Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/97171f5f-c7ea-3503-9023-049e08bfd9a2.roa
File:                     97171f5f-c7ea-3503-9023-049e08bfd9a2.roa (raw, json)
Hash identifier:          XR964r1lZ0BrfYHJ9dQlvas9VIBBqk4P9MnYy7VLUj4=
Subject key identifier:   96:2F:60:B7:FD:BC:3E:82:7E:64:9A:98:E1:64:C8:3A:3C:B9:B2:10
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D0F2065FF8F511D1393F6B9C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/97171f5f-c7ea-3503-9023-049e08bfd9a2.roa
Signing time:             Wed 04 Mar 2026 18:03:59 +0000
ROA not before:           Wed 04 Mar 2026 18:03:59 +0000
ROA not after:            Tue 02 Jun 2026 17:03:59 +0000
asID:                     214025
IP address blocks:        144.225.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0f:20:65:ff:8f:51:1d:13:93:f6:b9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar  4 18:03:59 2026 GMT
            Not After : Jun  2 17:03:59 2026 GMT
        Subject: CN=b2ed4eff-5392-4f5e-8156-0bf7dc339104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d7:bd:e9:35:1b:2d:3a:d9:0b:c3:43:80:c3:
                    66:79:51:20:ca:bf:89:9e:98:2a:8e:f6:9c:e6:c6:
                    cb:bd:8c:42:14:34:bf:2a:3c:e0:92:80:2b:50:22:
                    50:77:dd:eb:07:eb:c7:d7:5f:1f:2c:05:00:c8:79:
                    fc:22:bf:7f:cc:ac:98:27:48:8d:ca:dc:5e:8d:ba:
                    82:13:e2:f9:e5:93:89:fd:f7:18:b6:d4:ed:f5:be:
                    c2:07:3b:b8:de:ab:ca:2d:b4:87:8f:55:65:eb:cf:
                    be:4b:8b:47:50:95:6b:fb:94:dc:53:f9:ff:49:04:
                    26:89:a8:c6:6b:aa:de:d9:6f:60:21:ed:15:d5:8a:
                    30:a6:29:cd:53:cb:ab:3c:69:67:b4:77:25:e4:a1:
                    63:cc:de:51:ff:e1:14:a1:54:dc:11:ae:e3:99:0a:
                    91:22:69:99:59:95:0f:13:9f:73:b8:86:e9:df:87:
                    95:94:cd:c1:5d:59:41:dc:a5:23:c3:cf:cf:cd:d0:
                    18:2c:8b:7c:32:8f:ef:35:71:3c:85:b7:86:c7:91:
                    67:ce:09:b5:3c:d6:47:5e:aa:cb:7d:72:3c:b9:6d:
                    50:68:2f:9f:8f:71:72:54:ac:86:d7:b3:b9:4a:a3:
                    04:2b:08:cf:42:ce:b9:22:bb:bd:75:f3:03:ce:88:
                    e9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2F:60:B7:FD:BC:3E:82:7E:64:9A:98:E1:64:C8:3A:3C:B9:B2:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/97171f5f-c7ea-3503-9023-049e08bfd9a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:d4:4b:81:fb:82:58:7d:09:1a:df:de:ba:d5:91:f0:1e:e6:
         0f:18:df:38:76:5d:2a:ea:ef:d9:f7:ba:3c:36:26:d6:1f:50:
         69:b2:16:50:0d:85:cf:ca:43:be:0d:59:56:f3:72:aa:7e:af:
         99:2d:86:f7:5d:fd:a4:e1:a6:2d:86:6b:ab:9d:d2:3c:cd:dc:
         7f:63:15:e5:cd:74:93:2e:8e:f1:65:e7:60:88:fa:2c:b7:df:
         b6:1d:26:b3:e6:b2:f4:fc:b2:27:af:2f:3b:6c:ab:7c:7c:e6:
         b8:ed:b9:2e:31:38:e8:a1:ab:25:d1:5d:4f:b1:51:a8:85:cf:
         3f:5f:3c:7c:b2:f2:9a:47:a4:61:63:d6:92:f7:24:46:3d:17:
         50:3b:40:ac:fb:3d:21:ea:90:72:62:a5:c4:a1:45:79:dc:4a:
         8d:90:5a:31:27:4b:1c:e2:ae:07:69:b0:88:fe:39:75:11:92:
         b5:a8:d9:43:71:8e:4c:42:53:63:2e:4f:ec:3b:01:e0:ac:23:
         70:53:88:f0:89:08:0e:fe:68:e4:24:60:2e:73:06:b2:6b:a3:
         44:77:06:90:8f:20:5f:eb:8a:74:b8:64:2a:90:5a:ac:8e:85:
         33:9b:0d:e7:6b:78:e1:03:78:2d:8d:76:3d:96:07:f1:7f:d3:
         23:fd:fc:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0PIGX/j1EdE5P2ucAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDMwNDE4MDM1OVoXDTI2MDYwMjE3MDM1OVowLzEtMCsGA1UEAxMk
YjJlZDRlZmYtNTM5Mi00ZjVlLTgxNTYtMGJmN2RjMzM5MTA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9e96TUbLTrZC8NDgMNmeVEgyr+Jnpgqjvac
5sbLvYxCFDS/KjzgkoArUCJQd93rB+vH118fLAUAyHn8Ir9/zKyYJ0iNytxejbqC
E+L55ZOJ/fcYttTt9b7CBzu43qvKLbSHj1Vl68++S4tHUJVr+5TcU/n/SQQmiajG
a6re2W9gIe0V1YowpinNU8urPGlntHcl5KFjzN5R/+EUoVTcEa7jmQqRImmZWZUP
E59zuIbp34eVlM3BXVlB3KUjw8/PzdAYLIt8Mo/vNXE8hbeGx5Fnzgm1PNZHXqrL
fXI8uW1QaC+fj3FyVKyG17O5SqMEKwjPQs65Iru9dfMDzojpRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJYvYLf9vD6CfmSamOFkyDo8ubIQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOTcxNzFmNWYtYzdlYS0z
NTAzLTkwMjMtMDQ5ZTA4YmZkOWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkOFxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJrUS4H7glh9CRrf3rrVkfAe5g8Y3zh2XSrq79n3ujw2JtYfUGmyFlAN
hc/KQ74NWVbzcqp+r5kthvdd/aThpi2Ga6ud0jzN3H9jFeXNdJMujvFl52CI+iy3
37YdJrPmsvT8sievLztsq3x85rjtuS4xOOihqyXRXU+xUaiFzz9fPHyy8ppHpGFj
1pL3JEY9F1A7QKz7PSHqkHJipcShRXncSo2QWjEnSxzirgdpsIj+OXURkrWo2UNx
jkxCU2MuT+w7AeCsI3BTiPCJCA7+aOQkYC5zBrJro0R3BpCPIF/rinS4ZCqQWqyO
hTObDedreOEDeC2Ndj2WB/F/0yP9/Fg=
-----END CERTIFICATE-----
Generated at Thu Mar 5 09:31:22 2026 by rpki-client