Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bda8ce27-56e6-3d97-9663-3771032ea4e9.roa
File:                     bda8ce27-56e6-3d97-9663-3771032ea4e9.roa (raw, json)
Hash identifier:          5iAW8fbhwwS8oUaolOHlCzy0UoWQ3Qtx5xzyc82HHZ8=
Subject key identifier:   DC:2B:5D:49:6C:DC:8C:62:C4:8B:EF:FD:4D:EB:ED:AE:DC:D4:DF:75
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EF2E752BEAC214250CDC86EC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bda8ce27-56e6-3d97-9663-3771032ea4e9.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     812
IP address blocks:        144.225.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:52:be:ac:21:42:50:cd:c8:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=5cd1d242-93a5-40e3-b701-1dd5e301a71e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:78:0e:31:a1:31:f9:e2:6a:27:96:e4:c6:a5:
                    fb:36:fd:a7:ea:bf:0a:80:87:96:dd:11:34:79:f2:
                    70:79:47:d8:01:cb:56:9b:04:bc:68:b8:82:4b:fd:
                    21:1d:f7:0e:73:44:a8:f4:cd:a3:b9:26:9c:3e:b6:
                    97:b3:9c:c4:f7:61:fb:f4:f9:8c:a3:26:2b:c0:39:
                    ac:58:66:97:d1:f1:62:dd:52:85:63:c5:0a:02:cd:
                    bb:b0:54:e7:9c:9c:2e:94:e5:95:95:cb:e2:0e:70:
                    c1:2f:48:a2:75:0b:40:a1:c0:74:c4:a0:35:37:e1:
                    34:b3:98:d9:0e:04:53:ed:96:9f:a5:71:69:f5:d0:
                    d5:68:a2:20:e9:d1:ae:51:02:a8:bb:30:02:07:a0:
                    17:ae:44:e4:2c:1b:b4:ce:4f:19:bd:e9:58:4c:81:
                    ab:dd:5a:65:43:5a:56:19:20:37:73:b0:55:c4:ae:
                    bc:61:5d:40:0c:fb:05:a9:e4:09:67:2f:40:16:70:
                    bd:67:d3:d8:5b:5e:8d:79:af:81:28:5f:93:0a:c6:
                    b3:68:55:c9:5a:7f:f9:2c:6c:bf:dc:6c:81:8c:cc:
                    9f:0a:65:33:5b:1c:4b:0e:32:bc:8a:26:f0:39:bc:
                    71:dd:95:a9:aa:01:1e:f7:16:d6:f4:9d:df:16:31:
                    de:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2B:5D:49:6C:DC:8C:62:C4:8B:EF:FD:4D:EB:ED:AE:DC:D4:DF:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bda8ce27-56e6-3d97-9663-3771032ea4e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:1f:1f:0c:05:fd:5b:fa:d2:ac:b6:c4:6d:4a:de:14:30:b1:
         c4:ae:11:08:c3:3b:38:e9:90:d4:17:7b:78:07:ae:43:e7:3d:
         28:64:95:83:02:0f:95:4d:ec:d5:f8:ac:4a:5f:aa:c7:95:82:
         f0:ad:53:29:d4:02:fe:1e:1a:37:38:57:82:04:1b:f3:25:63:
         d2:f3:fc:de:3a:b5:74:40:f8:d4:ee:97:76:e1:07:2e:49:35:
         29:af:1c:17:20:07:9e:75:a9:90:40:0c:7a:46:ab:00:72:1b:
         50:e4:4d:96:8f:07:1f:ff:50:61:06:63:b6:e2:04:30:25:2c:
         be:cb:dc:b9:e9:5a:91:d5:1c:be:a4:30:ff:e8:1d:5d:12:8e:
         d4:a2:54:f3:be:14:f3:52:eb:13:eb:d0:a9:b8:c3:69:de:ac:
         25:88:50:62:7d:1e:b1:29:d5:23:fc:57:a4:3e:ab:2a:70:f9:
         be:94:40:4f:0f:2d:4f:3d:ef:7c:49:16:09:f7:41:55:14:e7:
         f0:17:e2:ae:1c:2d:c2:df:4f:ee:db:84:e9:ca:9a:a9:45:1c:
         b8:bf:f0:63:70:89:bc:ce:44:08:ac:f0:39:ce:b2:68:34:9b:
         9d:a9:ac:17:09:7a:e5:f1:33:de:a6:ad:2e:77:13:e8:05:83:
         e6:56:50:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 13:17:02 2026 by rpki-client