Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/212383df-73c1-368f-8130-a8b9402b01ce.roa
File:                     212383df-73c1-368f-8130-a8b9402b01ce.roa (raw, json)
Hash identifier:          H/Gttb8+S8RzlrgYWQ9KEujQXlJb51Ae2iQY/V3QcH0=
Subject key identifier:   BB:A3:A3:88:1B:8F:C0:EA:E8:F1:55:C4:86:3B:E2:8C:CA:89:E6:1C
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EA0152DC4EB29909C39DC6D00
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/212383df-73c1-368f-8130-a8b9402b01ce.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     53813
IP address blocks:        165.225.124.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:2d:c4:eb:29:90:9c:39:dc:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=fd7710b1-1020-491d-9b49-de483323ce11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2c:79:b0:ab:07:fa:ce:13:9f:cf:4e:7e:e6:
                    ae:7d:9e:d2:61:dd:3e:c7:de:57:68:62:9a:22:96:
                    93:dd:41:26:a2:7b:8d:44:99:a5:5c:54:44:ec:32:
                    ea:66:86:b1:8e:51:cd:1f:21:86:fd:e0:11:c7:89:
                    ce:97:3c:60:ea:f1:41:90:56:9e:0d:be:ce:05:7c:
                    c2:8f:69:d3:fa:73:b7:dc:e7:53:4a:29:57:1b:aa:
                    d7:b5:e7:d1:3d:82:c6:27:15:55:40:87:ed:b9:7f:
                    72:fb:eb:ae:cb:f4:38:fd:53:a6:65:89:e6:a1:a0:
                    45:1f:16:e1:d0:0b:c7:c1:30:19:36:7c:5c:1a:15:
                    0c:94:02:3a:1b:71:39:b7:10:98:d5:05:6d:23:3b:
                    c2:f9:9a:a4:b1:dd:4e:fc:ed:4f:64:58:ff:41:40:
                    05:81:d8:40:fd:51:c5:7c:94:93:26:05:65:1d:43:
                    95:53:e7:23:2e:f3:e5:25:76:07:bf:7e:93:60:4f:
                    45:f8:03:13:72:ac:04:59:bc:86:5f:0c:da:1c:f1:
                    3b:b6:de:00:e0:ff:56:4e:7a:fc:a8:54:d2:0f:7f:
                    4b:b9:b0:f9:e0:d2:07:0c:05:1b:68:fd:73:cf:80:
                    bf:a9:c0:c1:40:be:4a:52:16:49:40:8e:bd:4c:c6:
                    97:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A3:A3:88:1B:8F:C0:EA:E8:F1:55:C4:86:3B:E2:8C:CA:89:E6:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/212383df-73c1-368f-8130-a8b9402b01ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:d3:bd:1a:99:8f:7c:83:64:06:9a:35:c2:0f:95:b3:b2:06:
         12:74:cc:a0:01:5d:9c:34:89:84:33:bd:22:cf:02:10:3d:eb:
         7f:c4:ce:63:df:75:0b:d1:ba:4d:c1:4c:ba:5b:a9:ad:24:e9:
         92:e7:4e:c9:65:e4:93:bf:1d:28:30:17:27:db:de:74:d1:b4:
         47:0c:4d:d8:f7:06:bf:dc:70:35:97:ec:e4:ce:9b:48:67:81:
         b9:2e:e7:06:39:71:b3:c9:01:b0:2f:1f:7d:63:b3:2b:c3:cd:
         8a:e8:dd:7b:51:b5:05:80:ce:23:dd:08:91:b8:ee:a7:b6:8a:
         6c:c5:29:8a:42:32:fa:9b:45:bc:6b:4f:60:40:35:2d:ed:90:
         f3:6e:41:f5:55:e3:5e:56:a2:d8:fc:17:d8:d7:78:7d:3e:35:
         63:e7:e1:5b:d3:6d:76:de:74:f6:1c:88:4f:d3:6c:43:ab:04:
         7a:c3:45:00:b2:2b:67:da:25:00:b1:be:7f:32:3e:da:a7:01:
         aa:d1:c3:db:38:b5:b3:f6:72:05:6d:2a:d6:a4:2c:05:78:30:
         d5:f7:ef:e8:d3:04:64:bf:47:0e:0a:79:02:84:be:87:d9:77:
         30:d7:56:b2:08:9e:30:2a:d1:c7:24:dd:fd:df:3c:89:d4:25:
         ce:ca:bf:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 09:10:17 2026 by rpki-client