Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/7cfd1454-b379-3c40-aa62-4262f34ea033.roa
File:                     7cfd1454-b379-3c40-aa62-4262f34ea033.roa (raw, json)
Hash identifier:          vwP5P1jJleEh0u1pFOe/O4dc36tcyRBq8TRaYTwhJQI=
Subject key identifier:   8C:4E:BB:2F:54:2A:88:94:E5:CD:F9:41:61:F7:A8:B8:F9:FF:1E:A7
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D5B4F8C460F1A7FCBBD302980
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/7cfd1454-b379-3c40-aa62-4262f34ea033.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     22616
IP address blocks:        170.85.156.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:8c:46:0f:1a:7f:cb:bd:30:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=514b7696-9ee4-4fa5-8713-0f2586ec0bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6f:d1:b7:16:e2:62:0a:51:d2:13:0c:82:b9:
                    06:da:7e:74:35:ef:e2:73:9d:df:38:60:65:27:dd:
                    a6:6b:e1:c1:9b:e4:ca:0d:03:f2:a3:e1:da:33:04:
                    c3:85:df:ed:f0:86:a1:84:3e:c4:19:cf:bb:f8:a1:
                    72:1f:d0:12:dc:73:a9:ee:a9:6e:3e:28:81:4a:b0:
                    0c:59:d8:f6:3d:25:39:14:e4:5f:7d:55:8b:8d:99:
                    b3:d2:94:90:3f:a3:2d:0a:64:a1:e4:eb:1d:dd:50:
                    17:a5:c3:52:99:20:7d:ae:4d:a7:41:e4:aa:29:a8:
                    6e:74:fb:7d:b0:bd:79:66:c8:c5:8f:ec:7d:9a:84:
                    ce:f7:ee:21:6e:f2:8f:56:31:1e:38:02:15:bb:3f:
                    64:47:c9:98:1d:4c:af:ae:fd:0a:54:a3:ce:26:54:
                    7b:db:9f:b9:2c:31:61:52:51:49:a2:49:e6:66:67:
                    25:f0:9b:1c:e1:c6:06:bb:88:41:a2:d4:72:0a:39:
                    bc:5f:cf:0e:8c:cf:0e:60:b5:2e:5b:43:4e:43:7c:
                    6e:74:bc:e0:0b:8b:41:6b:a8:20:c0:e2:18:68:ca:
                    d7:2c:84:81:61:9b:64:53:e1:9e:b9:ab:f0:6a:81:
                    c4:cc:9a:32:50:c7:92:08:ee:dd:85:27:df:59:c0:
                    c8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4E:BB:2F:54:2A:88:94:E5:CD:F9:41:61:F7:A8:B8:F9:FF:1E:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/7cfd1454-b379-3c40-aa62-4262f34ea033.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:18:74:a3:de:53:4b:c0:7b:6e:3e:f1:ea:67:cd:5d:24:4f:
         8b:6f:9e:2b:1e:de:d7:cc:d7:7d:b1:85:ab:6f:df:48:18:41:
         75:40:44:67:b4:39:ab:84:a0:6b:d7:da:5e:5a:cb:a1:cd:70:
         30:6b:83:52:29:80:00:34:67:4c:f7:a4:55:9d:dc:66:f2:ec:
         83:c5:13:54:19:f4:e5:ad:da:ec:9a:4b:8c:5c:9e:c4:1c:79:
         6f:83:1c:b4:da:28:cf:6b:f9:15:47:f8:8c:70:d0:b3:c5:0d:
         5b:ac:70:d3:6f:ce:c5:1d:b6:26:10:00:ce:04:10:4a:1d:e1:
         c0:75:ac:55:fe:8a:17:0e:61:84:0e:ab:ca:bc:af:e9:6b:35:
         e1:cb:89:1a:98:ef:85:da:19:e4:3f:5a:9e:f6:31:e7:6c:34:
         05:8a:2b:7a:c3:7d:c5:24:70:e5:45:cc:e3:7e:0e:37:c9:be:
         37:c9:ea:ef:d6:d2:27:57:2d:a6:2b:df:a0:39:8d:37:fd:f7:
         e3:8b:9f:bb:11:c5:37:27:61:3a:a4:4d:4e:2d:f0:72:6d:87:
         8a:de:80:aa:35:f5:81:ee:ed:a9:7c:e0:5d:ef:38:f4:55:d5:
         b0:cb:cc:75:19:78:d9:28:6b:12:d2:1f:c3:b2:31:1d:fb:1b:
         0f:87:34:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:35:23 2026 by rpki-client