Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4e0f953e-28df-3677-9dc9-f4abd0915496.roa
File:                     4e0f953e-28df-3677-9dc9-f4abd0915496.roa (raw, json)
Hash identifier:          lqJCuB9Azwa1Cgb/KYVBM/JzLBIOt0oL4Z8yVoB5H34=
Subject key identifier:   28:EC:4A:46:2A:95:52:DD:D4:44:8B:D6:11:37:E8:F5:F7:F2:D8:5F
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B9B3CF873DAAB12F54EB1EB80
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4e0f953e-28df-3677-9dc9-f4abd0915496.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     22616
IP address blocks:        165.225.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3c:f8:73:da:ab:12:f5:4e:b1:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=b7a25b74-f5f0-4f0a-97f0-f101a3e6ce41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9b:19:7e:af:66:5c:2f:81:96:b7:a4:c9:b0:
                    ce:e5:3e:0f:fa:a7:df:4f:6d:e8:25:e2:0a:ca:09:
                    bf:6c:94:72:a1:e1:c6:c3:5f:e3:60:bf:e8:4a:82:
                    ac:a1:99:eb:52:9b:71:e5:d7:9b:9a:f2:6e:82:49:
                    5f:02:85:2e:77:99:e6:e0:25:78:ab:82:c9:8e:8e:
                    2f:14:98:80:27:9d:44:7d:1d:cf:dd:21:db:65:83:
                    a8:42:b8:07:c2:32:0f:04:f2:03:0e:a2:bd:0e:aa:
                    e2:78:99:44:e6:d3:bb:33:b6:68:0b:b0:bc:16:b4:
                    7b:35:4d:d0:79:21:5a:52:eb:aa:01:06:b7:f4:8d:
                    f3:73:80:58:78:71:93:7a:f0:d1:73:54:e9:19:5d:
                    e4:f3:cb:92:a8:d5:84:5f:d4:3b:65:66:99:25:c2:
                    c3:c7:a6:7e:80:32:a8:c0:7c:0e:a6:43:e4:80:13:
                    a0:26:95:20:bb:f6:e3:50:79:f5:38:c8:0e:86:18:
                    50:51:24:d2:93:ab:c0:4e:d2:df:ef:b8:0d:19:10:
                    0f:d2:1b:21:ba:25:ed:99:13:e7:81:9e:03:e8:a8:
                    cd:04:7c:75:62:83:4c:f8:08:13:e1:ba:4f:56:2d:
                    66:11:2a:3f:cd:cc:f0:a6:bd:85:77:92:44:2b:6a:
                    1f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:EC:4A:46:2A:95:52:DD:D4:44:8B:D6:11:37:E8:F5:F7:F2:D8:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4e0f953e-28df-3677-9dc9-f4abd0915496.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:c6:3b:aa:e4:9c:eb:72:e0:2f:54:4f:9b:25:7e:09:dd:a0:
         e8:e8:5e:5a:05:dd:f0:61:04:cc:34:33:60:9e:62:97:d8:09:
         53:56:07:5f:49:5d:c8:a4:93:9e:df:98:ee:ad:35:15:b0:0a:
         b6:81:9e:29:58:2b:ed:39:ef:21:62:a6:73:38:82:10:4c:10:
         cd:f7:3b:bf:9c:3b:31:8b:46:92:10:42:6c:6c:59:66:8e:94:
         40:e3:8a:2a:60:e1:cb:2c:11:4a:2b:0e:ad:7a:17:ac:6c:6a:
         e2:7e:38:6d:f6:d4:a6:bb:1d:ae:77:e3:18:4f:26:1f:dd:cb:
         7d:d3:eb:dc:03:40:b7:4a:20:19:9f:9c:3d:11:8b:a6:0f:a9:
         8b:11:42:e9:a9:1a:57:0a:be:11:d6:f1:5e:40:c7:78:bc:e7:
         1f:a8:88:06:73:ad:e5:8b:37:8f:6e:03:ec:14:2f:87:de:5b:
         fd:2e:b2:3d:f1:66:5f:cd:ae:95:4f:ec:d1:5b:e3:da:ab:8c:
         9e:32:34:78:36:36:65:6d:0c:c0:7d:4a:a8:a5:c8:9a:e2:d4:
         02:1f:8f:55:52:72:dc:03:1f:e8:78:a6:bc:69:fb:21:ae:77:
         7c:cc:6a:78:28:6a:09:50:07:2b:cd:46:a6:1e:f6:28:80:0e:
         da:db:82:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:43:30 2025 by rpki-client