Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1ce38852-ecba-3241-987a-840f46cda066.roa
File:                     1ce38852-ecba-3241-987a-840f46cda066.roa (raw, json)
Hash identifier:          Z4haGX2zzwu40zgiMhJlXsxpaDNY3uDYl8Bzk1PlnE8=
Subject key identifier:   37:C3:D6:E5:AD:F0:DE:CB:17:A3:19:D4:78:DC:73:4F:45:EE:73:E9
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DBC0C77A177CA6A06275D36E0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1ce38852-ecba-3241-987a-840f46cda066.roa
Signing time:             Tue 05 May 2026 16:38:40 +0000
ROA not before:           Tue 05 May 2026 16:38:40 +0000
ROA not after:            Mon 03 Aug 2026 16:38:40 +0000
asID:                     25846
IP address blocks:        144.225.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bc:0c:77:a1:77:ca:6a:06:27:5d:36:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May  5 16:38:40 2026 GMT
            Not After : Aug  3 16:38:40 2026 GMT
        Subject: CN=0ff1dbda-414f-480f-92c0-8465a3a68329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:64:bd:41:aa:52:1a:88:59:34:4e:d3:37:7e:
                    fc:0c:d9:1f:23:48:8a:0c:bd:2c:f5:9e:03:af:27:
                    3e:05:ba:e9:42:c9:64:d0:e9:f7:76:ed:28:08:73:
                    d5:c3:16:b3:00:14:f2:fe:97:5b:61:ec:6b:38:76:
                    cb:3d:84:19:03:19:c8:d9:2b:95:94:5f:4b:25:a7:
                    53:a4:1f:47:85:9b:5a:f4:55:b1:e5:b5:37:44:58:
                    c5:7f:04:47:c8:11:bd:d2:58:4e:75:0c:b5:6d:37:
                    55:ba:82:09:df:41:1a:22:bb:47:47:d8:4c:6a:1e:
                    b4:be:f5:99:b8:0a:4f:77:15:66:1d:5b:c1:a1:07:
                    32:da:8d:e8:fe:78:93:00:fc:28:e7:da:19:88:b0:
                    27:fa:10:a6:c3:01:6b:3a:0a:55:f5:f4:de:01:7c:
                    49:e9:dc:f4:0e:49:15:bf:86:ef:b4:fa:a7:a0:66:
                    c3:01:46:ac:4e:6f:54:f6:ca:2f:2f:dd:c7:1b:2f:
                    c5:dc:c4:62:7b:37:7c:85:0c:b0:f0:3c:6b:e1:4b:
                    24:55:05:1e:4b:dc:4e:50:6c:86:70:0a:e3:5b:b0:
                    fa:0c:4a:5c:e4:9f:3f:a8:e1:2b:7a:23:95:71:e8:
                    bf:3b:88:90:2d:48:88:15:0f:47:45:86:c8:62:a9:
                    8f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C3:D6:E5:AD:F0:DE:CB:17:A3:19:D4:78:DC:73:4F:45:EE:73:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1ce38852-ecba-3241-987a-840f46cda066.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:fb:38:25:e4:71:ae:20:41:5d:f5:90:49:b0:db:cc:1d:6c:
         f4:0c:bd:89:10:74:fe:c2:2a:01:60:5b:16:05:bc:45:35:e6:
         8b:5a:3a:7c:44:a0:7c:c4:d5:fe:14:1f:55:b0:89:a5:d8:e8:
         44:bb:fd:ba:80:69:7e:d7:93:21:9c:ef:9e:bc:ec:b0:8d:5b:
         f6:1c:c8:b8:45:78:5b:9e:74:3f:eb:0e:97:8c:8c:9f:43:61:
         7b:da:42:7a:18:88:77:dc:6b:4a:bc:5e:04:2a:d8:b4:cb:ad:
         82:59:91:8b:d1:e0:47:a0:55:59:7c:ae:66:55:44:8d:9f:13:
         99:a5:c7:ba:aa:07:14:90:38:1c:47:ce:c9:a6:05:0f:63:61:
         68:b7:4e:7d:85:19:a3:07:91:bb:eb:cd:a3:cd:bc:b1:60:0d:
         85:35:cb:be:dc:01:ae:cc:b0:3a:e4:d1:2d:5d:7e:ad:19:93:
         93:91:9e:61:d0:fe:dc:34:5c:fd:ce:1c:dd:96:35:88:0c:86:
         ee:c4:54:08:0a:69:dc:95:71:ef:96:b9:dd:fd:a7:66:3e:28:
         65:52:e7:95:e9:b4:39:34:62:0b:46:48:55:48:80:6c:9a:b3:
         37:af:a3:40:be:51:b7:68:f1:e8:2f:74:d9:6a:56:e3:4e:2a:
         11:c3:3b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:18:57 2026 by rpki-client