Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f2f5a55c-51e6-370b-8494-155da7dbff7a.roa
File:                     f2f5a55c-51e6-370b-8494-155da7dbff7a.roa (raw, json)
Hash identifier:          5H0adu4Y+Sf3l8oru/xGj3sBpiZHhGT4hq7bg75388Q=
Subject key identifier:   54:E7:3D:C5:58:FA:E8:FB:9C:35:D7:B8:25:4F:8D:47:E1:32:F1:7D
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584ED16720ACA2B5889E5BF93580
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f2f5a55c-51e6-370b-8494-155da7dbff7a.roa
Signing time:             Thu 13 Aug 2026 01:00:11 +0000
ROA not before:           Thu 13 Aug 2026 01:00:11 +0000
ROA not after:            Wed 11 Nov 2026 02:00:11 +0000
asID:                     60781
IP address blocks:        144.225.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d1:67:20:ac:a2:b5:88:9e:5b:f9:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 13 01:00:11 2026 GMT
            Not After : Nov 11 02:00:11 2026 GMT
        Subject: CN=a7124b2e-f9f0-47c3-ae81-52ec51f0ef1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0b:2f:cc:11:03:36:9b:c9:da:f4:c6:3d:be:
                    29:08:15:48:06:53:0d:db:92:62:fc:32:38:7c:de:
                    f9:8d:8d:94:11:5b:e6:bc:1c:68:d1:a2:c8:70:48:
                    08:44:60:62:17:d5:78:29:29:3a:3e:07:32:8f:55:
                    ef:42:89:29:a6:5b:3c:90:2b:3a:38:ed:bb:d3:9e:
                    07:c8:a7:e1:72:cf:71:15:1e:b3:88:f6:ff:ef:87:
                    24:33:f9:fb:12:50:fa:75:90:6e:0d:bd:d3:7f:75:
                    1c:02:ca:ac:51:dc:5f:1a:6a:55:9d:ad:b8:7f:44:
                    9b:96:89:01:30:85:67:b7:b8:aa:91:31:e5:80:67:
                    40:32:1c:0d:69:b1:9d:f5:7b:d6:a1:bd:f7:95:c6:
                    fd:47:51:b6:83:39:c4:7a:e7:74:e8:ca:52:c6:bd:
                    ab:8f:ae:1c:74:a6:88:97:76:ba:22:20:aa:2c:8f:
                    e6:a8:5c:a8:de:66:29:ce:7d:57:7d:58:cf:30:3f:
                    9a:05:da:9b:89:5d:31:e8:66:4c:b9:fe:0c:0c:50:
                    03:a7:05:c4:f4:08:a1:5c:9c:ca:36:c5:2d:48:81:
                    7c:21:98:84:b9:a3:74:1a:5e:4d:9c:d6:b6:c4:4d:
                    93:37:bc:f1:86:78:1e:00:29:3c:e1:b9:5b:b9:40:
                    99:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E7:3D:C5:58:FA:E8:FB:9C:35:D7:B8:25:4F:8D:47:E1:32:F1:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f2f5a55c-51e6-370b-8494-155da7dbff7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:51:e1:04:93:6f:1c:e5:9e:37:cc:a4:be:15:0b:e5:d8:6a:
         9f:4f:c9:a4:40:9c:5f:9e:ff:73:a1:ac:1a:a2:f0:3b:8b:0b:
         cc:e1:7c:dc:a6:72:e2:1a:36:ea:b8:81:de:d8:cf:57:09:c1:
         18:96:f0:90:e8:42:39:8b:fd:1d:46:77:d9:80:6c:94:5d:8a:
         40:db:64:c0:72:12:67:ef:d6:b3:0d:96:c1:95:1a:d0:90:cf:
         c2:40:41:70:cf:b6:1e:4d:3d:c7:47:8c:94:c0:bc:c4:53:b3:
         b2:ba:a2:22:39:16:ae:df:d6:f1:19:8d:ca:9f:2e:f2:43:b7:
         44:2d:ac:b7:30:77:50:6b:0d:87:13:e2:7f:2f:33:24:04:7a:
         47:94:e5:57:b9:a7:03:ad:99:48:79:3d:a0:3a:00:03:e5:0f:
         8e:c7:84:60:09:a4:b3:d2:2d:6a:a3:da:e9:f0:e5:65:4c:cb:
         56:6e:65:d9:d2:98:7f:ee:d8:d4:95:b1:96:2f:88:21:41:b7:
         e2:6f:dd:e0:ad:e0:05:e2:4a:39:6f:07:86:a5:d9:8f:94:93:
         a2:eb:26:b8:ed:c4:5d:b4:df:fe:b1:54:74:29:a1:4d:e2:e8:
         70:58:34:10:ac:a2:b3:9c:54:59:92:8a:0e:e7:3b:52:09:b9:
         2e:b2:6c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 14:17:06 2026 by rpki-client