Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d68d5aed-3e2f-39b1-89a4-0ebbc4c50abd.roa
File:                     d68d5aed-3e2f-39b1-89a4-0ebbc4c50abd.roa (raw, json)
Hash identifier:          M2oFA1S6W8qwg4SIH5N7JKcAjLr1OXEn2wRf+Rt/qCo=
Subject key identifier:   60:23:3F:E7:CD:FE:D9:BB:52:CD:89:24:48:F5:99:17:0F:23:C2:66
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584F7BB2F3947899DCDA0EFF8C18
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d68d5aed-3e2f-39b1-89a4-0ebbc4c50abd.roa
Signing time:             Tue 13 Oct 2026 01:00:14 +0000
ROA not before:           Tue 13 Oct 2026 01:00:14 +0000
ROA not after:            Mon 11 Jan 2027 02:00:14 +0000
asID:                     9009
IP address blocks:        144.225.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:b2:f3:94:78:99:dc:da:0e:ff:8c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 13 01:00:14 2026 GMT
            Not After : Jan 11 02:00:14 2027 GMT
        Subject: CN=93027ce0-b9f0-4fc3-8db6-006ca0adffb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:68:d6:9b:f5:1e:2f:21:2b:76:2d:74:aa:99:
                    51:c5:fe:5c:57:a2:b3:b5:c5:72:0b:84:e6:05:4a:
                    2c:f9:c6:29:a1:7d:15:d3:7e:d3:52:3f:a4:d1:85:
                    13:b6:3f:d1:23:31:92:d0:c1:f7:0d:33:b2:57:8f:
                    91:a3:13:c0:e0:43:26:62:5d:df:d0:6e:65:8f:0e:
                    af:58:c8:4b:e6:05:89:59:c4:eb:8e:61:13:a6:cd:
                    00:86:ee:d0:17:4d:5f:a2:fd:60:e6:1e:3f:2e:95:
                    30:77:6b:91:64:14:f1:bc:93:3c:d1:cc:9c:4a:c7:
                    ed:10:2c:21:b0:1b:4c:f6:0e:cb:29:b9:ff:88:50:
                    3f:1f:92:d0:f8:26:03:1b:28:40:61:9a:dd:97:bb:
                    14:7b:28:42:85:d9:f9:cd:af:90:b9:3a:30:c9:5f:
                    4f:33:eb:d8:37:cd:6e:7e:df:fc:67:78:df:64:c3:
                    ae:26:6d:83:50:4e:b2:8f:1c:ec:a4:f7:fd:1a:36:
                    ae:8b:6e:f5:c0:b2:6e:4d:06:02:34:2f:5b:e3:fe:
                    bf:eb:cd:08:5a:7f:d9:56:34:d5:ae:01:7a:2f:1c:
                    a1:ff:6b:74:fa:b4:19:e6:c8:79:5a:67:e9:03:72:
                    9e:be:07:26:57:1f:e2:4a:81:50:8b:bc:50:be:c6:
                    b5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:23:3F:E7:CD:FE:D9:BB:52:CD:89:24:48:F5:99:17:0F:23:C2:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d68d5aed-3e2f-39b1-89a4-0ebbc4c50abd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:13:52:53:35:e0:bf:91:96:51:00:f6:c6:82:41:2c:24:ce:
         80:f1:b9:41:fa:b8:93:fb:cb:24:f0:03:01:ee:ba:4c:88:8c:
         76:bc:44:df:80:1e:82:84:16:9c:59:0d:ac:e1:4c:04:e6:20:
         c3:ed:4a:4c:5e:49:87:07:b1:7a:4b:f3:7e:25:bd:15:34:3f:
         58:07:d7:24:7e:ce:73:5e:af:0e:4c:3e:b6:87:ee:7c:67:56:
         d9:a4:cb:e2:b4:8a:a4:38:aa:ef:ce:0a:25:24:0b:63:ee:07:
         3f:03:29:e6:3b:a2:8d:f1:da:58:7c:ff:a4:3a:7f:49:0a:83:
         0e:40:c4:a6:6a:1c:0a:21:77:bb:5e:d8:41:0a:63:81:98:6f:
         b9:07:38:9e:0d:64:62:e0:c5:30:f2:ce:9f:64:db:40:4f:7f:
         d3:ee:90:26:45:95:36:e1:dc:4e:e5:b7:a3:4d:c9:9a:3a:39:
         a5:01:26:6c:ff:80:28:f5:12:a6:a8:38:07:6c:84:b8:34:3a:
         59:41:b0:ef:86:7a:75:45:8e:27:ac:c0:81:d2:0c:8b:6a:cc:
         11:17:4c:e0:37:6f:ee:ab:0f:11:1c:d2:41:bb:b5:58:bb:ca:
         c6:96:ea:d8:30:1e:3d:be:94:17:33:3f:1e:93:76:2f:7a:78:
         4f:eb:e1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:31:25 2026 by rpki-client