Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/dd786ff1-b85e-36dc-9a4e-04400e364851.roa
File:                     dd786ff1-b85e-36dc-9a4e-04400e364851.roa (raw, json)
Hash identifier:          GM8azUEAYemqZB4gXYwO8FuFro5hVpVcWzNMnDiBKfU=
Subject key identifier:   B4:66:AA:FD:FE:D3:AD:82:C6:86:D2:58:45:98:26:D1:F8:C8:57:46
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E885A60D32F382CA2232E51C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/dd786ff1-b85e-36dc-9a4e-04400e364851.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     46475
IP address blocks:        144.225.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:60:d3:2f:38:2c:a2:23:2e:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=32fa1a43-9777-498f-ac78-3526fd760b3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:49:85:8d:5c:a1:00:4c:56:12:54:51:4c:cb:
                    c9:05:4e:2d:06:00:c7:d5:b3:53:e0:9f:c3:60:34:
                    c7:5a:ad:44:24:04:72:d5:c9:bc:22:20:df:e8:02:
                    ad:de:53:f6:14:99:7a:66:9b:7b:71:eb:13:b0:6c:
                    49:90:b7:74:51:86:c4:c8:3e:81:8c:bc:56:42:39:
                    ce:75:4e:1f:42:d8:0b:a9:da:2b:f0:b3:5b:d2:7b:
                    30:eb:34:7f:2e:61:a7:c8:22:00:8b:8d:0b:14:94:
                    a8:2c:6b:8f:95:17:5c:ff:af:8b:a3:a8:9a:be:77:
                    d5:69:cd:ee:43:94:ae:88:3e:73:7d:a7:33:17:65:
                    af:37:9f:b6:0f:3c:01:73:23:ab:41:89:06:26:93:
                    63:d4:65:46:49:e5:77:8e:31:7d:39:ca:57:15:cf:
                    92:f1:59:3b:39:8c:ce:b9:27:22:d2:56:be:70:ef:
                    3a:b4:24:e0:df:2a:34:f3:e0:a4:f3:c6:d8:a8:5f:
                    29:94:a0:85:e8:ec:9f:34:37:42:70:b3:8e:a3:5c:
                    06:19:d1:3e:fc:4e:5e:1c:e3:10:51:8d:1d:4f:70:
                    f3:49:02:f2:95:49:73:17:5b:48:60:3b:33:00:69:
                    83:2b:73:09:9e:85:38:f9:b9:e5:39:ff:1c:bf:fd:
                    a8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:66:AA:FD:FE:D3:AD:82:C6:86:D2:58:45:98:26:D1:F8:C8:57:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/dd786ff1-b85e-36dc-9a4e-04400e364851.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.225.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:28:30:83:e6:46:49:5a:3c:65:4c:64:7f:6a:ca:f4:5f:a2:
         cc:ad:20:a0:65:60:b3:c8:86:82:6c:ec:5a:76:41:1c:3b:e5:
         6f:17:c1:90:d4:91:b8:c1:17:51:d5:1b:2a:d2:12:aa:70:c5:
         84:72:bb:85:97:81:f6:9d:32:df:bd:d9:d2:a7:96:dd:f2:4d:
         57:50:9d:c2:cc:65:5f:59:b8:70:25:5a:80:65:36:03:27:e7:
         c2:47:92:9c:ed:69:d2:db:c0:8a:78:08:04:91:3a:42:fa:b4:
         e5:fd:ad:d2:9d:35:e1:ec:ba:0d:b6:91:df:3d:90:41:ee:9a:
         48:0f:15:37:c3:9d:8e:25:32:a1:df:a6:c3:25:9d:0f:4c:ea:
         91:3a:dc:2f:f2:37:55:a1:11:a2:ec:98:4b:fc:8e:fb:6b:e1:
         97:3a:9d:87:55:79:e7:75:83:7b:aa:ff:f9:45:7e:e9:38:b2:
         57:7e:1a:1b:61:60:9b:59:cd:79:f0:80:ab:72:7d:27:64:38:
         3f:a4:89:41:56:7b:c8:0e:85:14:27:61:9c:0f:a6:51:46:bd:
         2f:8d:c6:e8:83:0e:4e:26:af:f2:7f:52:43:12:68:9b:62:d7:
         dd:08:c9:39:76:0a:07:ba:34:b1:16:69:ca:b8:01:c7:bb:cd:
         2e:77:b2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:45:25 2026 by rpki-client