Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/25b58f89-8ee9-34dc-b823-18c4d81a0dc3.roa
File:                     25b58f89-8ee9-34dc-b823-18c4d81a0dc3.roa (raw, json)
Hash identifier:          T9fOMKuyrRx1BEzxPLEVDt4H74s/U0//NywoTxW7rAc=
Subject key identifier:   72:E5:D4:64:1A:2E:81:66:E1:FB:56:4C:B6:7D:AC:9A:E9:C3:46:8D
Certificate issuer:       /CN=65efdd79-a2c2-4fd4-ad1a-5d5384138412
Certificate serial:       010D0C9F4328584D037D19B85E5EAF3FEDDAC200
Authority key identifier: AC:12:E4:98:4B:F2:07:3C:A9:8C:3F:88:21:06:DD:26:65:FC:5C:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/25b58f89-8ee9-34dc-b823-18c4d81a0dc3.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     14048
IP address blocks:        141.225.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:19:b8:5e:5e:af:3f:ed:da:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65efdd79-a2c2-4fd4-ad1a-5d5384138412
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=37a28361-0fb1-471c-97e3-63eb7becdc28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7f:e8:f6:f7:75:d3:f2:cf:df:31:ca:44:16:
                    03:b9:6d:56:5a:58:96:ca:e7:8a:85:09:45:af:0c:
                    4a:bc:a5:6c:bd:25:0b:b1:15:5b:a1:23:78:21:2e:
                    c3:5c:06:cb:b8:ef:fd:19:5f:00:88:3a:da:4f:44:
                    c5:57:98:4f:b0:18:d6:0a:20:f4:ce:9a:f2:62:98:
                    e5:fb:42:ee:65:a1:3f:37:20:8d:e0:13:7f:19:57:
                    0c:e4:54:30:6a:da:a9:ba:43:03:6d:4b:46:c5:93:
                    ab:e2:09:35:15:13:e7:08:d6:5a:f6:89:42:32:bd:
                    9a:0b:a4:5f:e4:7a:f7:3b:85:c5:bf:8b:7a:06:5f:
                    c2:34:6c:27:f3:47:30:6e:a5:cd:df:5b:7a:4a:18:
                    50:10:bd:d7:c1:81:9d:fe:9c:31:e9:96:41:81:66:
                    86:9a:4b:84:5b:9e:a8:b7:be:90:6b:50:9a:71:50:
                    27:72:59:4d:21:b5:e5:e9:1f:bb:f6:0c:3f:41:31:
                    24:f6:33:69:a4:51:1d:68:97:dd:7c:57:e8:49:70:
                    90:cc:60:b4:80:85:e7:43:bf:f5:47:de:56:ad:06:
                    7f:cb:d9:83:e6:e8:57:25:00:2b:5e:4c:d9:75:7c:
                    a5:2d:7b:3c:b5:ee:2c:54:28:c8:f0:b8:d7:4c:09:
                    53:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E5:D4:64:1A:2E:81:66:E1:FB:56:4C:B6:7D:AC:9A:E9:C3:46:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/25b58f89-8ee9-34dc-b823-18c4d81a0dc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.crl

            X509v3 Authority Key Identifier:
                keyid:AC:12:E4:98:4B:F2:07:3C:A9:8C:3F:88:21:06:DD:26:65:FC:5C:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.225.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:c8:70:02:20:7a:4c:8a:19:1d:35:e3:b7:35:d3:1b:e1:27:
         41:73:31:37:1d:b5:0e:b9:cc:6f:69:c4:30:e0:3b:15:72:8e:
         c2:5a:c0:27:8e:a3:65:86:0f:0c:c5:c4:3e:04:31:f6:5d:4b:
         e0:2c:52:15:4c:3d:3c:19:89:7f:15:27:7c:1e:7a:3e:10:a1:
         38:ee:a0:a4:2e:f9:bd:28:d3:47:26:2e:59:f4:94:dd:98:37:
         3f:37:d4:56:e3:3c:75:95:9d:07:69:1c:72:f0:ad:d1:19:ed:
         ee:70:bc:99:67:18:55:31:f3:5e:a9:aa:92:ca:d5:b6:0c:4e:
         57:90:da:5e:c3:45:9d:d0:d1:38:ef:7f:ac:54:1d:a2:03:5c:
         d7:7a:d9:fd:84:07:e4:5e:e4:28:0b:3d:3f:da:53:d8:8d:0c:
         e7:17:46:7f:54:c3:c6:06:fc:b9:d9:16:82:5e:65:02:bd:55:
         f1:ae:b0:d6:a7:3e:16:5c:d1:d1:ab:f7:ee:9c:bc:f8:2e:8c:
         bb:85:55:35:99:69:35:41:bc:e0:48:a3:04:63:b3:42:c2:48:
         34:6a:80:4e:02:e7:e5:1d:b5:82:38:f9:e0:49:a5:f7:52:50:
         0c:02:97:b8:48:f2:42:70:a2:53:4b:0d:27:1f:f6:ca:2c:9f:
         cf:5c:1a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:07:12 2026 by rpki-client