Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ad5eb1ae-4706-37c1-96c9-6ffc33464a42.roa
File:                     ad5eb1ae-4706-37c1-96c9-6ffc33464a42.roa (raw, json)
Hash identifier:          OJRBWPYiS0EXqMmJ1YPE4RYJHdb6ZFgt+LAUOLiKhoE=
Subject key identifier:   C5:2B:32:1C:6F:97:A5:16:E1:F9:41:D2:25:F5:97:CD:1F:7D:2A:9F
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D5B4FAA5DD00B46F5206A6610
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ad5eb1ae-4706-37c1-96c9-6ffc33464a42.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     53813
IP address blocks:        165.225.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:aa:5d:d0:0b:46:f5:20:6a:66:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=36eb1f33-d5fa-497f-ad48-4339cbebb6f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1e:e1:60:41:70:27:72:60:83:b9:ad:2f:92:
                    79:2d:c3:10:76:34:d1:b8:b1:21:de:c6:21:ee:55:
                    ad:c0:4b:59:8b:06:56:80:07:3d:60:8d:9c:d6:01:
                    9c:b3:35:86:02:be:89:cb:07:86:3d:56:ac:21:87:
                    db:b8:83:68:54:f0:dc:2c:48:8d:03:51:d5:7a:c8:
                    8f:81:e7:02:eb:fc:25:61:78:90:96:d8:ce:3c:1e:
                    e1:5d:be:11:6b:0e:fa:e0:3b:86:02:f0:f9:cc:fa:
                    c0:b1:e2:e9:27:f4:4a:2e:22:d5:43:e7:17:49:06:
                    72:cf:f4:4e:04:7e:f6:4b:49:56:d5:20:a7:a9:aa:
                    32:7f:98:cd:11:00:d9:f3:36:29:d8:2c:c0:be:1a:
                    b2:f8:28:ab:57:19:83:98:3a:af:59:b8:a0:4e:82:
                    a6:28:5f:c7:94:32:9c:bf:6f:70:3e:17:33:ad:b3:
                    d4:9c:4d:76:c3:d9:7e:36:e4:59:71:5a:dc:8d:e9:
                    10:be:5f:3e:b8:f9:8b:39:03:48:5a:69:f0:99:bf:
                    15:ed:b4:67:ba:7e:a6:ee:b4:47:5d:0a:06:0a:48:
                    fa:95:21:e4:21:b4:9e:45:f5:5a:2a:64:08:7c:a1:
                    1d:3a:ba:24:d2:2f:15:33:98:4e:f8:30:e7:50:8a:
                    8a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2B:32:1C:6F:97:A5:16:E1:F9:41:D2:25:F5:97:CD:1F:7D:2A:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ad5eb1ae-4706-37c1-96c9-6ffc33464a42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:32:6c:af:89:82:81:cc:46:29:a4:da:12:3a:c2:17:8f:0e:
         61:06:44:19:46:0f:fa:bb:5d:39:d0:ae:f1:4b:ff:10:6b:7c:
         5d:42:07:56:6d:6a:bd:16:e3:29:2a:df:71:4e:c4:b6:11:a2:
         f1:4c:ce:3f:d1:c7:d4:e3:1d:bc:47:ec:be:98:6e:8d:f6:57:
         39:d2:21:55:ef:f9:6e:84:4e:d4:3f:96:91:7b:02:ab:1f:18:
         55:5d:cb:16:46:2a:73:47:89:74:e3:3b:d0:54:ea:f0:8a:39:
         4d:75:6b:f8:2c:f5:83:e3:01:66:d4:67:94:54:c1:82:4f:cf:
         bb:b0:98:d7:26:79:c9:c3:74:83:c6:17:15:7b:80:6c:18:05:
         e9:99:13:c4:50:e4:0b:ea:78:b3:7b:e9:88:01:18:81:b5:2a:
         f3:d8:fc:a3:a2:e8:0f:bf:a2:a6:10:97:60:23:93:05:64:3b:
         2d:d4:e7:cf:b6:f8:2c:5a:93:10:0c:4e:14:01:53:15:06:da:
         da:d0:b2:85:93:5a:80:55:30:90:1c:bc:b1:ab:97:9f:c3:81:
         8f:eb:a5:88:62:35:ef:2a:f3:d5:bf:1c:14:f6:03:6c:39:ad:
         3c:44:7b:9b:de:a5:c6:c3:53:43:af:4d:f5:53:89:68:a9:9a:
         b3:76:16:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:53:53 2026 by rpki-client