Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/6c44a9d6-9415-3fa5-a23c-71c64f553085.roa
File:                     6c44a9d6-9415-3fa5-a23c-71c64f553085.roa (raw, json)
Hash identifier:          Z7S7lRQagfEHD4gNCjTp6467oTW4GbaDd2nJ9Z8c06s=
Subject key identifier:   F1:6A:11:01:79:1F:91:58:1C:AF:A4:3B:DE:33:87:59:54:D8:4F:53
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D5B4FA778C36C6E2D1F41B820
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/6c44a9d6-9415-3fa5-a23c-71c64f553085.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     62044
IP address blocks:        165.225.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:a7:78:c3:6c:6e:2d:1f:41:b8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=ae27a897-881f-42c0-b006-bcae49b852ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:39:41:79:13:02:a7:1c:40:3f:b3:d7:94:49:
                    17:01:36:bc:84:e2:6a:8d:d1:af:4b:5c:11:8e:9a:
                    55:80:38:a4:57:b1:dd:b6:8d:15:03:f6:99:07:32:
                    8d:97:01:40:ea:b8:48:95:cd:0e:75:29:af:fd:29:
                    70:de:71:c6:6e:61:e1:90:9b:b8:df:c6:9d:15:36:
                    8e:94:4f:99:80:18:42:03:75:7f:14:4e:ce:c4:ff:
                    50:90:c3:d4:cb:16:9e:54:33:00:27:02:5e:eb:17:
                    fe:10:40:93:b6:0e:8d:a0:1d:0a:ed:ba:a1:53:7c:
                    d8:9e:6a:5e:1e:0f:62:01:c3:87:a5:4b:ff:1d:ba:
                    1e:37:97:1c:b7:fb:28:e0:08:0d:f4:0f:0f:ee:e3:
                    7d:86:5e:f0:ae:f4:69:d8:bb:ab:20:61:e3:b8:b2:
                    2e:b3:69:87:51:24:15:bf:a8:4b:6f:8a:e6:3d:e7:
                    87:6b:64:d0:2a:47:23:ae:a3:83:63:ef:6c:69:32:
                    df:83:ec:6b:86:9d:9b:42:85:18:de:28:86:06:2a:
                    44:26:47:f7:7a:52:1b:6c:8d:1b:a5:f2:54:96:a5:
                    66:19:e3:8e:9a:79:b9:09:56:5a:67:83:a9:50:41:
                    d4:6a:32:a9:f4:1e:d4:b3:fe:0b:fb:71:72:3d:fa:
                    1a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6A:11:01:79:1F:91:58:1C:AF:A4:3B:DE:33:87:59:54:D8:4F:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/6c44a9d6-9415-3fa5-a23c-71c64f553085.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:85:2a:2c:9b:31:23:74:f8:63:e8:2e:80:d2:ee:8e:cc:dc:
         df:f8:15:48:a7:8e:69:10:54:91:df:e8:b1:bc:51:0e:e8:da:
         84:66:6c:08:0e:63:a3:2e:5d:40:64:18:fe:56:c3:74:52:4e:
         17:71:83:7f:36:bb:fd:b1:32:95:90:0f:dc:c2:ce:82:f0:0b:
         f1:2f:86:32:d8:f5:e1:bf:f8:5b:92:fb:6d:82:21:6d:71:ca:
         17:e5:db:b3:09:22:35:c2:fd:cf:7f:eb:c2:a7:82:41:6e:85:
         e0:13:c5:ac:5b:b4:70:69:b9:9d:06:6f:50:7d:88:06:8e:b0:
         29:5d:8e:d5:eb:45:33:8f:c5:e2:c2:ee:7d:fd:6e:4b:f1:07:
         16:cb:a6:37:e5:1b:03:74:c7:33:2b:d5:6a:7d:fe:34:14:0b:
         d5:58:83:94:bf:33:dd:5c:d6:86:c2:19:76:70:e5:b2:81:69:
         0f:7d:46:91:7e:a1:65:10:fc:b2:48:c1:26:4d:a1:07:03:34:
         47:d0:d1:30:20:1a:6d:2a:c6:c7:ef:da:8a:4f:51:74:d0:91:
         34:5f:95:81:be:a1:b7:0d:39:c6:32:9f:8f:ab:11:72:f5:4a:
         71:d1:bd:f2:0f:6e:eb:d4:96:e3:c2:bb:49:39:90:5d:d4:64:
         fb:c1:92:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:50:32 2026 by rpki-client