Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cceeebf9-fd1e-3bb5-bbb2-b5890baa4534.roa
File:                     cceeebf9-fd1e-3bb5-bbb2-b5890baa4534.roa (raw, json)
Hash identifier:          +jdPt2+YeYHNbl9YZiRT531eGIUbSCr6MtVKfLRe28A=
Subject key identifier:   68:A8:AF:92:C6:CD:D1:14:7A:E5:3D:F2:66:6D:AB:E5:1E:26:5C:12
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DF2E94D22421724FB410DC780
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cceeebf9-fd1e-3bb5-bbb2-b5890baa4534.roa
Signing time:             Mon 25 May 2026 08:17:16 +0000
ROA not before:           Mon 25 May 2026 08:17:16 +0000
ROA not after:            Sun 23 Aug 2026 08:17:16 +0000
asID:                     834
IP address blocks:        144.225.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:e9:4d:22:42:17:24:fb:41:0d:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 25 08:17:16 2026 GMT
            Not After : Aug 23 08:17:16 2026 GMT
        Subject: CN=7c4cdd46-21dc-4899-9a1c-14a22c9a55c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dd:7d:75:0a:75:8e:45:7f:d7:ee:4e:9f:aa:
                    d6:b5:9c:f6:61:f8:a3:41:84:80:e8:99:7f:51:de:
                    2c:37:2a:03:84:f0:1c:6e:85:a6:c7:d4:f9:78:39:
                    4e:8f:d0:46:c1:fc:2c:38:12:37:59:91:3f:c1:c2:
                    ca:7d:1d:6f:60:0b:a1:97:a4:b9:c0:12:ec:b0:a3:
                    55:ee:6b:b4:73:07:53:13:e7:c4:71:8d:b7:82:0e:
                    91:6e:0c:c6:64:86:24:d0:cd:4f:c7:82:12:56:a6:
                    72:6c:9b:7c:89:f2:15:7e:6e:9e:c7:14:b8:5c:ba:
                    40:d1:e5:8f:ed:c8:d0:da:2e:98:d3:57:a2:7f:20:
                    7e:a4:47:0e:e0:ef:ea:0b:10:14:25:ca:a6:a6:00:
                    9c:b5:0c:4d:3b:ef:55:cb:0c:b0:bf:cb:1a:42:c1:
                    5b:df:fd:19:8c:a4:1f:04:b6:b1:7a:cd:34:5d:4c:
                    69:0b:3b:0b:0b:7d:27:0c:7b:7e:7a:3b:6d:bc:fb:
                    c6:fd:54:e8:85:6f:fc:3a:09:3a:ed:03:dd:7a:fc:
                    29:9b:4d:ef:82:d7:f1:ff:2b:26:2d:e4:f2:d6:ae:
                    8f:88:5e:77:e4:1a:16:5e:c6:d2:e9:c2:ae:bc:42:
                    81:35:0b:fe:03:c2:84:8d:3e:2d:15:c5:99:31:f0:
                    25:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A8:AF:92:C6:CD:D1:14:7A:E5:3D:F2:66:6D:AB:E5:1E:26:5C:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cceeebf9-fd1e-3bb5-bbb2-b5890baa4534.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:99:7b:1d:0e:d5:89:ca:84:76:34:e4:ee:d1:9f:5d:2a:ad:
         ea:57:34:ef:00:4c:1d:ac:d5:77:84:83:a3:7b:01:f5:a9:13:
         e9:a2:7b:01:2a:81:1c:5c:12:a0:9c:da:36:20:4e:ca:2f:f6:
         fa:85:09:6a:b9:4f:99:44:af:6d:8f:4e:98:82:6a:de:b6:c6:
         1a:9a:7d:cb:fc:90:3b:54:3a:41:5c:2f:99:a8:66:13:0b:ad:
         67:73:bf:56:9c:2d:7a:d8:c2:9a:c2:74:fa:35:9e:cf:7c:2f:
         61:5c:9a:81:93:9f:ea:28:43:20:68:69:38:a8:4f:a4:1a:78:
         87:e3:bc:26:3a:b1:ec:5f:8b:8a:b2:cf:13:35:59:7c:7a:0c:
         71:49:85:4b:96:81:7a:87:7e:94:98:da:30:b1:f6:87:01:9c:
         16:1f:88:4e:6b:8f:df:ec:24:da:e4:db:c3:f9:55:b1:23:da:
         3a:e1:8d:7f:d6:e7:26:80:3b:23:11:ee:ef:c1:99:1b:b3:ef:
         a8:fb:24:a7:91:fa:e4:ee:82:7f:10:b9:44:dd:2e:a9:b4:eb:
         55:a9:e8:18:4f:ad:05:ef:4e:2e:a2:85:3b:3c:82:4c:b6:16:
         52:b7:dc:c6:6b:53:51:a3:ac:87:6e:71:d1:a7:2f:59:24:b9:
         af:6c:95:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 17:12:59 2026 by rpki-client