Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/07f26619-9cea-31e5-8ec2-24f4506b7caf.roa
File:                     07f26619-9cea-31e5-8ec2-24f4506b7caf.roa (raw, json)
Hash identifier:          iXtbGn7x0jqcRbYdGS+e68tjODyGj9Pcmfd2dYGAPh8=
Subject key identifier:   65:A4:53:EC:A5:63:D8:12:6E:2D:7D:F0:BE:94:B2:D3:19:72:9B:20
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B9B3CF975E6FE694DD74ADF80
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/07f26619-9cea-31e5-8ec2-24f4506b7caf.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     62044
IP address blocks:        165.225.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3c:f9:75:e6:fe:69:4d:d7:4a:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=7d8cbc73-09db-4569-9c6d-fc5459abd29a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:75:7c:f3:78:86:84:9a:d3:3d:6a:c6:52:ae:
                    d1:5b:f6:ab:c6:10:fd:e3:2f:92:b6:5c:4c:0d:ac:
                    5e:6c:9a:7f:5e:ea:5d:fa:07:1a:0e:43:dd:54:f4:
                    34:b1:70:39:07:b8:e6:d4:13:68:56:cc:51:61:ba:
                    25:82:2e:b4:44:27:d3:12:d6:cb:a6:8e:e6:58:8f:
                    17:b3:b8:45:c1:d3:82:5e:e4:d8:3a:76:d1:a1:f5:
                    ed:73:75:8e:10:0b:21:76:d9:b8:bf:a6:7a:e3:5e:
                    23:c0:1e:9c:25:43:e3:c3:98:ce:c7:84:c5:fc:a0:
                    a8:90:f6:ab:02:31:f0:9a:9d:65:0c:53:b2:4a:37:
                    03:e7:61:b9:61:b2:ef:b6:69:91:be:08:62:13:5b:
                    af:c0:0d:3e:b2:c5:55:71:f7:b2:1e:30:eb:a3:1e:
                    60:15:72:56:c3:73:32:cb:7b:b6:2f:2d:7d:eb:a1:
                    04:51:6f:4f:b3:52:42:1b:14:e2:f1:80:99:1c:4e:
                    ba:8e:5b:d8:03:88:1a:39:b8:ba:a2:e0:ba:03:8a:
                    f8:71:84:ee:72:fe:34:ed:4e:9e:3e:db:35:0c:f3:
                    3b:8d:f7:72:cf:6d:1d:b5:6d:4c:fb:ba:a4:94:78:
                    13:bb:6a:1c:95:36:46:f1:20:fd:f8:90:02:a3:fd:
                    94:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A4:53:EC:A5:63:D8:12:6E:2D:7D:F0:BE:94:B2:D3:19:72:9B:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/07f26619-9cea-31e5-8ec2-24f4506b7caf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:4a:f0:63:4b:92:f3:ae:e2:6f:31:72:73:75:fe:fa:7f:b5:
         d9:43:5c:a8:01:61:5d:7a:69:27:4e:cf:46:92:95:d1:2c:3f:
         ad:36:e6:ae:f7:18:1c:75:01:9b:e9:3e:a6:83:d1:a5:ae:6d:
         78:a1:d0:e5:44:bf:28:f6:32:cb:c7:20:95:09:22:b3:9d:cf:
         0d:ae:f5:fe:9c:e1:62:6d:56:ce:31:22:15:09:7f:bd:af:a3:
         0e:8c:91:26:c4:08:da:6c:19:e4:43:5e:9f:31:86:98:5d:3b:
         18:93:a9:26:8d:be:09:a0:d3:7d:aa:b8:70:50:64:76:d2:79:
         d0:9e:17:c8:08:fe:c7:67:56:4d:cc:8b:6c:b2:ad:2c:48:46:
         d3:1b:47:0a:57:b9:73:d9:f3:9e:24:2d:12:7b:ba:71:d2:bc:
         cc:5f:f1:87:e6:18:5a:ce:ca:8c:2d:d6:e4:34:05:a7:92:ac:
         fb:da:49:d8:aa:9f:ab:29:c4:85:2f:b5:c3:f4:e9:e3:d6:18:
         6f:d4:0f:79:ea:e2:3f:56:3f:3a:ce:1c:3f:81:b2:60:f3:34:
         33:57:d7:12:c5:80:2f:59:8a:c7:12:1e:1a:ee:5c:51:52:46:
         72:92:b8:98:83:98:65:96:f7:e6:9d:93:e2:7e:15:85:24:16:
         86:58:bc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 08:19:00 2025 by rpki-client