Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a2deb4dd-a6be-3c24-a7fe-0ee0ff53b687.roa
File:                     a2deb4dd-a6be-3c24-a7fe-0ee0ff53b687.roa (raw, json)
Hash identifier:          ca2MRoHmrrpfgS3mccNnYChrWl0zrlG8CvgsoifWrMc=
Subject key identifier:   1A:4D:AF:E5:EA:A3:FE:21:F4:82:5F:32:0F:91:70:83:A4:13:1F:23
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DD26C5D897138C344BADFEDC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a2deb4dd-a6be-3c24-a7fe-0ee0ff53b687.roa
Signing time:             Wed 13 May 2026 16:59:40 +0000
ROA not before:           Wed 13 May 2026 16:59:40 +0000
ROA not after:            Tue 11 Aug 2026 16:59:40 +0000
asID:                     212238
IP address blocks:        144.225.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d2:6c:5d:89:71:38:c3:44:ba:df:ed:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 13 16:59:40 2026 GMT
            Not After : Aug 11 16:59:40 2026 GMT
        Subject: CN=600491a0-d006-4fab-b2ee-429456a60723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e1:e4:41:b7:91:22:37:cc:88:82:8a:d0:1e:
                    21:ab:64:65:67:45:55:d6:6d:c0:62:6f:aa:c4:95:
                    dc:da:66:ad:65:52:04:61:fb:8d:92:56:e4:3d:37:
                    f3:58:bb:f5:84:9a:3c:46:f7:a4:4c:6c:76:71:86:
                    33:77:37:37:62:b7:aa:d8:29:8e:af:43:03:c2:1a:
                    fc:de:05:8f:d5:25:d0:2a:92:e7:e1:1e:60:fe:ac:
                    5c:31:80:2a:4f:58:a4:da:0e:14:d5:94:de:64:bc:
                    02:c6:c9:74:d4:92:01:54:3b:28:44:fe:d3:5f:5f:
                    88:1d:04:21:ab:26:67:48:e5:d3:57:de:3c:c7:6b:
                    58:83:ad:29:c1:09:1c:c5:2a:e2:63:40:b9:df:88:
                    c7:eb:8d:72:ec:6a:46:d9:ab:f7:34:a0:8b:1c:a8:
                    8e:3c:3e:ac:b0:9c:f6:45:85:35:9a:3a:84:16:ff:
                    3d:24:6e:3b:8c:3a:35:26:59:39:1b:4d:90:b1:21:
                    95:ee:90:5a:b4:de:43:24:9c:cf:e4:d8:f1:cd:4e:
                    0a:22:e7:a7:dc:c6:cb:95:44:a0:83:a1:63:5b:4e:
                    e3:e0:bd:60:62:13:aa:8d:79:96:e5:20:02:52:bc:
                    be:84:13:19:1a:2b:ac:5f:de:a9:4e:f2:a4:da:f8:
                    e8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:4D:AF:E5:EA:A3:FE:21:F4:82:5F:32:0F:91:70:83:A4:13:1F:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a2deb4dd-a6be-3c24-a7fe-0ee0ff53b687.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:30:0e:04:ca:2b:41:16:7a:c8:6d:ba:1e:fa:49:57:c7:bb:
         d1:0d:2e:08:09:a0:4e:bc:3f:bb:30:22:aa:3b:57:3f:a7:ff:
         b9:b7:73:a1:8e:1b:36:5c:24:66:49:af:cd:5d:af:64:bc:3c:
         94:39:14:cf:79:30:c0:d2:bf:81:10:5e:3f:28:9f:fb:16:36:
         3f:f4:ed:e8:2e:45:5c:05:1d:f9:03:34:2a:9e:e9:1e:7c:36:
         11:af:8c:19:2b:be:50:43:77:2a:9e:17:31:f4:00:01:fa:6b:
         f3:b0:b6:43:4b:2b:cf:65:61:96:cb:71:9e:fa:33:8b:d7:a5:
         77:fc:d7:39:16:59:31:c7:c2:e6:12:93:21:ab:5a:b0:25:37:
         ff:52:5c:a8:8f:8a:0a:80:91:23:88:c2:d9:c1:19:13:58:66:
         a6:97:c0:10:5e:ca:d4:23:88:c5:8f:5c:38:3a:00:41:e9:56:
         26:ed:39:fa:6b:92:d7:ad:43:c0:e8:f6:ee:a3:8b:39:6f:b2:
         cf:70:c3:97:f5:5e:98:cb:71:34:79:78:99:67:cf:bf:b1:20:
         12:c9:de:09:d9:69:6c:86:ab:c2:ca:a4:97:10:27:c9:cd:24:
         4a:6c:ed:c6:58:ce:98:db:78:0a:7f:b6:4a:98:f8:22:62:29:
         1a:82:2d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:12:57 2026 by rpki-client