Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/dd4c785c-1d60-3ee0-99eb-d19f892f1b8d.roa
File:                     dd4c785c-1d60-3ee0-99eb-d19f892f1b8d.roa (raw, json)
Hash identifier:          OpcUgpwcAVL5lgCczNF9LzsuRoIh77XwAmF3A48XNGo=
Subject key identifier:   57:28:A9:49:3C:44:7A:3B:F5:EF:5C:62:7B:D3:E5:32:3C:9E:78:A6
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E36E1C50A2009E65C28E01400
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/dd4c785c-1d60-3ee0-99eb-d19f892f1b8d.roa
Signing time:             Thu 18 Jun 2026 16:37:04 +0000
ROA not before:           Thu 18 Jun 2026 16:37:04 +0000
ROA not after:            Wed 16 Sep 2026 16:37:04 +0000
asID:                     9009
IP address blocks:        144.225.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:e1:c5:0a:20:09:e6:5c:28:e0:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun 18 16:37:04 2026 GMT
            Not After : Sep 16 16:37:04 2026 GMT
        Subject: CN=6490e1be-f712-4594-af0e-9e27ad93f18b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:96:79:d6:f3:21:4b:e8:ac:8f:9d:9b:05:af:
                    a1:58:bd:ee:f0:b8:9b:ef:c8:c3:a5:91:7a:07:2c:
                    79:06:98:27:11:0d:5b:8e:3a:b8:14:a6:60:35:d7:
                    c3:84:6a:67:a8:7e:26:59:48:75:54:ce:73:c7:75:
                    69:3f:bf:d3:b3:6a:74:c5:0a:84:85:45:83:4e:bd:
                    6b:db:2e:e4:bf:07:67:f9:e0:29:15:71:d7:23:87:
                    9d:cb:35:9f:0c:96:51:f1:2a:68:3e:6c:0a:7f:7b:
                    5d:7a:77:b3:79:08:fd:8b:a8:00:24:b4:cd:3a:7a:
                    95:e8:ac:3e:58:d9:c2:fb:56:7e:8e:82:2e:4c:6c:
                    5e:61:8d:59:8f:d1:3c:84:a4:6b:81:1e:5c:2c:c0:
                    ac:6a:b4:57:45:59:54:d5:80:e8:a2:94:6e:a8:1d:
                    ea:3d:84:15:e8:27:6c:96:c4:e8:51:3c:0d:5b:e9:
                    17:6e:d5:00:41:75:db:7f:00:52:5f:ab:4f:99:97:
                    c2:72:1a:26:77:97:fe:9a:aa:e5:a2:ae:2c:90:db:
                    86:1d:e2:bc:59:70:89:65:03:cb:51:1b:39:07:84:
                    b3:a2:2a:4f:d5:63:6e:f6:db:ac:50:dd:e8:61:f0:
                    b2:fd:70:a6:74:75:8d:ba:71:99:3e:02:45:9a:d7:
                    12:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:28:A9:49:3C:44:7A:3B:F5:EF:5C:62:7B:D3:E5:32:3C:9E:78:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/dd4c785c-1d60-3ee0-99eb-d19f892f1b8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:43:f8:a7:72:b8:72:01:ec:3a:35:f6:73:55:0a:b8:e2:69:
         9c:b2:0b:fc:67:15:53:6d:05:2a:e0:a1:48:bf:9b:67:ad:89:
         3e:53:43:4f:54:77:70:f8:0f:f0:08:8a:1d:cf:50:fc:ea:82:
         df:12:da:f8:13:b2:32:aa:f6:db:db:40:61:b0:33:87:ee:c1:
         5c:ca:8f:3e:aa:f1:62:ec:b6:03:97:7a:ff:62:5a:ae:1b:b5:
         dd:17:ec:f7:e0:85:19:67:38:f8:5e:d3:20:e1:5b:3f:47:d3:
         25:46:0c:36:3e:1e:c5:e1:4f:22:d0:f9:94:18:42:a2:68:83:
         80:b9:c1:e7:7b:e6:63:64:a0:6b:30:6d:49:ab:b0:6a:09:a9:
         e9:d7:bd:78:ec:86:bb:f1:69:3c:a3:f2:0d:f5:76:3c:10:d2:
         4b:67:41:16:4d:c8:c6:bb:68:c5:c5:eb:e6:f7:66:b0:df:18:
         6d:7b:65:16:dd:2c:9b:e1:2d:43:56:21:db:e0:bb:3c:36:9f:
         37:46:1d:17:3d:fa:59:76:8a:8d:d4:0d:de:81:04:94:e8:16:
         95:37:6d:05:8d:98:f2:db:7d:f0:6f:21:ad:5d:4b:31:9b:cc:
         b8:82:44:07:61:ac:41:2f:70:8d:47:44:86:11:3d:f1:73:47:
         49:05:70:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE424cUKIAnmXCjgFAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDYxODE2MzcwNFoXDTI2MDkxNjE2MzcwNFowLzEtMCsGA1UEAxMk
NjQ5MGUxYmUtZjcxMi00NTk0LWFmMGUtOWUyN2FkOTNmMThiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpZ51vMhS+isj52bBa+hWL3u8Lib78jDpZF6
Byx5BpgnEQ1bjjq4FKZgNdfDhGpnqH4mWUh1VM5zx3VpP7/Ts2p0xQqEhUWDTr1r
2y7kvwdn+eApFXHXI4edyzWfDJZR8SpoPmwKf3tdenezeQj9i6gAJLTNOnqV6Kw+
WNnC+1Z+joIuTGxeYY1Zj9E8hKRrgR5cLMCsarRXRVlU1YDoopRuqB3qPYQV6Cds
lsToUTwNW+kXbtUAQXXbfwBSX6tPmZfCchomd5f+mqrloq4skNuGHeK8WXCJZQPL
URs5B4SzoipP1WNu9tusUN3oYfCy/XCmdHWNunGZPgJFmtcS6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFcoqUk8RHo79e9cYnvT5TI8nnimMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZGQ0Yzc4NWMtMWQ2MC0z
ZWUwLTk5ZWItZDE5Zjg5MmYxYjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkOEAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACtD+KdyuHIB7Do19nNVCrjiaZyyC/xnFVNtBSrgoUi/m2etiT5TQ09U
d3D4D/AIih3PUPzqgt8S2vgTsjKq9tvbQGGwM4fuwVzKjz6q8WLstgOXev9iWq4b
td0X7PfghRlnOPhe0yDhWz9H0yVGDDY+HsXhTyLQ+ZQYQqJog4C5wed75mNkoGsw
bUmrsGoJqenXvXjshrvxaTyj8g31djwQ0ktnQRZNyMa7aMXF6+b3ZrDfGG17ZRbd
LJvhLUNWIdvguzw2nzdGHRc9+ll2io3UDd6BBJToFpU3bQWNmPLbffBvIa1dSzGb
zLiCRAdhrEEvcI1HRIYRPfFzR0kFcIo=
-----END CERTIFICATE-----
Generated at Mon Jul 13 10:33:15 2026 by rpki-client