Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/65f5ad9c-9cad-379a-ac14-ff3e469f098e.roa
File:                     65f5ad9c-9cad-379a-ac14-ff3e469f098e.roa (raw, json)
Hash identifier:          8487A5+lxSG8H7LiP9Cz6eJQs3SCEsDda/QJMcwRCCw=
Subject key identifier:   22:4C:A1:EF:4E:5B:2C:32:32:75:70:E3:C3:FE:B3:01:8E:7E:09:72
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EA787046D60FC9838E8DB9E80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/65f5ad9c-9cad-379a-ac14-ff3e469f098e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     53107
IP address blocks:        144.225.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:04:6d:60:fc:98:38:e8:db:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ee9101e0-b40e-46ae-97bb-46e89b76d26b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5d:9c:4e:39:77:ec:d3:72:ab:3f:f6:2a:74:
                    5c:4d:3b:52:8b:51:0d:dd:1a:49:04:70:b9:90:af:
                    1f:b8:4b:4c:ee:98:85:5b:c0:df:a0:c5:5c:db:0c:
                    2e:9f:c7:b8:ae:f8:33:f3:fb:29:95:fa:f6:16:a1:
                    50:41:bf:6d:00:2b:ce:48:8d:e6:ff:a2:a6:06:07:
                    ef:77:8f:28:b2:29:70:39:df:23:0f:02:97:4e:fc:
                    d2:7a:53:06:f8:e1:45:14:5b:98:85:41:0c:04:38:
                    4c:32:a9:51:d6:f5:4b:4b:04:f0:6b:0f:59:c1:e0:
                    87:59:e3:73:d0:7a:5a:a4:47:b0:bd:54:45:14:97:
                    80:f6:25:70:f4:00:22:4e:05:a9:bc:57:f1:0e:e7:
                    38:6b:a1:17:6b:88:b0:54:1b:df:88:5f:7b:0e:7e:
                    f4:ed:9e:5e:3b:d8:de:b5:5e:d2:9c:3d:be:f6:67:
                    f1:df:15:5b:64:64:b4:4b:39:19:17:5a:7a:dc:e7:
                    53:8f:66:31:58:f7:50:51:0d:73:e8:ab:5c:19:e0:
                    a6:f5:57:16:61:0c:d3:b8:36:7d:11:8c:5e:f4:04:
                    11:b5:0c:6d:b6:21:86:3c:35:f7:8e:c0:53:e8:93:
                    b3:de:fd:df:57:b3:61:81:ca:21:88:51:d1:f5:d4:
                    de:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4C:A1:EF:4E:5B:2C:32:32:75:70:E3:C3:FE:B3:01:8E:7E:09:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/65f5ad9c-9cad-379a-ac14-ff3e469f098e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:a3:9f:ab:02:7a:1f:21:b2:47:37:a5:1c:0d:4d:9a:fe:56:
         87:b0:d7:bf:af:95:e0:fc:da:a8:91:33:fe:d6:0c:13:0e:28:
         07:53:e9:94:cd:88:f5:e0:fb:50:98:e3:dd:76:5e:7f:66:88:
         a8:6c:1e:2f:9a:7d:c1:15:e8:cd:ff:f8:35:d8:0b:15:68:cd:
         85:40:2c:85:88:23:da:28:9f:62:05:59:a9:95:75:08:61:4d:
         b3:f8:f8:63:25:73:55:0f:22:2d:23:14:89:02:56:78:69:ce:
         1b:45:e9:fd:9b:84:26:16:b7:ce:1b:37:8d:37:ef:3d:af:25:
         08:d3:1f:f1:17:ef:38:57:42:2c:78:e0:45:c9:8f:81:49:6f:
         47:01:db:76:74:bc:07:50:df:e5:cb:16:3c:76:da:06:ed:d0:
         56:d0:eb:16:ac:2d:c8:40:99:07:7e:91:26:34:0c:38:7e:b5:
         be:b1:a0:b5:6a:e8:af:77:2a:66:6f:79:ec:7e:fa:c0:99:60:
         c0:b2:7b:b1:19:3d:5e:61:89:6d:0f:87:ff:51:40:62:a9:be:
         ed:57:fa:6c:6b:8f:f0:66:30:fd:28:59:b2:d5:94:eb:4d:5a:
         57:a1:44:1a:e6:fb:1e:9e:35:4b:86:3f:12:78:45:4e:c8:20:
         f4:00:54:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhwRtYPyYOOjbnoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZWU5MTAxZTAtYjQwZS00NmFlLTk3YmItNDZlODliNzZkMjZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxl2cTjl37NNyqz/2KnRcTTtSi1EN3RpJBHC5
kK8fuEtM7piFW8DfoMVc2wwun8e4rvgz8/splfr2FqFQQb9tACvOSI3m/6KmBgfv
d48osilwOd8jDwKXTvzSelMG+OFFFFuYhUEMBDhMMqlR1vVLSwTwaw9ZweCHWeNz
0HpapEewvVRFFJeA9iVw9AAiTgWpvFfxDuc4a6EXa4iwVBvfiF97Dn707Z5eO9je
tV7SnD2+9mfx3xVbZGS0SzkZF1p63OdTj2YxWPdQUQ1z6KtcGeCm9VcWYQzTuDZ9
EYxe9AQRtQxttiGGPDX3jsBT6JOz3v3fV7NhgcohiFHR9dTeVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCJMoe9OWywyMnVw48P+swGOfglyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNjVmNWFkOWMtOWNhZC0z
NzlhLWFjMTQtZmYzZTQ2OWYwOThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkOGLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD6jn6sCeh8hskc3pRwNTZr+Voew17+vleD82qiRM/7WDBMOKAdT6ZTN
iPXg+1CY4912Xn9miKhsHi+afcEV6M3/+DXYCxVozYVALIWII9oon2IFWamVdQhh
TbP4+GMlc1UPIi0jFIkCVnhpzhtF6f2bhCYWt84bN4037z2vJQjTH/EX7zhXQix4
4EXJj4FJb0cB23Z0vAdQ3+XLFjx22gbt0FbQ6xasLchAmQd+kSY0DDh+tb6xoLVq
6K93KmZveex++sCZYMCye7EZPV5hiW0Ph/9RQGKpvu1X+mxrj/BmMP0oWbLVlOtN
WlehRBrm+x6eNUuGPxJ4RU7IIPQAVLg=
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:21:02 2026 by rpki-client