Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b5f70441-75d1-3796-aab9-2f470b776730.roa
File:                     b5f70441-75d1-3796-aab9-2f470b776730.roa (raw, json)
Hash identifier:          jBTy7eIOI9sQRJEIJlaqdLVBVSlDkfPLWfZ/xmIKYc4=
Subject key identifier:   E0:BA:C3:AF:B5:E8:85:4D:F6:F8:45:F4:B3:5E:7B:B3:6A:C5:D7:B2
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DD26C5D4867FC9BEFA3142FC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b5f70441-75d1-3796-aab9-2f470b776730.roa
Signing time:             Wed 13 May 2026 16:59:40 +0000
ROA not before:           Wed 13 May 2026 16:59:40 +0000
ROA not after:            Tue 11 Aug 2026 16:59:40 +0000
asID:                     212238
IP address blocks:        144.225.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d2:6c:5d:48:67:fc:9b:ef:a3:14:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 13 16:59:40 2026 GMT
            Not After : Aug 11 16:59:40 2026 GMT
        Subject: CN=7abc6187-37e3-4d11-8d62-62457f01e0b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5a:69:82:8e:90:fd:ff:b4:be:fe:06:47:fd:
                    5b:ec:17:5e:13:a2:14:e9:35:cd:2e:f6:8a:5f:a5:
                    de:5b:e3:57:a3:f1:59:a3:90:ee:2a:76:50:e4:7b:
                    33:64:ef:33:95:e7:2b:1b:56:33:93:fd:b9:e9:c9:
                    94:16:3a:6d:af:44:ad:30:3a:39:21:45:2b:19:36:
                    e4:2a:59:e9:0e:58:5d:db:51:f6:21:fa:4a:eb:46:
                    5d:fe:28:9c:b9:ff:b0:11:c3:54:b7:95:4a:2c:e3:
                    08:4d:e4:cf:5d:13:33:0a:c0:8b:b1:5e:02:30:5c:
                    47:20:16:e9:2e:fd:59:39:c4:76:3f:b1:d1:94:d6:
                    88:7b:30:05:31:79:ba:6f:15:05:27:aa:1c:d4:c5:
                    5e:9d:cb:2c:46:da:f9:42:03:85:2a:7a:0b:11:91:
                    00:77:31:a1:9c:f1:fb:fb:40:08:55:4a:b4:eb:8f:
                    bf:62:e9:4b:ab:ec:db:61:75:e8:ea:49:9c:c1:4e:
                    23:33:72:f7:af:1c:28:10:5a:4b:f2:35:d5:35:4e:
                    1f:b2:fd:f8:33:2b:63:a6:9a:48:4b:0c:72:f4:fa:
                    a1:3b:02:05:94:ba:21:b6:25:bc:a5:fe:be:1f:44:
                    92:33:da:1f:d9:bf:84:0f:c6:90:72:97:7e:15:da:
                    e0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BA:C3:AF:B5:E8:85:4D:F6:F8:45:F4:B3:5E:7B:B3:6A:C5:D7:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b5f70441-75d1-3796-aab9-2f470b776730.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:9e:17:9f:95:8d:0a:3b:9f:39:e8:ca:85:b7:29:e6:28:fb:
         ee:e7:4b:f2:c7:82:1f:80:22:66:22:4a:d7:91:ac:23:c9:4e:
         d8:53:d1:7d:c9:71:98:19:51:8c:af:cc:11:0e:70:b8:8a:99:
         93:c4:1d:92:f7:28:a1:ef:a9:92:ff:00:85:90:43:36:d7:73:
         49:73:ca:e3:57:3c:25:2e:25:83:f6:ed:2d:ca:6e:bd:9c:37:
         91:cb:78:5c:99:77:46:0c:ba:4e:63:ed:48:16:5a:25:0e:63:
         5c:be:41:a6:f5:f8:f0:13:29:0f:dc:fd:92:d0:db:a2:73:5d:
         ba:37:c3:39:bc:10:26:d7:36:f5:9a:ea:dc:43:f6:e9:7a:c7:
         85:39:fb:43:2f:57:80:d9:a8:b7:e7:8b:0b:6e:26:d4:69:7e:
         98:a9:65:53:47:fb:10:06:af:3d:88:66:b2:2d:ea:9a:cd:51:
         8a:eb:a6:4c:68:13:e4:24:4d:ed:f3:1b:c7:04:45:c4:ce:bb:
         9e:e7:6d:ad:7f:4f:22:4a:04:f8:2a:46:80:64:64:91:f7:98:
         8c:70:c5:47:1c:85:fa:19:f3:aa:ef:1f:b5:e1:6d:a0:1c:b7:
         30:eb:fb:e3:e2:55:ec:16:5c:4a:b7:03:1d:8f:83:4a:b2:28:
         7e:35:6f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:13:05 2026 by rpki-client