Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7000c41f-7203-34e4-b2a8-e42129bdcd30.roa
File:                     7000c41f-7203-34e4-b2a8-e42129bdcd30.roa (raw, json)
Hash identifier:          Q3wvPpU70GDqFuaaNFHB0Biz98vRO5zE3IDmvyA50vo=
Subject key identifier:   67:AB:A0:01:E7:D3:06:9B:41:AA:FE:0D:33:C1:27:DD:DE:C3:46:44
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584ECE9C6BAB3833852D4061C080
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7000c41f-7203-34e4-b2a8-e42129bdcd30.roa
Signing time:             Wed 12 Aug 2026 01:00:11 +0000
ROA not before:           Wed 12 Aug 2026 01:00:11 +0000
ROA not after:            Tue 10 Nov 2026 02:00:11 +0000
asID:                     7488
IP address blocks:        144.225.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ce:9c:6b:ab:38:33:85:2d:40:61:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 12 01:00:11 2026 GMT
            Not After : Nov 10 02:00:11 2026 GMT
        Subject: CN=bc4e0830-f8ae-48a1-ae0e-1231eff56d0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5c:9e:50:bd:f9:e3:df:c0:30:15:3c:ec:99:
                    91:61:04:78:0e:ec:1a:4f:90:7b:31:eb:ef:b1:5a:
                    61:db:a6:24:ac:9c:ce:01:dd:d4:98:98:c5:d1:b8:
                    bd:54:1a:03:ad:61:4a:b5:33:60:87:bb:60:59:94:
                    44:22:3f:9c:b3:68:3c:dc:cf:f1:b0:ba:a2:f9:c9:
                    be:78:be:fc:f6:28:ce:91:0d:00:0e:b2:71:2b:b1:
                    d7:b6:77:8f:ab:af:8d:5b:68:f2:ca:82:57:bf:97:
                    37:c0:81:12:80:1c:82:5d:5f:df:52:18:e0:01:81:
                    a7:5b:03:91:d1:e6:f7:db:4e:45:8a:0c:d1:2f:d2:
                    fb:aa:30:d2:c3:21:a7:23:45:39:4f:7b:3b:12:02:
                    d3:f0:49:ee:66:6e:38:23:8a:2d:8a:ad:b5:3f:fe:
                    a2:1c:1b:46:5b:de:cf:d8:7f:ac:50:c9:e7:e6:33:
                    3d:02:a9:a2:12:d5:91:0c:f2:92:30:3d:5e:68:0c:
                    eb:73:9e:55:44:b0:7e:9f:c9:d6:e9:8e:59:9f:d5:
                    09:57:2e:f4:47:67:99:a7:bd:56:6b:53:3e:63:42:
                    7f:76:cf:b2:7b:6b:c5:68:b4:56:cd:91:f6:c4:5a:
                    3e:54:8d:9e:92:f8:0f:70:25:a0:a2:06:aa:f5:a5:
                    12:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:AB:A0:01:E7:D3:06:9B:41:AA:FE:0D:33:C1:27:DD:DE:C3:46:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7000c41f-7203-34e4-b2a8-e42129bdcd30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:27:2a:01:84:51:77:59:7c:6d:4c:ec:be:0b:b9:ff:76:a8:
         bb:c0:b7:c5:2f:cb:8f:06:92:31:7b:c2:a3:87:89:e2:16:d8:
         a0:ac:99:7b:97:49:90:dc:b0:64:66:09:f1:cb:e0:a5:88:e5:
         bf:64:01:6c:0a:a4:d7:5a:1d:46:27:a7:57:35:10:a8:e7:db:
         37:75:f5:32:5c:16:7b:90:00:4a:db:5a:91:cf:36:78:f3:d7:
         58:c0:c9:79:88:fc:f0:52:b0:20:aa:b6:6d:ce:ed:c4:d4:62:
         5c:f2:5c:1c:7e:28:d0:52:85:b7:f8:1d:44:0d:06:2f:b0:af:
         52:df:84:e1:09:86:7a:77:e1:c2:6c:73:5e:12:05:01:a3:25:
         f5:81:f2:fa:f5:a6:bc:73:a8:37:c7:5c:63:70:23:03:1c:6d:
         2d:fa:b5:ba:ab:26:c3:44:5e:b7:71:39:e4:e5:22:7b:b2:08:
         cd:04:91:95:1d:b3:39:b8:4d:d5:0a:29:b1:16:e9:08:04:6c:
         87:08:36:2a:77:38:05:7b:ae:10:8d:db:b5:d6:a2:90:84:9c:
         53:36:c0:86:00:31:5e:48:ea:86:a0:2d:17:1b:c6:95:b9:75:
         16:b1:b6:22:8f:0a:9b:d4:f8:1d:73:2f:59:63:0c:8a:bd:f2:
         61:c0:81:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:27:09 2026 by rpki-client