Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9ccca889-61be-3aaf-b61b-dd8396f49840.roa
File:                     9ccca889-61be-3aaf-b61b-dd8396f49840.roa (raw, json)
Hash identifier:          mq4YgMeQaY2c8wr01GpGd9WKn2n+jU+19Emn9HueqDE=
Subject key identifier:   0A:4A:FA:FC:27:D3:A6:7A:5C:B7:67:EA:54:4A:A1:28:C5:DB:2F:C3
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EF4E7FCC0BC4BA06B56D44BC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9ccca889-61be-3aaf-b61b-dd8396f49840.roa
Signing time:             Tue 25 Aug 2026 18:13:11 +0000
ROA not before:           Tue 25 Aug 2026 18:13:11 +0000
ROA not after:            Mon 23 Nov 2026 19:13:11 +0000
asID:                     3257
IP address blocks:        144.225.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:e7:fc:c0:bc:4b:a0:6b:56:d4:4b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 25 18:13:11 2026 GMT
            Not After : Nov 23 19:13:11 2026 GMT
        Subject: CN=ae0b67ab-01db-4875-867a-c0cc8537e453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2d:10:ee:84:c8:4a:36:c0:92:6d:2c:f6:33:
                    a5:4c:c9:aa:f6:02:1d:be:a7:2d:70:66:12:e4:82:
                    94:a0:30:a2:12:9e:7f:90:fb:6d:d5:44:3f:ff:2f:
                    6a:86:91:76:fe:c4:38:2e:db:55:22:f0:5a:97:2c:
                    e1:13:bf:d9:3e:73:0c:6c:1d:81:98:b3:ec:a6:7f:
                    06:8b:db:f8:bd:6a:c1:5d:7d:3b:33:93:fc:39:62:
                    d6:48:38:55:a8:1a:26:3b:9c:d4:b0:f5:36:76:df:
                    a5:82:c0:d0:1d:85:ca:37:49:ee:99:98:e4:a8:0c:
                    21:74:2e:f2:84:ad:92:09:bc:be:d3:b2:3d:77:cc:
                    b7:81:84:22:c3:dd:53:0b:7a:11:79:ba:6b:b9:0e:
                    b7:26:49:b3:65:b3:59:89:a0:13:41:50:70:b5:a3:
                    40:3b:08:9f:93:b2:84:f9:6a:53:92:7c:96:f4:c9:
                    13:11:5c:7c:5a:97:c9:4e:ce:11:62:3c:e6:fa:1c:
                    34:b3:60:d5:1c:9a:b3:f0:af:0f:56:f2:3c:9d:f9:
                    d2:d7:35:56:91:d5:67:11:ce:12:f1:19:5b:0f:c4:
                    88:ad:48:17:74:fc:e1:23:af:69:30:6e:6e:eb:9f:
                    18:45:d7:3e:98:d8:32:7a:c6:11:d6:0d:a2:67:1b:
                    34:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4A:FA:FC:27:D3:A6:7A:5C:B7:67:EA:54:4A:A1:28:C5:DB:2F:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9ccca889-61be-3aaf-b61b-dd8396f49840.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:fc:22:8c:98:62:44:f0:ba:8a:d1:19:1b:c1:61:59:47:ad:
         ab:78:69:74:04:c7:fe:c0:3e:bb:1b:8d:c5:b7:d9:a9:81:94:
         e4:a7:67:fe:e9:ce:b0:cf:c0:4c:9b:0d:d1:52:19:cf:82:1a:
         0d:58:21:ae:68:05:ce:21:e8:23:c5:5b:bf:e2:39:33:3a:82:
         b7:57:78:11:fb:57:64:20:40:59:84:b0:ce:a2:5a:2f:5f:79:
         10:fc:18:96:35:f1:42:3b:11:9e:39:19:a8:53:a9:f5:14:da:
         72:92:f0:9e:31:39:ff:1c:1a:2c:f3:10:b9:47:f2:18:15:2f:
         9f:0a:23:d6:98:f8:88:ee:1f:60:bb:57:df:85:2a:54:05:cc:
         84:ed:5a:4a:8a:ec:8b:fb:f9:ca:22:00:8d:48:a8:6c:73:fc:
         44:b1:5c:72:ea:10:8f:31:57:6a:c5:ce:97:9b:0c:a5:dd:62:
         83:29:93:7b:60:1f:c1:d7:eb:ee:23:41:fc:ef:49:17:9b:4e:
         ff:d2:22:2c:9f:e7:29:26:86:be:a9:4c:0d:67:56:50:a6:1d:
         ce:21:1a:46:53:db:0f:77:a2:38:16:b2:f7:28:ec:c5:f5:f9:
         a8:42:18:bf:f7:5f:93:be:4b:e3:56:0e:3c:73:d2:e3:77:82:
         86:46:61:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE705/zAvEuga1bUS8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDgyNTE4MTMxMVoXDTI2MTEyMzE5MTMxMVowLzEtMCsGA1UEAxMk
YWUwYjY3YWItMDFkYi00ODc1LTg2N2EtYzBjYzg1MzdlNDUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxi0Q7oTISjbAkm0s9jOlTMmq9gIdvqctcGYS
5IKUoDCiEp5/kPtt1UQ//y9qhpF2/sQ4LttVIvBalyzhE7/ZPnMMbB2BmLPspn8G
i9v4vWrBXX07M5P8OWLWSDhVqBomO5zUsPU2dt+lgsDQHYXKN0numZjkqAwhdC7y
hK2SCby+07I9d8y3gYQiw91TC3oRebpruQ63JkmzZbNZiaATQVBwtaNAOwifk7KE
+WpTknyW9MkTEVx8WpfJTs4RYjzm+hw0s2DVHJqz8K8PVvI8nfnS1zVWkdVnEc4S
8RlbD8SIrUgXdPzhI69pMG5u658YRdc+mNgyesYR1g2iZxs0QwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFApK+vwn06Z6XLdn6lRKoSjF2y/DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOWNjY2E4ODktNjFiZS0z
YWFmLWI2MWItZGQ4Mzk2ZjQ5ODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkOHzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACH8IoyYYkTwuorRGRvBYVlHrat4aXQEx/7APrsbjcW32amBlOSnZ/7p
zrDPwEybDdFSGc+CGg1YIa5oBc4h6CPFW7/iOTM6grdXeBH7V2QgQFmEsM6iWi9f
eRD8GJY18UI7EZ45GahTqfUU2nKS8J4xOf8cGizzELlH8hgVL58KI9aY+IjuH2C7
V9+FKlQFzITtWkqK7Iv7+coiAI1IqGxz/ESxXHLqEI8xV2rFzpebDKXdYoMpk3tg
H8HX6+4jQfzvSRebTv/SIiyf5ykmhr6pTA1nVlCmHc4hGkZT2w93ojgWsvco7MX1
+ahCGL/3X5O+S+NWDjxz0uN3goZGYTg=
-----END CERTIFICATE-----
Generated at Thu Aug 27 15:54:34 2026 by rpki-client