Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/07dd3854-10c7-3ae5-ba70-2d606b9699bf.roa
File:                     07dd3854-10c7-3ae5-ba70-2d606b9699bf.roa (raw, json)
Hash identifier:          jWhPvRO1jiRTfu/2aK07b+mhMd7YFGGEMgTLKbeLbGg=
Subject key identifier:   22:78:6F:27:CB:5A:B5:ED:D1:4F:02:E5:6D:BC:7F:12:E3:B2:3A:4B
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B9B3CF62D18A0E0D2868FDB00
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/07dd3854-10c7-3ae5-ba70-2d606b9699bf.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     22616
IP address blocks:        165.225.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3c:f6:2d:18:a0:e0:d2:86:8f:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=3ee3ec09-c054-4403-8253-7da7a84abbb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:47:05:03:bb:4e:3b:c3:37:48:bd:fc:32:c5:
                    ed:bb:80:26:ea:e6:a0:87:18:61:83:f1:1e:61:12:
                    80:14:7a:2b:4a:fa:3c:e6:9f:bc:2e:0b:86:87:a0:
                    22:9e:3c:f9:33:af:a6:31:69:c7:18:d7:5f:c4:04:
                    6f:13:fa:9e:d8:03:44:40:32:42:58:38:f3:b0:38:
                    4f:5f:a1:81:7e:ef:54:99:a4:b2:9d:f3:4a:6a:50:
                    93:c2:63:73:85:57:ef:98:0f:7b:78:b8:e3:d7:17:
                    ae:8c:ae:4f:e9:08:22:f7:02:7c:c4:45:16:bd:86:
                    75:e7:e1:30:67:15:0e:bb:a8:6e:97:cb:c8:5d:5e:
                    db:5a:e3:f3:b6:23:c1:93:0b:1b:66:20:2c:19:60:
                    fc:c5:6b:94:45:9d:05:cf:ea:83:4b:f9:c4:98:3d:
                    c5:f9:5b:fb:05:26:e2:e1:78:72:12:ba:40:57:08:
                    f5:b1:23:d0:75:bb:7c:78:5e:4e:62:16:ca:1e:ae:
                    f3:74:75:2a:2b:21:d8:b5:03:04:43:a0:db:dc:16:
                    88:98:d3:4e:f6:a7:55:8c:cb:c9:16:2b:51:05:65:
                    c3:97:d0:10:45:86:b6:94:2a:ad:6a:09:65:20:ec:
                    7e:d2:84:f1:e8:6f:8e:73:83:5d:b0:b5:0e:cf:a8:
                    a1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:78:6F:27:CB:5A:B5:ED:D1:4F:02:E5:6D:BC:7F:12:E3:B2:3A:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/07dd3854-10c7-3ae5-ba70-2d606b9699bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:14:03:f3:ee:95:38:c9:01:ad:db:e5:49:96:55:61:b6:b9:
         3d:42:47:7c:d8:37:db:58:73:ef:3a:a0:46:95:13:16:b1:84:
         87:e2:b9:ad:6b:c7:eb:50:c5:18:6f:5c:53:a4:94:99:30:07:
         cd:4a:d7:a9:d3:6b:ce:d5:d0:39:d6:be:32:f7:2d:46:cb:42:
         3c:20:fa:49:2c:0f:51:cd:52:22:7f:f6:51:a7:49:3b:62:e9:
         39:8f:50:75:d8:54:87:6a:93:3b:be:a9:66:84:e8:1f:4c:b5:
         2c:df:f3:cc:b9:54:67:bb:a9:ac:c0:04:ef:45:7f:73:83:87:
         4e:3a:6e:d4:f5:3f:9a:34:2b:a7:09:dc:64:d4:e1:bb:62:db:
         80:22:ac:8a:b6:62:0f:3f:8b:a4:65:78:74:38:bf:7e:aa:57:
         03:03:f0:fe:18:5d:45:02:02:6e:ec:c6:c7:df:1d:2d:60:1f:
         41:4c:78:e1:54:e2:80:ca:4b:8d:3a:23:a5:ff:28:f1:44:50:
         32:61:e0:76:8b:62:e3:8b:2f:e6:63:4d:18:07:be:94:6a:40:
         0e:fd:a6:2b:5f:01:ef:df:d5:08:83:13:cf:6f:12:7b:88:1d:
         1d:04:d7:02:2a:de:00:50:1c:26:34:71:33:65:bf:1c:96:cd:
         a5:cd:a6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:49:13 2025 by rpki-client