:fa:75:f8:aa:d0:55:00:
                    a9:b0:33:98:a3:5a:f3:95:e8:32:61:27:8f:7f:f1:
                    2d:c7:ac:7b:76:14:4f:c7:44:5e:a9:d1:47:04:38:
                    48:9d:92:df:c7:63:bd:f4:97:07:28:86:76:57:3e:
                    c5:2f:be:64:0f:cd:4d:ef:74:5c:57:c2:7a:15:31:
                    aa:4a:bd:bc:c3:5a:ea:46:e7:af:08:07:42:c6:40:
                    6a:bd:42:0d:e6:16:ba:d7:0b:39:0d:75:e3:c9:6f:
                    6f:02:14:4a:b9:bd:4a:ea:4b:52:79:d6:0e:3a:da:
                    b8:9a:8c:29:fd:db:14:71:e5:30:a3:90:4f:3e:a9:
                    99:9e:61:e3:fb:d7:59:23:cd:50:de:ca:0d:89:19:
                    bf:54:28:13:07:c7:b1:17:d4:06:ba:4c:f3:74:ef:
                    99:b4:9e:16:22:4a:39:65:37:26:d9:f5:23:0f:71:
                    57:39:08:24:21:39:5d:06:24:05:73:83:77:ac:01:
                    0c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:40:3B:4F:78:96:1D:82:70:92:D0:F1:F4:5F:14:81:9F:C3:6A:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/925adfaf-f757-3dbc-9807-6d72af207f2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:b2:39:a0:7c:bb:64:d1:38:12:1a:42:7f:71:fe:0a:c1:99:
         a9:eb:5d:4e:09:b3:80:8e:51:ec:77:48:a2:32:43:49:12:93:
         81:52:0c:97:97:19:a5:0f:40:68:64:5d:fb:1a:53:cb:49:73:
         b6:1a:3a:89:da:e2:52:93:a7:9d:4f:2d:60:f6:d0:6d:a8:af:
         c5:2f:3a:b0:7e:9d:dd:ab:7a:cc:79:6b:e2:af:b1:0b:5b:6b:
         7e:07:d0:66:a1:45:7d:d0:b7:52:ca:6e:4c:fa:78:a7:a7:c5:
         e2:27:96:4f:c4:08:35:dd:a3:cf:25:9d:0a:7a:62:ad:f5:b9:
         01:f9:61:7f:2f:37:32:e1:d3:9c:c1:4c:2b:61:13:e4:ac:8b:
         5c:29:07:ca:47:85:2a:60:7b:1c:06:b7:f4:a9:6d:ce:2f:86:
         2c:21:4f:9e:2b:24:a3:af:9f:9a:6f:f2:a1:83:6d:65:40:9e:
         e3:df:08:5f:d3:d9:d0:9c:a1:c9:be:d9:b0:5b:86:bd:f3:50:
         e1:d1:db:4a:31:dd:f1:de:ca:55:45:b4:7e:34:9d:29:4e:d9:
         85:35:02:98:c9:e4:38:66:86:1c:92:ee:44:49:97:46:ba:6d:
         ce:b7:35:ee:ac:df:78:9c:96:34:90:c1:55:aa:01:36:1b:52:
         a3:2d:03:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y534P4Do8Hvw0YxAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk
ZTE2ZjQzMjEtYjJkYy00MjhhLThmZmMtOGQ5NGZhNjY3MWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyaO/0PClp6ju2rFoPgNFlLrvceYTTy+QEDP
I9uDPCnwW52P2t4KBy0uncvVe6Hsp8EI7EIX2l7Cdh1Dez0n/+jztfp1+KrQVQCp
sDOYo1rzlegyYSePf/Etx6x7dhRPx0ReqdFHBDhInZLfx2O99JcHKIZ2Vz7FL75k
D81N73RcV8J6FTGqSr28w1rqRuevCAdCxkBqvUIN5ha61ws5DXXjyW9vAhRKub1K
6ktSedYOOtq4mowp/dsUceUwo5BPPqmZnmHj+9dZI81Q3soNiRm/VCgTB8exF9QG
ukzzdO+ZtJ4WIko5ZTcm2fUjD3FXOQgkITldBiQFc4N3rAEM5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFdAO094lh2CcJLQ8fRfFIGfw2o7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOTI1YWRmYWYtZjc1Ny0z
ZGJjLTk4MDctNmQ3MmFmMjA3ZjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkOHYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIeyOaB8u2TROBIaQn9x/grBmanrXU4Js4COUex3SKIyQ0kSk4FSDJeX
GaUPQGhkXfsaU8tJc7YaOona4lKTp51PLWD20G2or8UvOrB+nd2resx5a+KvsQtb
a34H0GahRX3Qt1LKbkz6eKenxeInlk/ECDXdo88lnQp6Yq31uQH5YX8vNzLh05zB
TCthE+Ssi1wpB8pHhSpgexwGt/Spbc4vhiwhT54rJKOvn5pv8qGDbWVAnuPfCF/T
2dCcocm+2bBbhr3zUOHR20ox3fHeylVFtH40nSlO2YU1ApjJ5DhmhhyS7kRJl0a6
bc63Ne6s33icljSQwVWqATYbUqMtA0A=
-----END CERTIFICATE-----
Generated at Thu Aug 27 17:10:00 2026 by rpki-client