Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/42cd57f2-0e19-3b53-b457-0f0c591d16bc.roa
File:                     42cd57f2-0e19-3b53-b457-0f0c591d16bc.roa (raw, json)
Hash identifier:          idsNd+sejj0vXBYL2VIQXMMpuX5aFG/Ffg3QY5yY4xQ=
Subject key identifier:   58:15:4C:78:30:8B:75:63:07:32:88:EF:00:A7:A2:E2:6C:3D:A0:7A
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D5B4FABA5473CE4AE1736D400
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/42cd57f2-0e19-3b53-b457-0f0c591d16bc.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     22616
IP address blocks:        165.225.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:ab:a5:47:3c:e4:ae:17:36:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=54447d54-2f51-44f3-bf12-43dcedf0d687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:17:a0:c7:c9:aa:fc:0f:ad:3f:85:8a:4a:fc:
                    27:39:a0:de:19:c5:64:20:93:a6:36:41:93:6e:5c:
                    de:f3:d6:04:58:cc:7d:ca:8e:c6:2e:d5:c4:48:c5:
                    64:8a:1b:36:ef:00:f9:d5:3b:43:4d:cd:95:ad:f0:
                    10:3a:48:bb:2d:6a:8f:02:40:01:ea:5a:69:3f:0d:
                    76:09:ab:97:39:df:6e:fe:bd:77:55:d4:62:e5:ad:
                    a7:28:ae:1d:70:7e:5e:35:96:b1:a0:1c:04:4c:00:
                    8c:b8:2e:ca:47:83:22:d9:de:2d:52:83:00:e4:24:
                    d6:18:78:e0:46:da:81:f8:b8:2b:af:da:f9:ae:46:
                    95:5e:ae:92:f0:b4:6a:d9:04:50:ce:d4:fa:b0:db:
                    65:60:f9:f0:3d:9d:e4:bc:1c:ab:88:09:cf:6c:14:
                    bf:28:8e:85:5d:cb:8c:b1:ab:d2:63:cf:c5:18:16:
                    7a:91:00:38:7f:0b:6c:55:71:8e:c0:42:a9:91:48:
                    8c:e8:10:7c:26:c8:d6:87:21:50:67:94:61:39:56:
                    14:aa:3d:f5:66:94:9d:40:39:6b:20:1d:da:6d:7e:
                    d7:75:43:e0:f1:d2:a3:3e:b5:e7:ad:46:6c:d3:d9:
                    26:b4:59:85:aa:eb:88:a9:5c:23:bf:25:d0:65:bb:
                    93:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:15:4C:78:30:8B:75:63:07:32:88:EF:00:A7:A2:E2:6C:3D:A0:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/42cd57f2-0e19-3b53-b457-0f0c591d16bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:b0:1b:a3:1b:56:2f:b5:04:00:de:2d:e7:2f:4e:8f:6f:ea:
         5d:55:11:47:58:ba:36:6e:36:09:81:c0:1c:1b:be:a9:61:21:
         1c:fc:25:12:04:a7:9a:f3:29:1b:fc:a3:95:31:d0:11:77:42:
         65:83:00:60:6c:30:1e:6d:a5:b0:66:88:82:9e:b7:fd:b8:ef:
         44:27:2f:4d:b3:5b:3f:cb:0c:08:9e:51:fd:76:41:3b:ea:b7:
         9f:b1:6a:99:fb:be:b3:06:b4:c1:77:62:8d:97:d1:d2:8e:db:
         d5:54:2d:2c:2c:7a:09:20:13:4f:5f:0c:5c:1b:d0:9c:bc:19:
         5c:31:68:ed:f4:99:4b:08:76:ec:07:31:29:c2:0e:29:d8:50:
         60:b5:66:92:86:25:45:2a:1d:20:16:40:2b:f2:f1:17:d6:fb:
         b1:6e:38:3b:81:72:27:ae:c9:91:c8:4e:f9:cf:07:13:64:d0:
         7d:3b:97:76:9b:db:1f:18:0f:75:97:2b:23:19:7c:78:e9:bd:
         33:df:d3:86:07:a7:03:83:81:3a:9b:56:98:9d:73:f6:48:98:
         c2:32:d4:62:88:9e:ac:47:8a:74:e4:32:fc:7f:30:b4:84:f8:
         85:c9:60:af:a6:53:9e:bf:8b:c6:b5:2e:12:38:77:93:cd:88:
         41:61:18:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:39:05 2026 by rpki-client