Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/01b696ef-9ac2-366b-b2fd-6c31eba967ff.roa
File:                     01b696ef-9ac2-366b-b2fd-6c31eba967ff.roa (raw, json)
Hash identifier:          Fngk7uVtAmD0BcVcRKtfuGMbd7kv0OO0nm1/oaFBFJY=
Subject key identifier:   84:86:E8:E8:AC:58:D0:AD:34:A5:00:7F:8C:93:26:45:72:C6:44:D0
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D5B4F92065BB6B654F05E3DA4
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/01b696ef-9ac2-366b-b2fd-6c31eba967ff.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     22616
IP address blocks:        165.225.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:92:06:5b:b6:b6:54:f0:5e:3d:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=6633f934-f005-4fbd-81cd-73e9ae10bb52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:7c:33:6f:70:2c:d5:a0:70:89:97:74:ec:a0:
                    0e:88:a1:91:7e:8a:0d:d5:42:56:bd:bc:93:0b:4d:
                    c0:8c:f9:c4:d6:9a:f5:69:0d:49:fe:82:72:69:ba:
                    5d:c7:60:a3:b0:0e:30:8d:9a:97:33:38:74:e8:0a:
                    73:21:d8:07:fd:95:72:c0:8c:d7:00:fb:2f:36:e3:
                    fb:d7:b1:47:ed:2d:ab:4f:4b:ce:4a:50:8e:ff:cb:
                    8c:7a:ed:18:5a:12:86:d0:a3:7f:b1:ca:36:68:f5:
                    fa:31:e2:d2:46:45:43:9e:36:f1:0d:6c:27:8f:85:
                    26:11:9e:ae:6f:a2:a6:b5:fd:b6:48:4a:7e:b4:9a:
                    08:ea:05:f9:05:a7:9a:14:a8:76:ea:aa:7d:71:33:
                    6e:01:e7:22:d4:79:6d:f4:9f:be:46:a9:92:b7:26:
                    56:f1:ed:71:0a:8a:2d:31:d8:81:60:0c:42:94:20:
                    73:9f:16:34:86:80:2d:22:5d:ff:ad:26:b6:88:1c:
                    24:ad:34:2e:4b:cd:55:36:12:2d:c1:bf:4e:07:e1:
                    95:74:6a:59:cc:7e:49:ab:49:da:69:ba:92:24:98:
                    63:7d:06:d2:af:9e:e2:b3:86:00:93:c2:3f:78:ff:
                    3e:c1:4d:33:84:0b:72:d7:c5:59:27:6b:51:8f:47:
                    15:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:86:E8:E8:AC:58:D0:AD:34:A5:00:7F:8C:93:26:45:72:C6:44:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/01b696ef-9ac2-366b-b2fd-6c31eba967ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:5e:9a:2f:88:09:24:64:a7:eb:d9:44:c3:14:9d:28:b8:9a:
         e5:e1:7f:8e:f8:68:45:c9:3d:71:ea:4e:02:a0:02:46:87:43:
         0c:9b:a8:cf:69:5f:39:30:66:a8:d0:ab:22:99:8b:36:55:24:
         cb:5d:2b:b7:1a:3d:bc:14:16:c4:19:4a:1d:87:a9:59:02:79:
         62:fc:99:05:2e:75:39:90:e7:5f:3a:17:9f:72:5e:9c:be:43:
         79:3e:25:db:10:64:47:da:df:8d:21:d5:f7:51:4a:be:41:42:
         cd:04:79:72:1e:22:29:d8:6c:d5:c8:98:6d:ee:2b:ea:e1:17:
         f4:d6:56:2e:46:c6:32:4f:6f:cc:27:28:db:2c:c3:65:07:1c:
         b7:a5:2c:0c:ee:ce:f0:58:0c:20:53:8a:39:77:7a:50:74:50:
         52:a7:15:90:70:34:21:a7:11:04:91:18:ce:05:d0:9e:93:fe:
         26:f2:d1:88:9d:c2:4c:64:cf:d3:19:51:b9:fd:f3:2c:44:8e:
         ca:db:59:35:96:e4:3d:d6:9d:43:53:1d:8f:ab:8b:6d:c1:98:
         41:4a:5c:6b:2a:2d:99:c0:06:9a:a4:65:37:b9:bb:41:a0:cb:
         49:25:e6:6c:7d:2a:6c:db:03:24:2c:55:14:6a:b4:1d:51:fb:
         16:1e:57:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:18:07 2026 by rpki-client