Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fa5c90ac-5e1c-3044-b6af-4e1810557d80.roa
File:                     fa5c90ac-5e1c-3044-b6af-4e1810557d80.roa (raw, json)
Hash identifier:          9579LjuC7FF45B1rHvzFxLwjFsEllekOMib6H0pfKJs=
Subject key identifier:   B8:37:1A:28:80:DF:77:F2:1A:CB:12:4F:6B:CA:8D:70:2C:FF:B2:E8
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EDC91DD8B0EAB29491ABFCF80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fa5c90ac-5e1c-3044-b6af-4e1810557d80.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     149573
IP address blocks:        144.225.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:dd:8b:0e:ab:29:49:1a:bf:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=be28bc67-c1d3-4090-ba33-264207d387bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ea:b0:99:c6:c5:cc:de:ae:a8:c3:00:c8:02:
                    4b:37:39:8d:ff:bd:e9:55:cc:40:b5:5d:41:93:20:
                    21:1a:ca:fb:14:5f:f6:f5:1a:7e:96:a6:88:62:39:
                    68:1b:64:bf:14:f2:82:7d:07:d9:80:e9:82:5b:2c:
                    55:58:d8:e3:7b:25:25:5d:46:c7:18:49:78:40:57:
                    f0:d8:c9:dc:f8:7e:a0:5d:bc:25:7e:c4:56:7e:a5:
                    ab:d0:53:07:2d:0a:ef:da:60:0d:2f:9e:09:94:1f:
                    7e:b5:c2:57:0b:b2:b1:68:10:d2:fc:60:02:ca:c0:
                    bf:80:bc:0a:4c:79:7b:e2:89:43:74:33:dc:26:7f:
                    dd:eb:af:f0:d3:fa:81:32:07:16:8a:36:35:b1:2a:
                    67:87:17:ff:78:a9:8a:0d:30:f2:ee:de:b4:01:2e:
                    5b:3b:ae:a9:a4:46:e8:1e:05:af:0f:9e:d1:9a:a0:
                    9a:c1:28:4d:1d:2d:08:77:86:d1:83:1a:21:cd:3e:
                    44:cf:a8:56:49:b6:94:5d:24:63:a7:81:3b:ab:f3:
                    4f:fb:50:99:4e:9a:5f:00:a7:4b:cf:39:1e:51:3a:
                    2c:2e:6f:ac:2b:21:e9:29:b4:1a:ba:c3:99:a7:e2:
                    9d:4f:13:ed:89:6a:c1:6f:e7:15:0c:b4:4c:14:b4:
                    b7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:37:1A:28:80:DF:77:F2:1A:CB:12:4F:6B:CA:8D:70:2C:FF:B2:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fa5c90ac-5e1c-3044-b6af-4e1810557d80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:c5:90:4d:8a:75:7a:ec:a5:c1:ce:fa:82:78:de:6f:7b:3d:
         13:f1:52:65:be:3f:2c:00:26:6f:65:2c:d9:96:76:74:a5:dc:
         29:82:bb:96:a3:30:ec:c7:7b:5a:45:5e:8b:30:58:bc:0f:91:
         68:b7:84:63:ca:d9:dd:a9:e9:f7:90:13:2d:be:ac:87:3a:47:
         39:d3:95:91:1a:cd:98:cc:53:d8:f3:66:27:b4:ca:65:92:d1:
         50:a9:fb:a8:c6:a1:59:69:de:b6:03:2f:4b:3b:6b:b9:58:87:
         8e:76:80:60:32:ef:1f:c4:41:d8:bd:71:d8:dc:d9:7e:ff:c0:
         33:62:5a:4e:f6:b9:49:6a:53:ef:72:c8:7e:5d:86:97:c2:39:
         b3:cd:34:61:2d:e7:db:bf:c9:d5:42:e7:f3:e3:b9:c6:e1:4d:
         18:cf:70:03:f8:28:0a:3f:ff:f1:ef:cc:4f:8e:26:ae:06:16:
         96:d5:c6:24:b7:ca:9a:0a:c5:cb:b1:70:04:9e:55:29:ac:3b:
         34:1e:10:13:35:7e:13:c1:ce:f5:37:36:60:43:24:82:3b:a2:
         db:af:1e:f7:95:a6:3b:14:af:2d:46:44:44:22:3d:1d:df:05:
         8a:58:17:a8:9d:83:70:fe:65:60:be:0c:37:dc:34:5c:07:82:
         3d:4a:72:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 15:16:25 2026 by rpki-client