Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fdf69612-ab12-32d2-9996-a8497ca093ca.roa
File:                     fdf69612-ab12-32d2-9996-a8497ca093ca.roa (raw, json)
Hash identifier:          qW1xQhLlvVGu/bvYq6R1AzuLoPlvpO/pZbP0sTYvd3E=
Subject key identifier:   DE:85:96:98:5E:3E:00:FE:21:B7:11:CD:99:E1:43:E0:6C:90:52:73
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584ED1672085A277EC672A0A4C80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fdf69612-ab12-32d2-9996-a8497ca093ca.roa
Signing time:             Thu 13 Aug 2026 01:00:11 +0000
ROA not before:           Thu 13 Aug 2026 01:00:11 +0000
ROA not after:            Wed 11 Nov 2026 02:00:11 +0000
asID:                     63099
IP address blocks:        144.225.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d1:67:20:85:a2:77:ec:67:2a:0a:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 13 01:00:11 2026 GMT
            Not After : Nov 11 02:00:11 2026 GMT
        Subject: CN=037eec56-d71b-4355-bdce-0641f4196fb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ba:13:80:d8:d7:f0:03:01:5a:ef:f3:95:b3:
                    c2:95:6b:d7:0f:94:05:bb:a4:8b:5c:8d:df:34:4e:
                    9a:3b:e4:33:a3:0c:5f:94:47:34:35:a6:05:4a:0d:
                    1e:f7:b7:31:d5:62:8f:28:49:09:fc:5d:de:26:6f:
                    61:e9:51:26:98:76:64:36:78:4e:56:3b:69:9a:51:
                    1b:ae:67:20:51:c4:7e:43:00:b3:9f:46:6a:12:ea:
                    8b:4e:55:e8:8c:29:ae:74:5e:00:58:b9:4b:38:16:
                    0f:35:ec:65:23:98:cd:3a:3b:e3:df:bb:71:89:97:
                    69:9b:79:fa:eb:87:29:20:8e:97:9d:01:b0:71:a4:
                    7a:79:d6:7e:53:23:56:42:56:8d:03:a5:c5:47:d9:
                    ac:ce:ea:28:3a:92:71:14:5a:3a:ad:02:71:fb:92:
                    00:f8:9a:3c:05:5e:9f:e4:ad:15:68:77:03:d3:e7:
                    dd:75:f4:d6:0e:e8:db:fd:a9:da:33:8d:d0:dc:cc:
                    8f:4c:2f:7c:4d:e3:5d:56:21:ce:f7:fe:07:c3:e8:
                    80:76:bd:26:b4:53:1f:54:fb:e7:c3:d4:df:d6:2e:
                    7b:78:16:db:6d:91:34:c1:ee:80:6c:40:e4:5d:b4:
                    24:9c:64:8f:d2:e8:3f:34:8d:22:84:03:b4:13:6a:
                    74:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:85:96:98:5E:3E:00:FE:21:B7:11:CD:99:E1:43:E0:6C:90:52:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fdf69612-ab12-32d2-9996-a8497ca093ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:70:10:0b:63:15:bb:74:ac:81:fd:34:0c:4f:be:55:fe:26:
         85:4a:14:6d:d5:60:22:8a:eb:84:a9:e1:2b:96:af:bc:73:8e:
         5e:de:23:fe:ec:48:5d:36:b8:52:e4:e9:99:fb:e0:8e:52:ea:
         71:91:ff:6e:75:25:b4:5b:0e:70:88:ea:9a:ee:c3:0e:96:87:
         e1:10:1d:e7:da:f0:14:81:b1:d7:46:94:44:cf:74:0a:29:06:
         df:ee:2b:37:75:f0:50:aa:94:54:02:cd:cc:c7:d3:88:f0:30:
         80:f9:fd:f9:77:b5:2a:ff:2c:75:a3:1c:be:21:dd:b7:14:14:
         63:05:2e:be:da:13:7c:a9:21:49:a4:da:b5:09:21:5e:78:29:
         45:ee:d6:ad:7c:ce:10:ae:b6:5f:d7:3d:9d:32:26:47:e1:89:
         43:c2:1b:6f:54:f1:79:30:32:59:63:46:71:45:ca:19:76:cd:
         c3:01:59:38:17:64:f3:bb:e7:b3:c1:f5:00:2a:f9:1d:24:13:
         7f:d0:41:75:c8:86:7f:e4:ff:75:e4:21:eb:94:0b:0e:c6:79:
         40:77:4e:dd:bc:07:18:51:04:d0:75:50:da:81:c4:11:9c:7b:
         41:a0:fc:6d:bd:23:51:a2:e1:fd:52:1e:12:b2:4e:7b:89:cc:
         11:51:ea:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 08:44:45 2026 by rpki-client