Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c04c0b86-b544-3829-bbf5-b1163252defd.roa
File:                     c04c0b86-b544-3829-bbf5-b1163252defd.roa (raw, json)
Hash identifier:          G+1LQuOdC1mv56jne9zHRnZjeVst+Z0n7uLbRo7B6I8=
Subject key identifier:   43:81:CE:EE:09:F8:FE:E3:F2:78:22:5F:49:9E:49:01:19:03:CC:43
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E6937CC63A6E9F143F77F2240
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c04c0b86-b544-3829-bbf5-b1163252defd.roa
Signing time:             Mon 06 Jul 2026 17:20:49 +0000
ROA not before:           Mon 06 Jul 2026 17:20:49 +0000
ROA not after:            Sun 04 Oct 2026 17:20:49 +0000
asID:                     834
IP address blocks:        144.225.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:69:37:cc:63:a6:e9:f1:43:f7:7f:22:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  6 17:20:49 2026 GMT
            Not After : Oct  4 17:20:49 2026 GMT
        Subject: CN=39150ab5-0d1c-43c9-b138-b97a880be316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:15:00:0b:fe:61:0a:00:ab:d2:51:16:86:a3:
                    54:38:57:d6:4a:7b:6f:36:8b:e6:72:ef:46:f7:6d:
                    0c:a3:b2:ec:15:4b:1d:94:ab:62:46:ea:2c:e4:af:
                    a0:e8:c6:bf:a4:86:c8:cc:b1:d4:cb:1a:20:82:3a:
                    98:35:8b:54:fe:63:89:ba:61:e7:79:8b:56:4a:3e:
                    80:c5:58:d1:d4:96:04:bd:24:57:fd:c1:68:29:42:
                    db:0a:94:16:b2:50:dc:a6:00:53:bf:65:f4:a3:3f:
                    42:1d:8e:25:4b:65:97:f0:95:cf:6b:a7:cb:ea:4d:
                    6f:0a:e7:5a:02:2e:5f:3e:36:ac:4f:af:42:6e:ae:
                    d8:b2:82:76:81:97:9c:91:73:60:4e:c2:61:e7:dc:
                    45:9d:a6:69:2f:2b:b2:25:ce:68:72:d2:29:df:66:
                    66:2b:89:97:49:51:95:b8:a5:f5:67:e3:a1:83:ee:
                    52:d6:f3:18:01:2a:ec:b3:8e:c0:48:89:9f:c0:f9:
                    eb:8a:3c:53:b4:d6:47:4c:d0:58:06:25:09:5b:72:
                    50:1e:ec:fe:e9:d3:16:27:57:35:0d:c6:fd:92:f4:
                    2b:8e:3b:8f:99:ca:05:76:15:f6:38:9c:08:0d:65:
                    85:2e:70:61:8c:22:6d:a9:2b:ed:e5:b8:73:dc:fa:
                    2c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:81:CE:EE:09:F8:FE:E3:F2:78:22:5F:49:9E:49:01:19:03:CC:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c04c0b86-b544-3829-bbf5-b1163252defd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:f1:4b:66:20:9c:f9:94:dd:1f:4d:81:f3:7b:e4:0f:db:c6:
         b8:bb:5b:bc:35:13:82:39:83:7c:a1:ab:85:df:5a:0a:7c:e9:
         1f:50:c6:f8:af:fb:52:53:8b:57:d0:60:c7:30:0b:2f:5b:3d:
         a6:f4:fd:71:46:bf:e3:0f:03:59:c2:c9:80:64:3c:e9:f5:bc:
         3f:ac:41:2a:71:5b:e6:9a:1e:7c:8e:55:b8:0b:fb:3c:1e:1c:
         e3:ce:d7:5e:b0:a4:23:c9:ee:40:44:6b:1a:f6:00:51:99:45:
         1d:d6:49:05:02:dc:f0:d6:ff:79:52:25:17:be:96:3b:dd:8d:
         31:49:1e:90:0c:b3:d2:8a:4d:40:00:bc:c0:6f:ab:e7:33:ba:
         2c:0f:51:cd:29:0f:44:94:f3:d1:21:6c:dc:b7:1b:46:56:c2:
         69:7a:2e:87:50:50:2e:d0:cd:d8:c0:88:a2:a0:21:40:67:ee:
         60:b0:da:c6:c0:d8:0d:bd:75:df:5f:4e:3d:e3:47:55:70:23:
         d8:ec:cf:6d:b0:c9:dd:2c:32:13:33:b5:78:23:3b:15:7b:7f:
         14:67:26:59:be:f2:45:24:42:e5:8b:f6:c5:6d:a5:ba:de:d9:
         fb:71:c9:d2:f0:ba:04:2f:0f:cc:75:16:c7:c7:c6:60:f4:14:
         5b:33:a9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:32:59 2026 by rpki-client