Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5d648dcd-0c71-3c29-a1fc-1b081f9c2f1a.roa
File:                     5d648dcd-0c71-3c29-a1fc-1b081f9c2f1a.roa (raw, json)
Hash identifier:          dRiodnDHiBNu8GWM2GVoIO7yEJ+4VSFVGmM0R5qB9eU=
Subject key identifier:   A1:4D:23:ED:61:E7:93:F0:AC:9F:4B:DD:13:82:F9:0A:B3:93:13:16
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E104F36AF8A8CAFFF22FBC380
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5d648dcd-0c71-3c29-a1fc-1b081f9c2f1a.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     9304
IP address blocks:        144.225.164.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:36:af:8a:8c:af:ff:22:fb:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=6188bef3-6c8f-4694-a61a-622016216151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8c:2c:e6:b2:c5:64:16:6f:b9:6d:09:23:fa:
                    38:f2:b4:69:39:94:cd:8e:ca:fd:78:1f:cf:39:c8:
                    2d:6c:8d:1a:6c:f5:05:46:af:4e:88:e3:64:10:19:
                    d7:df:cf:be:63:b4:ce:20:15:a8:d1:3b:f6:ce:7c:
                    a0:90:53:05:21:9d:40:df:91:19:40:b5:7d:9e:5d:
                    7a:ca:52:4d:c4:f8:15:e8:07:2b:1c:9f:d2:71:e6:
                    20:88:34:48:f9:7e:0c:ef:cf:6e:f7:fb:a3:1b:de:
                    12:f3:0b:26:04:12:83:38:f9:0e:74:b9:6c:6f:00:
                    17:a4:11:df:eb:54:e9:2f:ee:6b:b2:b6:c4:cc:85:
                    d8:c1:10:3e:8f:b9:1e:ff:fe:20:ca:58:d9:0a:71:
                    d6:94:f9:2a:87:95:9e:fe:24:2c:47:01:19:f2:45:
                    d2:88:77:6f:49:85:a4:18:21:ab:cb:0a:74:e3:39:
                    60:0e:c1:87:ce:58:85:d2:db:5a:ae:13:6c:5b:5a:
                    d5:36:12:ff:1d:0e:f5:8b:4d:2f:84:2e:7c:d6:23:
                    d0:06:05:ec:1d:f2:6c:c2:48:01:dc:cd:b7:8c:60:
                    5b:e6:f0:d3:a0:bd:31:5d:16:7d:8b:1a:70:d0:7b:
                    7a:01:e0:68:d2:db:7d:4f:fa:2a:72:9d:32:cc:fd:
                    f5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4D:23:ED:61:E7:93:F0:AC:9F:4B:DD:13:82:F9:0A:B3:93:13:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5d648dcd-0c71-3c29-a1fc-1b081f9c2f1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:ea:9b:4b:6c:af:b5:ce:14:ae:e8:cc:1b:3f:2c:c3:8d:b6:
         31:50:7d:dc:f6:62:99:a0:22:89:1c:9d:a4:4f:78:36:a6:6d:
         95:38:ff:8b:7c:3b:f9:c9:a7:57:0e:43:79:c6:63:45:27:77:
         8b:ac:28:14:68:19:68:07:8a:e8:97:2a:9d:dc:bf:01:1a:85:
         4e:87:14:1f:cd:41:12:cc:6b:bb:08:9a:36:88:9a:09:cb:ae:
         44:18:c4:6b:59:d5:b3:6d:7b:13:68:14:e3:e6:55:0c:cb:5a:
         36:7e:1c:94:54:ec:16:f6:81:63:ac:4d:6f:4c:d4:48:b3:63:
         ac:22:ab:e8:3b:0e:fa:5a:1a:86:18:05:4b:83:86:10:fe:a6:
         e3:d5:7c:ae:6a:ab:83:55:7b:90:52:b4:97:5a:82:4a:6d:a5:
         bc:61:dd:3f:9b:3e:a7:c2:58:4e:6a:18:b7:f3:93:a0:de:3f:
         26:81:7c:11:94:e9:98:d3:8a:49:22:53:96:01:0d:dd:77:eb:
         55:1f:45:5d:76:6a:1e:57:fa:3d:85:c2:17:bb:0c:8a:4f:3e:
         3a:57:ad:b9:ac:c0:e9:53:5b:65:af:1c:e4:31:df:ec:ce:6e:
         b1:8f:6e:df:50:54:86:cf:55:95:42:2e:49:1f:a0:3d:d7:a2:
         94:27:c4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:18:25 2026 by rpki-client