Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9d2c561c-a1cf-3379-9059-e78cf1aab8c3.roa
File:                     9d2c561c-a1cf-3379-9059-e78cf1aab8c3.roa (raw, json)
Hash identifier:          5ntVOx1QzRXfV12T19BhG1T36ZP0wtx9KIdPfR75nZ8=
Subject key identifier:   82:F5:81:81:7C:50:F1:06:C4:F7:BA:2D:0D:1B:82:89:2E:E0:03:03
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DCAFB1D5F9681D2A00A929E00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9d2c561c-a1cf-3379-9059-e78cf1aab8c3.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     212238
IP address blocks:        205.186.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fb:1d:5f:96:81:d2:a0:0a:92:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=ce877579-6b48-453c-a8d2-b8d1a3a777ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:90:45:c7:79:f2:f8:79:3a:d0:56:af:cc:9e:
                    8a:fc:78:76:69:c1:95:cf:bb:53:cc:18:20:4e:db:
                    bb:b4:31:5f:74:6a:95:33:5e:08:b6:62:9f:54:e8:
                    1a:b1:c1:1d:aa:96:91:13:d9:cb:12:9c:01:80:11:
                    a9:bc:5a:96:f9:49:50:08:d2:be:ca:8e:cd:ba:a4:
                    bd:e1:21:d6:42:12:cf:b8:f2:85:d9:b4:15:1e:62:
                    5b:ae:01:96:79:ef:17:24:15:98:11:4d:10:f5:c6:
                    55:a6:1f:b8:e0:83:16:00:36:a4:c5:5d:bb:78:59:
                    0f:89:5a:1a:91:c0:51:da:6c:7d:f1:55:a4:96:cd:
                    74:32:55:63:74:5e:2b:e8:ab:f8:f3:07:49:d4:82:
                    eb:35:d1:e2:68:96:2a:37:3b:62:fc:ea:56:a9:d1:
                    b1:51:dd:32:86:eb:24:38:0a:57:db:3b:d8:fa:46:
                    84:ad:ab:19:14:7d:9a:b6:12:8f:f2:c8:59:7e:ba:
                    41:bd:61:d5:3c:03:87:f4:8e:64:ea:8f:6d:99:ab:
                    be:83:00:9f:6e:0b:52:b4:32:94:9e:53:e0:71:16:
                    2e:5f:75:cf:02:3b:b3:9b:38:99:2b:7a:4c:00:8f:
                    66:9d:ae:67:14:34:df:70:89:ca:f8:8e:6e:d8:68:
                    53:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F5:81:81:7C:50:F1:06:C4:F7:BA:2D:0D:1B:82:89:2E:E0:03:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9d2c561c-a1cf-3379-9059-e78cf1aab8c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.186.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:71:69:d5:61:6d:af:d6:b1:d3:62:2f:aa:d9:1d:80:f5:5b:
         e0:62:63:63:cc:9a:9b:92:1f:e8:8d:8d:91:cb:d3:78:1b:fc:
         95:0f:63:51:12:de:76:a9:2a:f2:75:8f:c8:8f:b2:7a:02:63:
         fd:71:1a:c9:1c:fb:54:c5:33:18:50:05:ae:18:ca:cd:11:b4:
         b2:cf:af:b8:5e:ef:d7:c3:32:86:9a:cf:e9:95:fc:1e:29:1d:
         51:db:3b:22:e7:9a:d8:98:9b:85:87:79:36:7d:68:d6:7a:a3:
         1f:8f:3f:f4:aa:a0:2b:1c:81:44:c4:6c:85:bf:e6:36:42:5d:
         10:34:e1:af:4e:79:31:f8:5e:61:84:a8:95:41:8c:b3:73:76:
         4c:1b:1d:c8:7e:74:33:4d:fb:df:50:43:3d:5d:fa:d4:88:d3:
         c8:46:4b:e8:ee:0c:93:e5:3a:60:4e:a8:68:2b:73:92:3f:38:
         ec:5b:33:ac:55:78:6c:aa:5a:6a:83:51:30:f5:be:ed:02:8a:
         2b:c5:59:f3:e9:44:b3:df:5b:4d:81:be:a4:f9:b6:23:95:09:
         ea:48:3a:e4:c3:f4:0d:4e:5b:40:09:c7:2b:05:44:4c:45:8e:
         00:f2:52:b1:da:f5:cb:8d:f0:37:db:95:f6:ec:75:fb:dc:8c:
         98:8e:4d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:27:56 2026 by rpki-client