Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac/8e84089f-0529-3aa8-b13c-d9c9935f9928.roa
File:                     8e84089f-0529-3aa8-b13c-d9c9935f9928.roa (raw, json)
Hash identifier:          9uXAyp5gfhP4C8JRaazCr5pUTNzyvKOq/6vmLuQ+Z7c=
Subject key identifier:   75:42:9F:78:7C:89:1D:3D:FC:85:0E:D7:28:19:90:FF:EF:BF:41:8D
Certificate issuer:       /CN=c24d54f2-22ea-4242-9583-989286d76aac
Certificate serial:       010D0C9F4328584DB4A57DBC48C87398178A7380
Authority key identifier: 6D:4B:D5:F6:3C:E8:2A:AF:29:38:C3:09:AF:7D:10:2D:FF:E8:E6:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac/8e84089f-0529-3aa8-b13c-d9c9935f9928.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     19382
IP address blocks:        162.221.145.0/24 maxlen: 32
                          2605:7c0:2000::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac/c24d54f2-22ea-4242-9583-989286d76aac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac/c24d54f2-22ea-4242-9583-989286d76aac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:7d:bc:48:c8:73:98:17:8a:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c24d54f2-22ea-4242-9583-989286d76aac
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=9076fb1b-7879-44d9-b5dc-869b5b91fcf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:97:9b:60:47:75:72:3d:26:5c:55:ff:77:2c:
                    12:03:2b:e0:e2:f7:43:8b:4a:b0:7f:f2:2c:d6:1a:
                    42:27:0c:14:cc:a5:7c:b3:e2:ab:9c:73:3d:51:b1:
                    a1:97:64:f8:4c:54:d2:46:73:c1:17:72:7e:c2:db:
                    40:3e:6f:e8:ed:76:2b:a7:85:d4:0e:b2:5f:85:1b:
                    dc:36:18:b7:ae:ab:90:d8:9b:8d:ba:7f:62:c6:99:
                    29:24:f2:64:f0:78:08:9a:3d:69:85:24:41:50:19:
                    d5:3c:0b:82:ce:66:ce:c7:1f:31:80:7c:e6:02:6c:
                    f8:b7:34:16:bc:58:13:7f:10:1b:d5:62:6a:ed:10:
                    b2:8f:51:e2:2c:b6:93:8d:6a:43:51:23:f5:84:47:
                    53:98:49:83:62:2b:7c:7e:01:cb:c2:87:a9:70:94:
                    a2:91:43:55:d2:88:c7:55:17:82:29:be:fd:c4:02:
                    9f:c8:68:4d:39:91:ed:cb:00:02:cb:f1:ca:17:f1:
                    d6:7a:46:80:d1:fd:94:54:6f:4f:3b:22:a3:9b:ac:
                    a1:77:0d:92:2c:42:77:b9:c1:54:a7:59:cd:7b:ac:
                    f1:69:1b:73:f3:d4:f9:2b:9e:d7:cc:dc:35:a1:8d:
                    25:59:03:65:6b:eb:e3:e7:be:08:68:e1:f9:5d:cc:
                    c6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:42:9F:78:7C:89:1D:3D:FC:85:0E:D7:28:19:90:FF:EF:BF:41:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac/8e84089f-0529-3aa8-b13c-d9c9935f9928.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac/c24d54f2-22ea-4242-9583-989286d76aac.crl

            X509v3 Authority Key Identifier:
                keyid:6D:4B:D5:F6:3C:E8:2A:AF:29:38:C3:09:AF:7D:10:2D:FF:E8:E6:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.145.0/24
                IPv6:
                  2605:7c0:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:1d:7f:de:0f:32:bd:b9:d8:38:99:3d:55:3a:8e:5b:0b:81:
         e1:e2:49:b7:93:4a:9f:72:27:32:e4:44:57:d7:37:f5:74:d4:
         ab:04:16:34:77:07:af:45:70:b6:21:05:7d:6d:31:c6:66:f1:
         d3:e8:dd:08:46:8a:7c:6c:13:81:e9:98:fb:1a:29:bc:56:18:
         39:34:4c:45:fb:4d:ac:00:75:b6:2e:17:70:ec:c1:1a:be:20:
         39:c1:73:b3:67:52:9d:6f:d1:59:0b:6b:7b:57:a1:79:c4:8a:
         a8:03:db:35:70:45:24:7d:c3:f8:4c:a9:39:48:d1:66:3e:9d:
         ae:b0:60:7b:42:a2:69:1a:b9:1c:a7:ee:f6:cd:95:4b:4a:2e:
         41:14:2f:59:8c:1a:25:fa:51:7a:ce:a3:a9:b0:40:e0:4e:92:
         f5:6f:7e:56:52:60:3a:b9:3d:20:b8:b8:eb:18:1c:ea:97:cc:
         b7:1a:ec:db:9f:2c:9d:78:3c:90:83:7d:b1:29:c6:9c:3e:32:
         e1:0c:9e:2d:55:53:56:d8:23:18:2a:04:0d:7e:99:dc:69:05:
         19:ab:1c:58:84:dc:6a:e8:fa:d4:70:5e:73:f6:9b:1c:f9:b7:
         5a:fe:ff:23:78:ad:6b:9f:7d:cd:91:33:df:d4:73:da:c1:eb:
         43:82:f3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:15:56 2026 by rpki-client