Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9d2c561c-a1cf-3379-9059-e78cf1aab8c3.roa
File:                     9d2c561c-a1cf-3379-9059-e78cf1aab8c3.roa (raw, json)
Hash identifier:          3jRF52b/t/VyRsmRLBGNlPOLZIQkkOC9uBC+USZsSlo=
Subject key identifier:   3B:23:CA:34:55:12:9E:5C:57:F8:E0:89:3A:34:28:37:4E:4D:98:CC
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EA787470ABEBA1867E31E5138
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9d2c561c-a1cf-3379-9059-e78cf1aab8c3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     212238
IP address blocks:        205.186.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:47:0a:be:ba:18:67:e3:1e:51:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8abde72f-d938-4cf2-bb2a-45c46f8c56d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a1:2c:df:21:43:e2:64:58:54:17:1b:3e:3d:
                    26:17:59:91:75:19:a7:d3:71:9e:70:b7:4b:f3:28:
                    6a:01:83:7b:9e:81:9b:21:de:02:21:82:13:aa:a5:
                    de:c3:b3:64:27:c0:46:b7:3c:fb:cc:ef:20:c3:ca:
                    13:3d:b5:0d:42:d0:54:5a:15:23:05:6e:f2:e1:ef:
                    b4:bb:31:46:70:8b:21:89:b7:3f:db:16:02:1a:97:
                    df:58:19:d2:f7:87:8b:e6:ae:14:36:18:70:0b:22:
                    e4:74:d5:59:2f:55:45:59:a1:87:05:9c:81:55:ec:
                    7d:a8:0d:e2:ae:89:58:da:97:fb:58:be:0c:0a:f1:
                    6f:8b:0d:e1:da:58:99:79:01:cf:56:16:59:f6:de:
                    3a:2a:81:83:76:c5:3b:d6:d0:25:97:9a:66:de:6f:
                    79:ef:cd:45:1a:62:7c:a4:26:98:44:4e:3b:14:69:
                    7c:fc:99:33:85:97:4e:0a:01:71:6f:8a:3c:af:48:
                    21:cd:dc:57:e4:c6:1f:c6:66:4e:e5:99:19:aa:89:
                    b9:a8:09:28:e9:4c:49:ec:3f:73:8d:a2:e3:40:c5:
                    fe:bc:05:69:4a:16:5e:19:94:0e:4a:1b:5f:0b:42:
                    42:a3:96:bf:a2:f5:fc:a6:b3:80:0f:a7:1b:ea:f1:
                    6f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:23:CA:34:55:12:9E:5C:57:F8:E0:89:3A:34:28:37:4E:4D:98:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9d2c561c-a1cf-3379-9059-e78cf1aab8c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.186.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:ee:ad:09:dd:8a:8e:23:07:c9:46:c4:bd:32:e9:36:8f:94:
         7e:f4:e9:4d:eb:af:d4:07:29:64:ac:b6:74:22:ba:8b:43:96:
         28:6f:e4:b8:fe:23:12:2d:fa:68:b9:89:39:8e:91:9f:55:89:
         58:69:3b:b9:6d:32:a5:59:a5:15:b8:e6:3c:a1:83:f2:91:51:
         cd:38:6d:82:c4:78:9f:8e:78:23:de:2b:9a:c3:96:7f:e2:ab:
         58:80:c6:90:63:ff:5a:10:52:3c:81:09:5f:79:0c:aa:e9:b4:
         37:05:6e:22:c2:d5:b8:3f:b3:b9:d4:72:62:35:5d:e4:be:80:
         02:c6:2e:f4:4a:fc:0d:fc:0d:02:46:67:fe:a3:65:a2:67:de:
         66:f6:3e:7a:44:2e:c5:59:7e:3d:75:0f:b8:4a:7b:70:e6:10:
         24:39:6a:67:b0:80:8a:db:ea:90:40:79:2c:28:85:59:62:82:
         68:63:88:c1:f4:a0:1f:9f:1a:1c:be:c6:ad:8e:b7:27:21:8b:
         e7:41:ba:38:aa:85:89:02:3a:73:9f:ed:ed:c6:c1:c6:d5:ee:
         46:40:37:b0:79:c3:6d:eb:0b:93:2c:e9:b2:11:7e:e1:cb:14:
         52:dd:ab:44:c1:52:fc:85:94:79:6d:da:48:f2:92:3e:b0:ad:
         1a:4b:ab:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:34:59 2026 by rpki-client