Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/99ac42dc-882d-3db0-a49b-45a355d5f3d6.roa
File:                     99ac42dc-882d-3db0-a49b-45a355d5f3d6.roa (raw, json)
Hash identifier:          LVmSPHvfuhj9DIxdAemFYxQTJbtRU2/qmxtpOVLYNP0=
Subject key identifier:   2C:B0:D9:43:3A:C3:8E:ED:40:42:35:70:39:68:6B:7E:59:C3:18:CF
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D5B4F94DC3FD6170EB5405A40
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/99ac42dc-882d-3db0-a49b-45a355d5f3d6.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     22616
IP address blocks:        165.225.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:94:dc:3f:d6:17:0e:b5:40:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=28b0fc97-b464-47d0-80bc-13f7d59b773c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ec:20:b9:eb:22:fd:01:d0:fd:e5:3e:62:92:
                    cb:0d:aa:e7:0e:24:c3:95:50:04:47:2a:47:d1:f2:
                    2f:2f:df:ab:39:89:b5:43:01:aa:48:47:aa:0d:c5:
                    77:1b:7e:f2:75:37:2f:44:c0:a2:0b:bf:11:1f:7b:
                    76:a6:2e:e7:e7:98:62:65:89:af:8b:9e:ec:d8:94:
                    a6:7e:12:dc:d8:40:e8:f6:8c:74:cd:99:62:fc:c6:
                    95:7d:63:92:66:7b:13:0f:2d:e7:0a:e7:0c:db:cd:
                    af:52:b4:b3:f2:b6:d1:f5:78:9a:c7:e2:19:8f:9b:
                    53:6d:80:ad:f3:8c:c5:44:21:97:1b:43:73:b6:8d:
                    27:5a:f5:30:69:f5:2a:2d:56:55:17:97:45:1d:54:
                    83:0c:bf:90:ac:f2:9e:bf:a7:8e:7f:c5:40:77:ef:
                    10:bd:70:e1:0a:b9:33:de:de:2b:2a:b3:f0:24:32:
                    e2:b8:19:ea:4d:81:db:e7:62:3f:f0:74:5b:44:ac:
                    06:a0:8f:59:6e:21:0d:66:00:82:f8:24:c9:92:56:
                    5f:1f:30:c4:31:35:81:06:4a:14:bb:fa:e2:85:8a:
                    c3:48:1c:d0:46:52:7e:16:95:4b:27:46:e7:f4:b0:
                    72:2b:84:b1:62:20:12:95:7e:83:9b:dc:cb:ba:00:
                    c4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B0:D9:43:3A:C3:8E:ED:40:42:35:70:39:68:6B:7E:59:C3:18:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/99ac42dc-882d-3db0-a49b-45a355d5f3d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:f4:81:73:8e:97:9c:31:5b:4e:cb:cb:78:40:59:78:46:62:
         65:41:dc:34:c8:9f:d3:c9:b5:8d:53:21:55:b4:39:b9:9a:a8:
         45:d3:12:ae:86:5a:b3:cd:10:aa:1d:1f:d5:c3:bc:9e:c2:0c:
         5b:4b:47:b7:5c:74:0e:1e:61:78:b3:ca:56:77:3d:3a:e9:c4:
         35:35:71:1c:92:90:17:4e:51:61:ae:28:47:d0:d6:13:ec:a4:
         a7:7e:2c:f9:2b:18:9c:92:d1:d0:9d:2a:4f:dd:95:a1:e3:00:
         75:8f:44:8a:85:9b:03:11:11:56:cf:3f:c1:df:b1:9b:7b:b0:
         b6:61:89:12:a5:dc:bf:c7:b6:5c:ea:08:7d:eb:05:f6:36:32:
         8f:07:a0:83:f5:bb:01:23:03:d2:07:be:69:2a:47:6a:a9:73:
         d6:0b:2e:8e:02:38:94:94:34:01:32:85:0c:fc:44:41:39:7c:
         6c:e3:6e:4f:a6:31:29:8c:f1:fe:31:8a:20:36:fb:0b:66:9f:
         b6:cc:bf:21:af:14:f0:3d:7b:b3:9d:05:d6:ef:a5:bf:f1:24:
         bd:4a:e4:a9:5f:0d:60:d6:eb:a9:5d:bb:6b:14:fe:7f:77:ad:
         18:77:0b:14:38:af:9c:60:19:36:45:51:00:6c:15:14:e5:fe:
         f4:de:06:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:40:55 2026 by rpki-client