Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/93930ea7-3019-3992-a4f5-644ff7ac3293.roa
File:                     93930ea7-3019-3992-a4f5-644ff7ac3293.roa (raw, json)
Hash identifier:          f9fJoV78WzP1cj0rZvzEPR7UQhHLzoCFrqOeYsXozD8=
Subject key identifier:   E3:EE:82:8E:E9:F0:64:02:4A:33:9E:65:8F:B4:37:4A:67:24:FD:5F
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B9B3CF5F39FC9C6774CD0B840
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/93930ea7-3019-3992-a4f5-644ff7ac3293.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     22616
IP address blocks:        165.225.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3c:f5:f3:9f:c9:c6:77:4c:d0:b8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=d1610e19-a4f9-4ca3-a775-543ed6f2f2f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:78:5c:32:92:c0:3e:d7:58:5a:8d:de:59:64:
                    28:65:a3:8c:d7:bb:57:d6:51:35:e6:09:7b:23:19:
                    46:99:a0:07:0d:a3:76:19:ba:0f:b3:36:cc:50:ee:
                    e4:6c:a7:31:ec:cd:0b:b6:2c:62:b5:13:aa:22:65:
                    32:45:3f:03:48:de:8c:d5:6d:14:e3:eb:38:25:4a:
                    1b:da:c1:de:07:b0:b5:93:ac:98:0d:a5:c7:f6:d6:
                    63:61:c1:29:c5:c9:1f:dc:db:af:77:0b:c1:e2:93:
                    25:86:1e:ed:98:c6:de:48:25:e1:8a:fc:41:c5:2a:
                    9e:f8:61:39:f0:00:10:d8:4b:aa:06:63:e3:74:d9:
                    79:dc:7e:21:fb:67:a7:66:33:43:27:3b:85:19:dc:
                    f9:1b:82:57:86:d6:04:3d:73:fa:6c:cf:5f:8f:90:
                    80:35:61:f5:d2:4a:3c:1d:27:00:2c:7d:63:a1:67:
                    51:39:2b:ec:e5:2f:e2:f8:67:64:d4:20:7a:d3:ad:
                    ef:d3:43:bd:3b:19:5c:9a:55:f8:de:e1:2a:f9:35:
                    d8:68:42:1c:52:bc:4f:2b:62:eb:e6:a3:0f:9d:18:
                    37:59:46:96:a9:0d:05:ff:b6:05:65:fc:b3:95:8d:
                    79:0b:8e:27:12:0f:8a:f1:28:88:0f:47:12:26:6b:
                    c5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:EE:82:8E:E9:F0:64:02:4A:33:9E:65:8F:B4:37:4A:67:24:FD:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/93930ea7-3019-3992-a4f5-644ff7ac3293.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:65:02:4f:48:e9:0e:5e:39:9b:d1:33:49:19:c9:0c:9c:38:
         8d:d2:a3:7a:37:72:ad:9f:aa:b6:5f:02:a1:6f:de:0c:16:f6:
         d0:ef:e2:4a:44:1c:4f:53:ac:5f:e0:2a:58:59:01:6a:81:40:
         86:df:58:e2:20:39:9f:84:1e:12:80:79:eb:db:84:9b:72:07:
         0f:2a:1d:13:2e:ef:3a:b3:48:c4:ee:39:38:cc:ea:eb:20:e0:
         fa:dc:eb:dd:1b:84:9f:bf:c3:d6:9f:d7:12:25:d8:37:b8:ec:
         18:33:e9:a6:2c:00:1a:5e:2e:29:07:27:84:a0:d8:f5:fb:a1:
         69:d7:2b:10:ba:40:55:fe:5a:ee:50:5a:cd:55:3a:3c:35:48:
         2e:6f:ca:37:7b:08:08:07:dc:a0:c3:49:87:57:a7:d4:d8:e6:
         1d:33:57:4f:16:65:b2:17:ec:65:e5:cb:4c:6c:33:97:0e:71:
         f4:a0:67:47:1f:dc:08:39:f8:9f:4b:e1:e7:bb:17:3a:0e:8b:
         d3:97:b3:8d:7d:4f:95:c8:a3:2f:99:78:21:dd:62:d3:d2:bf:
         8f:52:07:34:aa:af:de:58:70:c7:f9:f4:01:a2:b7:07:11:12:
         3d:c8:ff:95:01:5c:dd:02:69:34:ad:08:69:e4:64:fa:7e:f2:
         2d:d4:04:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:09:49 2025 by rpki-client