Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bb5ded8b-e45a-32ee-9f90-1930e3baa571.roa
File:                     bb5ded8b-e45a-32ee-9f90-1930e3baa571.roa (raw, json)
Hash identifier:          q3GXFjrQ6Lk47GZYK/Uyu0IYSkDxcxzRnNrGju15XEQ=
Subject key identifier:   C6:02:38:04:5F:93:E7:E7:A1:41:BC:FB:F8:FB:02:9F:3C:D2:D2:6E
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DE41B657EF09326169C8C9B80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bb5ded8b-e45a-32ee-9f90-1930e3baa571.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     20473
IP address blocks:        144.225.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:65:7e:f0:93:26:16:9c:8c:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=b09f4c16-26eb-4010-9a7f-40dd5f2c1889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a3:62:e6:fe:f8:27:d2:55:1e:de:04:8f:2b:
                    24:56:b6:38:49:2a:43:e9:b6:c4:64:e4:16:f8:9f:
                    5d:86:8c:82:7b:80:21:db:4a:94:dd:36:d6:65:14:
                    24:20:4f:ad:77:31:76:1b:5e:02:c8:d9:16:2e:eb:
                    90:9b:02:1c:ee:03:57:25:10:6a:46:1f:22:85:e0:
                    dd:9e:61:ca:60:b6:e1:0a:cd:b6:b3:95:ef:8b:04:
                    ca:cf:9a:2c:67:23:6e:a0:53:ca:9c:0d:03:21:0d:
                    17:d7:36:9b:ec:1b:23:26:9c:95:aa:a9:48:f9:10:
                    be:36:af:c6:73:5f:6c:94:16:36:c7:54:ae:1a:59:
                    3c:85:9a:8f:3b:47:3c:a0:1f:ee:be:98:a2:85:7c:
                    7a:1c:42:f9:b6:62:19:8b:33:a1:39:31:40:84:59:
                    e4:19:82:28:5e:96:18:c7:53:9c:b8:8f:a2:00:7f:
                    72:2b:91:8b:d3:af:f1:d8:6c:a2:5b:c0:c7:a3:1b:
                    8b:2f:28:4e:ca:c6:d8:7f:76:cd:17:ce:60:35:24:
                    1b:ee:5d:3a:29:a3:d7:7b:e4:5c:cc:3a:1d:d8:8e:
                    e1:84:c5:5f:c1:9d:9d:25:8e:49:5e:83:0a:35:a4:
                    81:e0:a1:a3:97:25:0f:35:d9:1f:a5:2d:77:7f:53:
                    e1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:02:38:04:5F:93:E7:E7:A1:41:BC:FB:F8:FB:02:9F:3C:D2:D2:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bb5ded8b-e45a-32ee-9f90-1930e3baa571.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:b4:1b:b2:a5:65:3b:4d:e6:db:08:e0:76:1e:da:fb:36:05:
         d3:ce:96:f7:1d:af:69:40:c0:f8:d5:02:1a:52:a4:26:6f:d1:
         91:47:5d:af:5c:bd:ed:29:db:63:5f:6f:47:34:91:8c:5d:32:
         79:27:cd:85:a0:17:01:bd:7b:f8:5f:18:9c:1f:b4:3c:76:4d:
         2c:e1:44:03:24:e7:54:85:24:ba:04:5a:24:44:54:3c:84:15:
         5c:f2:d4:10:e4:21:5b:52:60:ab:98:52:f4:de:17:9b:93:6b:
         67:be:47:21:20:27:d0:e3:7f:1b:6a:b5:fc:71:29:69:ee:4b:
         23:77:8a:3b:da:61:8e:8b:c6:b6:01:32:6b:97:5f:ff:ca:1a:
         98:16:b6:70:ce:4e:4e:59:db:6e:15:34:10:6a:38:68:b6:c4:
         f2:6a:84:9e:6e:ee:a3:8e:22:2e:8f:0b:77:31:84:65:b3:1e:
         f9:a8:aa:70:92:83:26:f2:e2:05:53:b7:59:f3:87:81:80:a6:
         ed:28:93:5f:ff:aa:b0:41:11:ee:4d:8b:c1:42:b2:90:3d:77:
         f8:13:e5:74:25:45:46:e9:59:89:18:c7:44:16:38:f1:e7:b3:
         98:d1:31:95:ed:79:93:f5:55:3a:c2:eb:28:98:03:de:9e:51:
         95:ab:b4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:40:39 2026 by rpki-client