Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/717b7789-b6f7-35b6-938d-766e2dc50a70.roa
File:                     717b7789-b6f7-35b6-938d-766e2dc50a70.roa (raw, json)
Hash identifier:          LFxcJpk2tQ3INYj7zbOUg/n0mgby1tJLtymlSHboZro=
Subject key identifier:   BC:40:7C:2B:2B:97:13:43:AB:E8:4F:D0:DA:C4:C4:C4:06:B1:2D:E3
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E9A7FAFEA0471BBD725E4EB00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/717b7789-b6f7-35b6-938d-766e2dc50a70.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     206300
IP address blocks:        144.225.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:af:ea:04:71:bb:d7:25:e4:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=987092f3-c9ed-451d-9b6e-5a509ade79a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0e:25:e0:eb:0d:fe:56:9a:01:b3:99:2c:92:
                    1c:7b:69:aa:77:63:78:b6:1e:8d:c7:ed:85:ae:af:
                    f1:76:15:12:13:dc:4c:1a:8b:d8:06:65:32:fe:60:
                    77:e7:31:06:1e:87:44:fd:27:3e:a0:13:ac:ac:b0:
                    22:66:32:bb:ef:c7:2c:d0:67:af:6a:b7:a3:12:b1:
                    b5:74:6b:21:c1:61:a5:62:e6:b5:23:f3:f6:87:a7:
                    88:10:0d:47:39:0e:60:14:38:6b:22:46:b1:d1:89:
                    bb:c9:51:11:a1:e9:51:ae:45:e4:dd:75:ac:36:38:
                    03:d9:dd:22:a7:f7:77:8b:e7:39:1f:f1:95:d7:ef:
                    77:b8:b1:76:ee:b8:1e:58:b9:88:84:35:c0:0b:3c:
                    92:ee:5c:36:2f:ab:8c:ed:aa:41:d2:1b:43:bf:11:
                    fc:3d:53:40:4a:d4:6c:4e:69:99:d5:60:59:8d:83:
                    3a:eb:7f:22:ae:f9:85:3e:2a:23:2a:67:cc:b5:29:
                    03:0d:29:f2:55:7c:65:d8:a5:0f:66:c3:e5:08:7d:
                    91:50:ae:c9:08:d1:e1:80:74:44:4c:40:52:6b:ae:
                    7b:cc:db:7d:20:47:fd:a5:4a:0a:3a:72:d6:d8:12:
                    15:e4:1f:87:a7:29:4c:e2:e6:2c:5f:4d:fa:6b:1b:
                    94:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:40:7C:2B:2B:97:13:43:AB:E8:4F:D0:DA:C4:C4:C4:06:B1:2D:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/717b7789-b6f7-35b6-938d-766e2dc50a70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:a7:7d:be:ad:fc:2a:b8:a8:c6:b7:f4:60:f3:88:82:83:b1:
         b8:86:8e:59:08:8b:b3:d9:a8:79:14:00:33:a5:fe:43:bd:ec:
         96:f7:2f:f8:3e:6a:b7:36:fa:d1:73:5e:b7:05:5d:8b:57:a4:
         a8:76:67:73:40:7f:3e:fa:89:2b:08:dc:f8:5e:a5:4f:c7:63:
         61:7e:2a:a9:59:a5:52:1e:e7:13:0f:63:6d:91:7e:72:11:94:
         43:23:b8:5a:1c:f2:13:10:4b:73:22:f1:1f:d5:bc:fe:14:1e:
         b1:55:81:2e:97:be:85:95:8d:33:b6:e0:21:7a:09:45:69:20:
         f5:de:21:d6:c6:e2:fc:75:39:0c:f0:35:d9:64:f7:d3:13:6f:
         02:27:9b:1b:75:01:b8:b5:3a:e2:79:83:a6:6b:67:52:10:25:
         50:e2:21:7f:aa:8c:4a:0f:83:53:76:dc:54:fd:6c:cd:c1:21:
         31:15:83:ee:20:53:bf:71:9e:1e:f0:3e:d8:55:6b:d5:29:b8:
         45:9b:e6:a4:de:42:e8:75:03:fd:de:80:21:ba:a4:39:7a:d1:
         76:8f:93:ee:b3:0b:c6:d9:ea:d2:d0:b5:24:22:22:cb:df:49:
         36:db:c3:13:ed:c9:80:93:05:75:e7:72:04:87:05:89:e7:3c:
         0f:77:77:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:38:28 2026 by rpki-client