Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7b225e6f-0d79-3624-be67-d72ea18c996c.roa
File:                     7b225e6f-0d79-3624-be67-d72ea18c996c.roa (raw, json)
Hash identifier:          /Sl4HECcTlqOg+unhkF/SYQp9IMOsmdN8z8b6P4tVw8=
Subject key identifier:   4A:D3:69:B7:D2:17:21:AA:6E:5C:44:2D:43:B1:16:6D:84:7A:21:15
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D497DB88E6C1ADC76BA355400
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7b225e6f-0d79-3624-be67-d72ea18c996c.roa
Signing time:             Wed 25 Mar 2026 15:48:54 +0000
ROA not before:           Wed 25 Mar 2026 15:48:54 +0000
ROA not after:            Tue 23 Jun 2026 15:48:54 +0000
asID:                     402305
IP address blocks:        144.225.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:7d:b8:8e:6c:1a:dc:76:ba:35:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Mar 25 15:48:54 2026 GMT
            Not After : Jun 23 15:48:54 2026 GMT
        Subject: CN=91b653bf-0179-496b-9b41-e33d3db2cba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:50:2e:a5:2e:51:cc:7b:fa:26:60:e8:cf:32:
                    29:c6:fa:dc:8f:7b:7b:f1:50:b6:73:1d:37:cc:c9:
                    11:1a:7d:da:af:52:c2:43:f7:6f:ef:22:61:09:8d:
                    68:c8:b8:73:5b:e7:47:66:7f:48:06:e6:39:c5:57:
                    7e:86:21:7c:ef:5f:fd:9d:66:10:7a:4b:81:25:65:
                    17:da:4d:82:a1:95:ae:6a:8e:27:6d:ea:6a:94:b3:
                    70:a4:85:3b:03:b4:27:88:34:1f:d9:ba:60:23:f5:
                    7e:d3:0f:98:9f:7b:34:aa:55:35:ea:b6:bd:0e:14:
                    df:26:cb:19:9f:c2:1e:a3:ad:ef:44:b3:10:d7:58:
                    ac:72:55:51:b8:15:56:52:82:4b:bf:28:99:ec:d9:
                    53:18:11:46:0d:a6:77:ed:de:ed:5e:96:a8:c3:5c:
                    7f:15:00:15:b6:67:a9:3b:9d:38:14:3c:28:d9:94:
                    64:95:e8:7a:0f:1b:a4:50:90:85:f5:b5:7d:1f:45:
                    cd:4c:4e:d7:69:2a:10:fc:e1:59:1b:d8:ad:e8:b2:
                    5c:0e:c4:d8:c8:fa:c7:ef:98:8c:91:18:62:db:df:
                    db:7d:f1:90:78:f6:fa:2c:93:bf:04:3f:f2:74:13:
                    d4:80:3c:f1:3f:f6:03:d3:60:ae:6e:ea:b5:d3:35:
                    51:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D3:69:B7:D2:17:21:AA:6E:5C:44:2D:43:B1:16:6D:84:7A:21:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7b225e6f-0d79-3624-be67-d72ea18c996c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:68:12:7e:df:da:d1:83:a5:54:9d:25:97:20:b8:e1:c2:a8:
         7d:9b:5a:76:2a:8b:30:58:aa:98:d0:dd:8d:e2:e7:74:27:96:
         de:50:dd:49:bb:36:46:f8:cf:74:75:c6:bd:32:04:26:24:b6:
         b7:0a:0f:47:7b:37:ee:43:07:3e:e5:e6:a1:d5:b6:20:4a:19:
         ae:4f:83:43:8c:22:63:a4:11:12:bf:6d:6b:a8:3c:c6:52:12:
         6a:f2:70:6c:e4:da:e1:8f:44:ed:61:e2:a6:93:0c:48:8f:a9:
         81:45:f8:64:a8:f5:63:37:20:76:7f:af:1f:7e:fa:31:21:f3:
         63:5c:a6:af:84:db:1b:f1:04:be:ec:26:01:62:4a:7b:0b:98:
         43:4b:d1:90:0c:53:b4:ce:7f:cb:79:53:31:a0:f3:a2:af:43:
         77:aa:de:f6:e0:0f:39:d2:50:33:cb:17:0e:d9:c1:d6:2f:db:
         23:bb:69:86:c7:53:5d:33:26:ce:ea:69:79:c0:45:bd:93:17:
         40:13:d9:9c:7b:31:ab:52:e9:42:c9:d5:82:fb:75:2a:1b:a6:
         0c:bb:de:8c:1d:78:c2:b2:5e:32:4b:34:5d:5e:26:fa:74:5f:
         24:58:da:1e:5f:86:bf:a5:1d:e0:77:8a:f5:40:df:2f:e5:82:
         75:eb:6a:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JfbiObBrcdro1VAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI2MDMyNTE1NDg1NFoXDTI2MDYyMzE1NDg1NFowLzEtMCsGA1UEAxMk
OTFiNjUzYmYtMDE3OS00OTZiLTliNDEtZTMzZDNkYjJjYmE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlAupS5RzHv6JmDozzIpxvrcj3t78VC2cx03
zMkRGn3ar1LCQ/dv7yJhCY1oyLhzW+dHZn9IBuY5xVd+hiF871/9nWYQekuBJWUX
2k2CoZWuao4nbepqlLNwpIU7A7QniDQf2bpgI/V+0w+Yn3s0qlU16ra9DhTfJssZ
n8Ieo63vRLMQ11isclVRuBVWUoJLvyiZ7NlTGBFGDaZ37d7tXpaow1x/FQAVtmep
O504FDwo2ZRkleh6DxukUJCF9bV9H0XNTE7XaSoQ/OFZG9it6LJcDsTYyPrH75iM
kRhi29/bffGQePb6LJO/BD/ydBPUgDzxP/YD02Cubuq10zVRlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFErTabfSFyGqblxELUOxFm2EeiEVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvN2IyMjVlNmYtMGQ3OS0z
NjI0LWJlNjctZDcyZWExOGM5OTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkOFVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG1oEn7f2tGDpVSdJZcguOHCqH2bWnYqizBYqpjQ3Y3i53Qnlt5Q3Um7
Nkb4z3R1xr0yBCYktrcKD0d7N+5DBz7l5qHVtiBKGa5Pg0OMImOkERK/bWuoPMZS
EmrycGzk2uGPRO1h4qaTDEiPqYFF+GSo9WM3IHZ/rx9++jEh82Ncpq+E2xvxBL7s
JgFiSnsLmENL0ZAMU7TOf8t5UzGg86KvQ3eq3vbgDznSUDPLFw7ZwdYv2yO7aYbH
U10zJs7qaXnARb2TF0AT2Zx7MatS6ULJ1YL7dSobpgy73owdeMKyXjJLNF1eJvp0
XyRY2h5fhr+lHeB3ivVA3y/lgnXraiM=
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:16:18 2026 by rpki-client