Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3bd5a4c2-9c56-34be-94a8-6b23dce593d8.roa
File:                     3bd5a4c2-9c56-34be-94a8-6b23dce593d8.roa (raw, json)
Hash identifier:          47dpDgKADuEDo/YtIf+epkBUwrLTz9ufzmCrnMFKjLw=
Subject key identifier:   0F:00:A2:79:80:4F:9D:01:A3:5A:5A:F3:64:A5:A2:70:B0:21:6A:C9
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D5B4FA5D7EEEB2942090FFF80
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3bd5a4c2-9c56-34be-94a8-6b23dce593d8.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     22616
IP address blocks:        170.85.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:a5:d7:ee:eb:29:42:09:0f:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=9ec4562c-124e-4c7d-be7d-9fd01d2615c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e9:f4:13:c0:db:d5:b1:71:54:63:2d:11:d2:
                    ef:52:39:d5:0d:dd:a3:b0:f0:3d:cf:e5:3b:7a:81:
                    c1:99:14:4a:a2:a3:1f:c3:48:7c:0d:be:d3:42:d5:
                    d8:59:07:bc:2e:98:3f:ba:67:73:66:9c:68:3a:9b:
                    de:7d:78:5f:67:d9:df:00:69:55:be:10:f8:a9:a6:
                    59:2b:2a:9c:94:62:cc:7d:93:28:47:1d:e6:a8:ef:
                    22:c8:76:a8:0c:d4:2a:f9:79:c3:2c:55:54:d8:23:
                    ae:fb:8e:ae:a1:4a:19:82:83:1e:6f:6b:1f:f7:a1:
                    1b:05:37:78:36:c6:63:bb:5f:ba:e2:eb:ed:b8:51:
                    02:52:63:66:03:a4:ac:db:07:d5:75:05:87:d5:49:
                    2b:60:2c:f8:72:5c:a0:24:1a:30:7a:39:cd:08:9a:
                    be:d7:e4:6a:2d:38:03:fa:c0:24:de:cb:fd:7f:12:
                    fd:1e:08:22:ef:86:c3:9a:95:11:f1:4d:dc:dd:e8:
                    90:da:65:e1:b8:88:49:95:47:0e:35:46:75:13:cc:
                    12:8a:98:a3:68:39:fe:25:bc:39:18:08:89:41:4e:
                    f3:71:f0:61:f0:c5:c8:10:3e:04:6c:70:31:35:df:
                    6a:8e:ca:3f:99:ec:ac:0a:22:e6:8c:95:5d:bf:61:
                    fd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:00:A2:79:80:4F:9D:01:A3:5A:5A:F3:64:A5:A2:70:B0:21:6A:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3bd5a4c2-9c56-34be-94a8-6b23dce593d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:f9:e6:a5:67:fe:7d:cd:e2:99:15:5b:15:4d:c2:e4:7a:93:
         8f:ef:d4:56:1e:25:cb:15:0a:94:4e:e7:05:ed:b2:a9:1e:d4:
         e3:c0:19:fc:b8:2a:3b:0f:cb:8c:cb:1a:be:24:fc:bf:db:3e:
         0d:90:31:a6:bf:23:b5:a9:1c:04:fb:c2:3f:bc:2f:e2:ff:7d:
         8e:87:99:7b:e7:25:a7:64:9f:46:f5:5c:25:a7:76:4a:d4:a7:
         3f:ee:ea:e7:44:a9:6b:6c:ea:29:71:f1:a3:85:01:e8:bc:cc:
         7d:88:9d:b9:c2:b0:f0:f5:83:d2:84:8f:76:56:11:17:51:92:
         f7:8f:e2:29:2b:2f:af:03:9b:76:a6:1e:be:07:29:8e:77:64:
         eb:30:b1:60:9e:a6:e3:29:94:49:fa:71:de:e3:ab:18:f7:41:
         85:0c:b3:6d:a6:a6:a7:40:4c:e8:d1:0a:67:3f:41:00:59:a8:
         0b:c7:d8:66:54:e7:4d:fd:c4:0d:26:fe:48:6e:01:e1:3e:82:
         fb:51:19:b7:f5:43:32:5e:cd:94:1d:7a:ee:d4:0c:72:57:6f:
         42:7e:55:33:0f:1e:b9:89:2e:c3:b4:95:ad:0e:67:a6:68:98:
         c2:14:55:fd:fe:1d:34:d0:4a:c6:09:cc:e3:66:76:45:4b:b9:
         a5:14:8b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:07:54 2026 by rpki-client