Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2cb305dc-42c2-34fa-9a29-80d2d83d6abd.roa
File:                     2cb305dc-42c2-34fa-9a29-80d2d83d6abd.roa (raw, json)
Hash identifier:          OxZu3QARjqP/8nEgf78l1ouz1gQQo06JJ5AjhlYR+B0=
Subject key identifier:   0B:C2:EF:6E:A1:40:4E:D2:A4:C5:60:E4:97:53:E4:E7:00:A4:C1:28
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584CF85238C519BFD8C9CADE1700
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2cb305dc-42c2-34fa-9a29-80d2d83d6abd.roa
Signing time:             Tue 24 Feb 2026 14:00:41 +0000
ROA not before:           Tue 24 Feb 2026 14:00:41 +0000
ROA not after:            Mon 25 May 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        165.225.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f8:52:38:c5:19:bf:d8:c9:ca:de:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Feb 24 14:00:41 2026 GMT
            Not After : May 25 13:00:41 2026 GMT
        Subject: CN=0757b27c-4485-4348-a049-fe61a5e5bee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:21:a4:03:80:f7:37:25:00:7b:d5:71:05:c6:
                    3a:9c:e8:91:42:2b:3c:d7:4f:28:43:9e:24:8d:ec:
                    13:0c:e7:f9:5d:0c:19:65:20:8a:73:ee:65:42:05:
                    98:5f:78:c8:d1:bd:3b:38:44:ce:cd:75:6c:3e:2f:
                    98:56:58:87:c4:46:30:5f:c0:08:9b:b1:96:a9:04:
                    54:db:25:80:be:fa:75:ad:3e:1d:90:8f:e4:f7:4c:
                    6c:7e:12:a5:de:c6:4d:77:6a:57:35:58:c3:f1:c3:
                    7a:64:77:f3:9c:fb:ae:81:f2:47:7c:45:88:31:79:
                    51:58:0b:8b:24:1f:6e:bb:ce:20:5f:ef:1a:1e:89:
                    65:c2:5a:99:85:2f:a7:17:b6:f3:4e:d0:a6:d9:34:
                    f0:ca:5a:11:e5:c4:a7:c2:b4:47:d5:0e:10:79:70:
                    e9:ec:04:a5:8a:35:2c:9b:db:d7:4c:a1:96:50:61:
                    89:27:ec:c4:c8:d0:20:5f:ff:fa:b3:86:38:d1:00:
                    7e:db:b9:ee:13:1d:16:c6:b1:a9:63:b0:93:9d:27:
                    a2:cf:c6:63:fb:84:0f:5c:70:82:d0:26:f0:6c:c1:
                    a1:bb:0e:ea:cc:1d:16:d2:89:35:02:e8:18:63:b9:
                    6e:59:91:58:bc:4e:7d:9e:e9:5d:46:df:18:13:97:
                    45:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C2:EF:6E:A1:40:4E:D2:A4:C5:60:E4:97:53:E4:E7:00:A4:C1:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2cb305dc-42c2-34fa-9a29-80d2d83d6abd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:42:9e:7c:47:26:d4:cd:bf:8d:05:5b:1c:d5:06:36:03:b1:
         cb:91:dc:59:bc:1e:2a:60:1a:a5:c8:e7:f4:7f:86:37:0a:7a:
         c8:0c:9d:69:fd:2e:3e:c0:27:c7:63:9e:8e:03:2d:80:b1:31:
         09:bf:98:63:2c:3b:d8:9e:2f:a9:25:23:8c:70:79:1d:ed:0b:
         f9:af:22:83:21:6e:9b:f4:11:7e:73:98:5e:dc:23:44:d8:e9:
         cd:5e:f1:16:92:a9:42:7f:14:83:ea:6c:f9:f9:08:a2:ae:06:
         b2:0f:28:9b:ca:68:ff:52:6d:a1:a4:b2:cf:76:a8:db:63:92:
         6f:05:9d:34:d0:08:7e:3e:4e:76:3b:83:8d:19:9d:64:34:54:
         c3:65:20:1e:22:d5:13:a9:2e:91:95:bd:bd:71:f4:c5:ee:50:
         c6:fc:64:81:ab:4d:18:61:42:83:a7:98:35:7d:db:4a:d2:a4:
         9a:b5:33:42:80:8f:27:b6:32:44:a3:c6:4e:67:8f:87:8f:f6:
         8e:d0:5b:17:62:46:e2:83:79:87:8b:92:de:b7:e5:e2:38:7d:
         be:03:52:b9:75:71:32:96:4a:48:74:5c:c8:7e:34:9d:12:00:
         88:71:77:9d:8b:6b:ba:fc:e9:8a:0e:78:58:eb:b0:31:88:56:
         25:8e:a6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:52:08 2026 by rpki-client