Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/50ca3bd8-aab7-3097-8ea0-893ddba3c15a.roa
File:                     50ca3bd8-aab7-3097-8ea0-893ddba3c15a.roa (raw, json)
Hash identifier:          bWoy/Ju+YcaEiS5TSQPgKT4mtiWNCEfRxduoF3fzsRk=
Subject key identifier:   AD:BB:BE:47:6E:24:BB:70:72:55:B0:36:91:CD:00:3C:4F:0E:31:AB
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D5B4FAE3C3A41D546A2BF8E64
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/50ca3bd8-aab7-3097-8ea0-893ddba3c15a.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     62044
IP address blocks:        165.225.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:ae:3c:3a:41:d5:46:a2:bf:8e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=fbe5368c-9e3b-4d11-98d0-6fad860426d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4d:7e:95:d9:b0:b1:f2:6a:c7:15:00:96:84:
                    08:fb:24:fb:c4:85:bf:64:85:4c:54:42:87:ea:cf:
                    d7:f2:35:13:d3:60:e9:b1:c1:ae:cd:c1:1b:13:f4:
                    84:55:d7:e2:57:93:82:4d:af:2a:c9:79:ee:f0:47:
                    d6:e3:8c:f3:4d:dc:48:64:46:fc:5b:c4:56:a3:fe:
                    17:ce:96:d6:ee:5a:27:e4:65:c1:c2:99:5b:eb:9d:
                    b1:27:d6:24:91:c9:65:6b:2a:5a:dc:1a:96:94:e8:
                    ae:48:1c:b7:e8:43:74:15:ba:e0:fe:d6:f5:d5:e6:
                    d4:3d:d6:1e:54:17:84:44:c1:7c:09:e1:c4:49:c3:
                    cf:4a:70:75:c6:46:d7:2b:72:8f:6f:18:44:6a:68:
                    8b:02:bf:8a:f6:a0:52:ed:0c:77:2a:b1:16:03:dc:
                    90:25:17:81:e6:c1:38:21:90:be:08:4a:87:93:11:
                    48:ff:06:9d:60:22:ed:61:19:36:74:86:3e:f4:d6:
                    54:9a:e2:ad:c3:95:dd:bd:a5:2c:db:fd:57:e6:67:
                    34:d3:7a:32:e3:52:83:3a:4e:28:eb:e7:f5:60:5b:
                    f6:41:3f:81:17:c7:5d:21:f8:6f:d5:fa:f8:6f:3a:
                    2e:e9:db:ae:b6:12:ee:5b:2e:c0:38:76:c7:9b:a1:
                    8d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BB:BE:47:6E:24:BB:70:72:55:B0:36:91:CD:00:3C:4F:0E:31:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/50ca3bd8-aab7-3097-8ea0-893ddba3c15a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:09:84:31:c2:2a:42:57:fc:ba:81:8d:de:f3:e6:87:36:c9:
         e0:4a:98:d0:6e:7c:27:6e:a4:a6:3b:c4:37:ac:20:35:32:d5:
         51:f9:ab:68:65:48:36:1f:c9:8b:78:3e:54:ed:21:75:38:66:
         ab:11:4c:87:23:26:4d:c6:e0:13:90:e4:c0:01:da:9f:f6:fd:
         9c:8a:14:76:1c:21:fc:3a:ca:aa:a8:3d:30:51:18:01:42:b1:
         a5:74:df:45:aa:fb:3b:66:b9:5d:d9:a7:da:79:5f:73:10:07:
         fa:58:22:36:38:74:44:1f:60:9d:d2:bc:ef:ab:1b:8b:47:de:
         d1:de:ec:18:c4:e0:eb:aa:ce:c8:59:85:57:68:47:74:e7:78:
         31:a1:0c:73:3b:1b:65:9f:8c:f0:cc:aa:49:e5:84:6d:01:f6:
         12:97:15:f5:3f:62:44:32:c0:11:6d:56:94:d2:3a:29:f7:6d:
         93:81:d3:3b:90:4b:7d:30:3a:ef:51:03:a3:8f:a0:4d:4a:82:
         ed:5e:ad:d8:9d:d7:ae:3d:8d:27:07:7c:ba:5f:d9:f7:2a:eb:
         d6:e9:ba:21:2c:cb:b1:f5:43:ac:88:21:d9:96:de:37:1b:83:
         8a:f0:c8:a5:59:0f:4e:91:a2:51:43:9a:42:82:fd:5b:c6:57:
         3a:9b:e7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:41:27 2026 by rpki-client