Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/be4b68cd-943a-3d2f-9134-b2843ec34eb9.roa
File:                     be4b68cd-943a-3d2f-9134-b2843ec34eb9.roa (raw, json)
Hash identifier:          qV0ZVSxTH7304tF8E126Iox+F0IQlvls0gwJTRiKo6Y=
Subject key identifier:   7A:EF:A7:64:64:D1:4E:7C:A8:8A:71:32:EA:90:58:83:AB:06:E1:E0
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584DCFE3521F619B6F06E318BB80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/be4b68cd-943a-3d2f-9134-b2843ec34eb9.roa
Signing time:             Tue 12 May 2026 19:11:56 +0000
ROA not before:           Tue 12 May 2026 19:11:56 +0000
ROA not after:            Mon 10 Aug 2026 19:11:56 +0000
asID:                     401152
IP address blocks:        144.225.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:e3:52:1f:61:9b:6f:06:e3:18:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 12 19:11:56 2026 GMT
            Not After : Aug 10 19:11:56 2026 GMT
        Subject: CN=79689da5-8032-4f84-a198-c0be79bc5e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:49:cc:52:75:c9:48:7d:68:fb:d3:28:94:c2:
                    6b:b2:09:8e:9d:91:87:14:5d:13:c3:d2:90:ff:1e:
                    e0:3e:c6:57:77:ae:c0:f6:e4:4a:bf:85:ff:10:1a:
                    df:ca:37:6d:3a:2c:0f:3f:d1:87:46:88:6a:b1:03:
                    4f:26:57:58:0d:c7:aa:04:b5:2e:1f:27:98:73:69:
                    8b:cd:e1:21:a9:73:0f:a9:9b:d6:1a:51:55:a9:bd:
                    6a:e8:fb:21:4f:b0:42:3e:a2:f2:21:26:4d:95:59:
                    ab:37:99:8a:b3:6d:7e:55:8b:f1:3f:f9:9b:45:ac:
                    99:a7:48:ae:af:0f:7a:e9:6b:24:be:2d:13:be:99:
                    45:5d:d4:38:28:4f:ce:bc:28:8a:37:44:73:49:50:
                    cf:d4:39:9d:ad:26:cc:78:e4:1c:f1:3d:d8:35:01:
                    85:80:b4:fb:9a:76:0f:80:3c:36:70:9f:51:b2:e0:
                    4c:72:15:92:f0:f2:d9:ec:c0:bb:83:af:ae:09:e9:
                    b1:92:e0:b5:0b:03:b4:69:fa:6f:1e:c1:b3:90:88:
                    bc:3d:f9:89:68:d0:83:99:8d:e9:b0:49:db:dc:42:
                    c8:c5:f1:ba:08:8d:4b:4a:76:2d:bb:ea:0f:c0:e2:
                    60:4e:1d:1d:be:43:a2:1a:d3:cf:ff:c0:68:3b:6e:
                    e8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:EF:A7:64:64:D1:4E:7C:A8:8A:71:32:EA:90:58:83:AB:06:E1:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/be4b68cd-943a-3d2f-9134-b2843ec34eb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:c3:cc:94:6c:29:f6:b7:dd:c1:4f:e4:f5:d9:22:56:62:45:
         48:3c:45:f2:7b:b7:2e:c2:f0:45:7f:ad:d3:10:d3:f3:2a:cc:
         4c:8d:5a:c7:b1:22:00:c7:d0:fa:e5:2e:0e:f9:4e:ac:13:f6:
         b3:d8:64:1b:40:ba:e3:58:3e:2d:2b:3b:45:c2:ee:11:c7:a3:
         64:03:ba:96:97:76:c3:62:d2:58:b6:53:d6:97:2d:c5:83:84:
         55:8f:73:1b:a9:b2:ff:f3:84:c5:e3:4a:e5:9b:b8:f2:40:f7:
         02:b2:6d:5e:2f:72:3f:5d:23:ae:96:b0:35:80:79:70:4f:9b:
         c0:91:7c:06:eb:03:f0:94:60:6f:37:fd:02:1f:49:a5:c3:58:
         5e:28:b2:94:ee:6f:b8:61:76:26:9a:61:17:51:e1:8d:e6:4b:
         8b:16:f3:06:65:e2:66:71:d6:f1:c8:73:4a:aa:50:e9:28:16:
         11:fe:1b:81:96:16:41:2e:06:b9:bd:49:32:77:c8:83:22:cb:
         62:ad:30:af:3c:f5:ce:d2:ed:bb:69:33:12:85:4e:97:63:7d:
         27:a4:6a:b8:07:63:5f:12:3f:19:a8:45:d7:6a:71:13:d4:0e:
         04:18:70:6b:3b:96:e1:6e:25:7d:ce:93:e5:e5:15:94:18:ce:
         f4:3e:fd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:52:43 2026 by rpki-client