Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/7e8f05cb-37b8-36eb-9a13-145ebe6729db.roa
File:                     7e8f05cb-37b8-36eb-9a13-145ebe6729db.roa (raw, json)
Hash identifier:          Auo7pNWje13DNeD4K8pWD5KFntgNihsXpztK3wcXzng=
Subject key identifier:   65:4C:74:33:C2:F3:71:38:F8:6D:35:3C:C1:E5:FE:E6:C7:8E:86:64
Certificate issuer:       /CN=ef063323-5439-49a9-aad0-9dd33bb50925
Certificate serial:       010D0C9F4328584CA5F713676F23CB9CAF222A80
Authority key identifier: 3F:AE:3F:65:B9:66:04:F1:3D:AD:9F:29:C3:7C:66:28:04:71:A6:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/7e8f05cb-37b8-36eb-9a13-145ebe6729db.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     14618
IP address blocks:        165.109.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/ef063323-5439-49a9-aad0-9dd33bb50925.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/ef063323-5439-49a9-aad0-9dd33bb50925.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:13:67:6f:23:cb:9c:af:22:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef063323-5439-49a9-aad0-9dd33bb50925
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=b07efaf7-793e-4921-90bd-7051d8cbc6fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9a:51:36:c9:60:fb:95:92:13:7f:b6:c5:aa:
                    d0:1c:23:3d:51:cf:b4:35:61:1d:38:8c:cc:42:50:
                    ab:f4:a0:75:25:bb:21:33:aa:96:c0:ec:21:ff:39:
                    7a:3c:11:9b:1a:cb:81:5b:98:28:5b:77:08:ed:85:
                    bb:46:57:c2:ec:c1:bb:0a:20:21:ce:86:0b:23:ca:
                    9e:5e:47:5c:ff:3c:c2:16:d9:b7:ad:0b:2b:4b:6c:
                    5b:06:73:fc:e3:99:e9:90:92:5b:b1:28:78:5c:a9:
                    7f:3b:56:37:e2:11:cb:74:53:f1:22:54:f9:a6:cf:
                    d0:f9:87:8b:67:8c:e0:b7:a2:4d:b9:d7:fc:74:ff:
                    24:d6:4f:36:01:f2:f3:8f:17:b2:d7:e8:08:b5:da:
                    6e:33:16:ba:c0:f1:b9:b8:66:92:5f:de:5d:8d:fd:
                    2d:a3:37:cb:81:42:38:58:62:e5:05:95:74:d2:e2:
                    70:a8:15:19:7a:2a:06:a5:bc:d1:9b:bd:a9:3f:e9:
                    7e:c4:3a:29:a0:4e:20:b2:0a:35:f9:86:eb:56:9a:
                    08:4e:13:b4:70:94:15:62:ca:34:72:b7:d5:17:1a:
                    cf:bd:c1:c1:fb:50:8c:aa:a1:42:df:78:5d:14:8f:
                    6c:a0:54:f9:d5:65:8b:91:bd:bf:08:11:f5:d6:a0:
                    68:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:4C:74:33:C2:F3:71:38:F8:6D:35:3C:C1:E5:FE:E6:C7:8E:86:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/7e8f05cb-37b8-36eb-9a13-145ebe6729db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925/ef063323-5439-49a9-aad0-9dd33bb50925.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AE:3F:65:B9:66:04:F1:3D:AD:9F:29:C3:7C:66:28:04:71:A6:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ef063323-5439-49a9-aad0-9dd33bb50925.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.109.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:2e:7f:4e:3e:c7:5d:bd:bd:a8:f4:cd:ca:d3:09:3f:77:cb:
         e6:25:71:72:b5:ab:3b:4e:22:6b:28:6f:a7:39:b2:dd:9e:32:
         b8:a6:c8:3e:0c:55:1c:a6:0e:cd:9e:ed:2e:41:4b:58:44:20:
         75:87:6e:80:1f:6b:a2:f7:83:b7:16:cc:c4:aa:f1:45:01:40:
         ce:1a:b8:88:30:41:fb:34:8e:b7:bf:5f:5d:1e:e3:7f:77:65:
         95:f4:f3:c1:90:7c:cd:0d:5b:d5:2f:72:f4:c5:c6:1c:c6:08:
         3b:7b:af:52:fa:6e:8a:2a:6c:b8:84:de:44:d9:4d:03:b3:2e:
         54:68:df:8c:e7:43:cf:d9:22:fc:8b:b6:ce:98:2b:24:f0:29:
         20:82:91:1b:b5:b7:7d:18:2c:ea:ed:a8:67:a0:c1:0b:eb:00:
         2c:e1:c8:8f:8d:5d:26:3e:14:d6:3d:4b:7f:01:a8:75:87:5e:
         e1:12:2d:e0:ef:d8:01:65:91:9d:cc:fa:89:8d:7b:ef:c6:34:
         8e:13:46:cb:4c:a8:22:e7:ba:d4:ad:c4:ef:ca:64:6d:0c:a4:
         34:82:04:1a:4a:93:59:38:4a:09:e8:cc:f3:28:4a:8a:eb:74:
         a8:66:0a:52:9e:7d:7c:bc:ff:61:09:e9:78:3e:80:7b:64:78:
         7d:6e:67:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:32:20 2026 by rpki-client