Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/6453da9a-a624-37dd-997d-744f78a0b4e1.roa
File:                     6453da9a-a624-37dd-997d-744f78a0b4e1.roa (raw, json)
Hash identifier:          eOlWmZcTv10dG1jRi+Qw8iaTYwBa1h74b2XhvcQ31gM=
Subject key identifier:   A0:92:02:FC:AA:A7:97:37:1D:8C:76:A7:B5:05:B2:81:18:9D:D7:5E
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D5B4FAC1574BD7AB0F922E270
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/6453da9a-a624-37dd-997d-744f78a0b4e1.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     22616
IP address blocks:        165.225.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:ac:15:74:bd:7a:b0:f9:22:e2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=1b864707-0bbd-400b-a9d1-506c82c0a512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c6:de:ae:2b:7e:87:39:ba:db:4c:ea:75:f2:
                    48:7b:fe:fb:04:bb:00:4a:c3:7c:7b:70:17:16:38:
                    b8:a0:32:e2:c5:79:04:e0:44:e9:2b:3e:90:28:29:
                    9c:fc:e6:7d:cd:80:eb:be:e0:a3:e0:95:e3:30:b4:
                    2c:e5:00:bf:ff:30:cc:f4:97:61:20:dc:df:fe:53:
                    43:ac:84:1f:f8:6a:e1:60:63:1c:22:04:87:55:09:
                    8d:f1:29:9d:b1:62:fe:15:4a:5f:a7:a4:4a:b6:ca:
                    0e:8a:97:bf:a2:4a:2c:b5:eb:24:67:3e:2f:6e:2d:
                    f9:99:35:70:05:2b:fb:b1:41:bb:5f:05:4f:1d:d9:
                    c4:8c:a9:65:7f:f7:04:41:d5:21:f8:f4:01:1f:d4:
                    2c:cd:74:a5:83:54:6b:0f:88:fe:8d:ae:c7:f7:58:
                    b0:86:22:f2:eb:da:d8:30:a1:e3:bb:76:ba:f4:63:
                    a5:35:e0:e1:5e:e3:ef:6a:10:cd:07:0e:55:7c:af:
                    ff:91:fd:99:ef:39:15:58:f3:4d:7a:66:41:9c:2d:
                    c2:c7:ad:8e:6f:d9:eb:a7:a1:02:d4:f4:9c:ae:08:
                    1a:d4:a2:0a:42:dd:fb:74:65:dc:19:91:ea:7a:28:
                    be:18:82:db:d9:cb:13:0e:cd:ba:69:5b:be:27:30:
                    44:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:92:02:FC:AA:A7:97:37:1D:8C:76:A7:B5:05:B2:81:18:9D:D7:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/6453da9a-a624-37dd-997d-744f78a0b4e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:00:71:01:b2:64:38:b8:04:8b:1c:9b:b0:e3:82:3d:7c:3d:
         91:4f:bd:4d:09:20:36:8a:12:12:2f:4e:65:be:5c:0d:9f:ac:
         90:ec:d3:65:1c:5f:75:13:83:33:f4:cd:32:59:fb:61:4e:6a:
         ce:0e:1e:99:f0:cd:85:e5:8e:75:00:0a:92:96:76:0e:0c:d6:
         81:92:cc:5c:5c:16:e4:f9:dc:fb:86:c9:99:88:aa:8e:4d:c9:
         54:f2:9a:d4:e0:b8:94:1e:a8:74:6a:c0:b0:39:f4:9a:ac:30:
         c1:f5:ad:c5:48:f8:a0:71:a7:47:b7:0e:f9:62:56:d3:68:bf:
         56:f9:55:ae:11:dd:7a:69:1e:bd:cb:89:3b:19:27:3c:34:ee:
         4e:48:7d:bc:2f:1c:2b:d5:18:a9:06:4f:fc:c8:dd:80:28:30:
         3d:3c:e5:99:5d:28:13:ce:a7:01:ee:46:7a:c0:35:85:5b:63:
         cc:f4:e0:6c:fc:71:b3:be:5b:03:37:8e:22:12:0b:02:c8:f2:
         31:5f:cd:78:2d:d6:47:d5:9b:ec:95:27:39:f1:d6:6d:ed:12:
         a7:83:21:ed:35:3f:e1:bc:fa:ae:48:f2:8f:59:59:40:f3:e9:
         6f:86:cb:45:5c:5e:fb:45:5a:a6:c5:ac:a5:b9:ca:99:1a:83:
         13:29:b3:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT6wVdL16sPki4nAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk
MWI4NjQ3MDctMGJiZC00MDBiLWE5ZDEtNTA2YzgyYzBhNTEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8berit+hzm620zqdfJIe/77BLsASsN8e3AX
Fji4oDLixXkE4ETpKz6QKCmc/OZ9zYDrvuCj4JXjMLQs5QC//zDM9JdhINzf/lND
rIQf+GrhYGMcIgSHVQmN8SmdsWL+FUpfp6RKtsoOipe/okosteskZz4vbi35mTVw
BSv7sUG7XwVPHdnEjKllf/cEQdUh+PQBH9QszXSlg1RrD4j+ja7H91iwhiLy69rY
MKHju3a69GOlNeDhXuPvahDNBw5VfK//kf2Z7zkVWPNNemZBnC3Cx62Ob9nrp6EC
1PScrgga1KIKQt37dGXcGZHqeii+GILb2csTDs26aVu+JzBESwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKCSAvyqp5c3HYx2p7UFsoEYnddeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNjQ1M2RhOWEtYTYyNC0z
N2RkLTk5N2QtNzQ0Zjc4YTBiNGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApeExMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG0AcQGyZDi4BIscm7Djgj18PZFPvU0JIDaKEhIvTmW+XA2frJDs02Uc
X3UTgzP0zTJZ+2FOas4OHpnwzYXljnUACpKWdg4M1oGSzFxcFuT53PuGyZmIqo5N
yVTymtTguJQeqHRqwLA59JqsMMH1rcVI+KBxp0e3DvliVtNov1b5Va4R3XppHr3L
iTsZJzw07k5IfbwvHCvVGKkGT/zI3YAoMD085ZldKBPOpwHuRnrANYVbY8z04Gz8
cbO+WwM3jiISCwLI8jFfzXgt1kfVm+yVJznx1m3tEqeDIe01P+G8+q5I8o9ZWUDz
6W+Gy0VcXvtFWqbFrKW5ypkagxMps68=
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:39:36 2026 by rpki-client