Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e3ea7a7d-581b-3b21-96a4-7ed231c31e4a.roa
File:                     e3ea7a7d-581b-3b21-96a4-7ed231c31e4a.roa (raw, json)
Hash identifier:          z5cTpqQxQhbn5tx6QLIhhy0aKnqdDQDN+bYGoQrSG/8=
Subject key identifier:   51:22:B9:8E:2A:56:1D:7D:73:5B:42:76:CA:B5:C7:1C:5B:99:2C:C7
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D075DF92BC47A01DB6C07EA40
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e3ea7a7d-581b-3b21-96a4-7ed231c31e4a.roa
Signing time:             Sun 01 Mar 2026 23:21:35 +0000
ROA not before:           Sun 01 Mar 2026 23:21:35 +0000
ROA not after:            Sat 30 May 2026 22:21:35 +0000
asID:                     214432
IP address blocks:        144.225.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:5d:f9:2b:c4:7a:01:db:6c:07:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar  1 23:21:35 2026 GMT
            Not After : May 30 22:21:35 2026 GMT
        Subject: CN=3e615ec8-e95f-4b71-9cce-4a2efcd14c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0f:60:5c:c7:93:62:9f:1d:e6:41:e2:1e:1e:
                    ed:67:ce:04:aa:57:12:61:07:4d:a2:45:4a:b3:bf:
                    ac:a5:8f:b9:12:97:27:0e:05:1b:ef:73:c5:4f:7e:
                    63:29:d7:a2:10:4b:44:7d:52:a6:6d:44:31:b4:df:
                    b4:c6:bd:55:f6:74:d1:52:ff:6c:46:2f:c8:14:1f:
                    a4:9b:b2:17:79:60:89:36:17:d4:70:93:0e:1e:e2:
                    43:2a:a9:8c:ab:4e:6e:62:32:78:14:4a:d1:51:89:
                    e3:fa:92:fa:40:da:00:45:1d:f8:97:b1:d4:48:c1:
                    6a:26:24:bd:35:06:ee:e2:b7:0e:09:92:f3:ed:20:
                    c0:ac:92:6a:e0:e2:1e:fd:30:6b:45:fb:61:16:b4:
                    73:11:39:f9:a3:fb:66:d9:26:99:2b:2c:3e:2b:bf:
                    f0:1e:58:21:69:ba:64:18:e0:29:12:85:d0:71:f8:
                    f5:27:cc:dc:bf:c6:a7:fc:a9:79:6f:ca:bb:5f:18:
                    9d:51:14:12:d1:75:51:f3:ab:9f:04:2e:ed:69:fa:
                    33:e5:ac:52:4f:df:a4:0e:b2:63:c7:65:59:02:63:
                    95:b7:f8:72:42:d2:4d:69:68:1c:29:0c:07:93:14:
                    99:cd:5a:68:55:ae:2e:24:41:04:b1:03:e8:0d:45:
                    96:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:22:B9:8E:2A:56:1D:7D:73:5B:42:76:CA:B5:C7:1C:5B:99:2C:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e3ea7a7d-581b-3b21-96a4-7ed231c31e4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:48:1a:e6:8c:51:d2:b5:7e:51:b8:48:c4:49:12:04:46:62:
         a9:b9:5d:36:35:05:1b:35:0b:2f:b9:ac:71:82:55:57:e1:a1:
         91:73:4d:dc:63:97:a3:24:c0:fc:0c:3c:28:f0:13:9b:ec:61:
         98:63:9b:a2:17:62:9c:e8:37:2b:13:a0:46:55:ec:c8:c3:68:
         ca:5f:41:8d:c4:66:d3:fe:8e:b9:0a:9a:e8:dc:34:7c:36:85:
         c3:2d:ac:a2:73:73:73:0a:c4:e5:12:6b:b0:60:c2:2d:6f:51:
         21:db:01:25:c6:40:21:a1:98:0a:d5:f2:79:25:78:97:a5:18:
         76:d4:de:bd:6c:5d:e1:dc:9f:04:f3:66:f3:4a:7b:33:f5:c2:
         7f:3c:8d:65:88:65:52:a5:70:51:54:8f:b2:03:83:59:b5:5d:
         24:31:89:11:50:34:46:be:fe:b7:f7:63:43:0e:70:bb:54:dc:
         75:81:44:74:76:8f:04:0d:84:d5:89:a8:bd:cd:08:83:74:b1:
         56:4a:b8:1f:03:09:66:6e:92:68:2c:bd:f8:7a:72:92:91:5f:
         c5:fe:dc:5a:b6:e5:52:e5:5b:d9:03:c9:03:57:ab:57:32:ce:
         51:bc:d6:d6:e0:a6:c0:b5:99:23:a6:8c:38:d9:49:3f:87:21:
         79:6e:0b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:22:49 2026 by rpki-client