Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2235ed24-25b1-3102-81fa-f6cae0645486.roa
File:                     2235ed24-25b1-3102-81fa-f6cae0645486.roa (raw, json)
Hash identifier:          ju489QXmKw2To75FWHcPgTDAdKriiWNRDDp5tOrk5kE=
Subject key identifier:   2D:4F:7F:E3:25:26:8F:9B:4A:75:1C:F7:FD:C0:68:19:94:1A:10:0B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D773A72DDBE8529C2E0B18D40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2235ed24-25b1-3102-81fa-f6cae0645486.roa
Signing time:             Sat 11 Apr 2026 01:00:24 +0000
ROA not before:           Sat 11 Apr 2026 01:00:24 +0000
ROA not after:            Fri 10 Jul 2026 01:00:24 +0000
asID:                     16625
IP address blocks:        184.84.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:77:3a:72:dd:be:85:29:c2:e0:b1:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 11 01:00:24 2026 GMT
            Not After : Jul 10 01:00:24 2026 GMT
        Subject: CN=06641c58-b798-4225-9abc-9319f71bfb56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:29:66:17:ac:c1:00:7e:c3:64:f9:c4:4d:4a:
                    32:88:9e:8d:21:91:dc:97:9e:bd:e5:01:84:29:66:
                    13:77:c5:94:81:1a:93:28:bf:81:38:8b:7f:84:0b:
                    c5:c2:1c:f5:96:b2:39:fd:ec:69:60:fa:08:ee:b2:
                    d2:7f:04:98:7e:ad:5c:a1:3f:01:ec:76:f3:a4:89:
                    fc:65:fe:cd:ee:75:0d:4b:52:39:f9:50:56:1a:00:
                    44:06:ec:12:33:89:79:30:7b:fb:c1:65:d4:da:25:
                    2d:2b:b0:d1:53:97:14:41:48:17:f4:5e:d7:6c:ac:
                    24:b9:15:44:81:60:fa:6b:ef:f6:a8:e3:45:de:8a:
                    a9:ec:e7:33:ec:d8:08:b8:16:59:49:c1:3b:1a:e2:
                    26:31:35:2f:54:53:66:b8:ee:95:35:36:45:3c:7e:
                    2a:b5:a9:66:36:1c:c0:3e:56:e0:89:4a:d2:48:94:
                    f5:1c:a9:50:ba:8f:c6:f4:4a:ab:87:90:6e:8c:cd:
                    36:e5:0a:92:13:e5:fc:10:34:62:4f:b8:01:2d:36:
                    79:19:f9:ca:0d:41:93:c9:83:72:46:02:ae:b7:02:
                    e3:de:40:1e:64:56:02:70:de:95:80:c8:2d:bb:64:
                    96:3b:20:10:43:22:a3:60:8d:fb:e2:da:44:6b:23:
                    b3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4F:7F:E3:25:26:8F:9B:4A:75:1C:F7:FD:C0:68:19:94:1A:10:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2235ed24-25b1-3102-81fa-f6cae0645486.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.84.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:1f:5c:0d:14:48:12:a3:3b:72:13:c6:01:d6:bd:99:a4:c6:
         a5:43:ba:16:ea:b7:f0:7c:62:44:31:62:3f:3e:19:81:44:64:
         e7:5c:b1:55:7e:19:9d:a3:c8:1f:ce:fd:35:c3:3e:49:a4:71:
         eb:df:d4:83:fa:03:a1:1d:16:ab:67:97:dd:70:45:45:65:55:
         82:c6:23:b2:62:b7:27:cb:87:c4:f4:9e:26:d9:13:72:5b:02:
         c0:0d:93:5d:2d:71:34:bf:75:08:9c:e0:b7:82:17:50:4e:7a:
         3b:0d:0c:21:d2:24:21:02:df:1a:31:23:5d:a6:d5:45:cb:ac:
         00:ee:83:f1:a8:51:8b:57:38:ec:68:d0:29:a3:d8:71:56:2e:
         89:14:4b:94:f2:b7:7d:83:44:97:11:07:de:58:bb:96:e4:09:
         eb:ce:0a:5a:fa:09:50:7b:ff:45:9a:4b:12:bb:f9:d0:8f:73:
         e5:38:02:5b:19:dd:4d:52:be:77:88:84:0d:36:f1:7f:73:5b:
         c4:71:52:08:86:9e:23:1b:3e:e3:dc:5f:df:eb:fd:d3:b4:72:
         05:72:98:04:a4:a0:81:32:d9:af:48:4c:ff:9f:a4:91:ab:8f:
         92:59:ee:5e:44:cc:66:63:35:c8:d0:e1:96:a8:2f:2f:7d:99:
         55:0c:01:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:58:38 2026 by rpki-client