Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/6453da9a-a624-37dd-997d-744f78a0b4e1.roa
File:                     6453da9a-a624-37dd-997d-744f78a0b4e1.roa (raw, json)
Hash identifier:          VHGO6xwT2R96QJiPmxnZQ3uuinTi3arDBvmC3JyB/mc=
Subject key identifier:   CE:91:1F:12:F4:DC:D3:DF:8B:93:1E:E0:F2:1E:DF:D4:40:2F:A6:71
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EDDF74D4725160F21CC56A400
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/6453da9a-a624-37dd-997d-744f78a0b4e1.roa
Signing time:             Mon 17 Aug 2026 13:00:11 +0000
ROA not before:           Mon 17 Aug 2026 13:00:11 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     22616
IP address blocks:        165.225.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dd:f7:4d:47:25:16:0f:21:cc:56:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 17 13:00:11 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=f73b002f-005d-44c6-9f64-4a61d0a12a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:01:a4:01:47:4d:57:c7:43:13:b6:fc:30:73:
                    01:01:91:12:63:8f:d9:e0:a2:2d:a6:39:27:0f:f0:
                    e8:98:07:b3:b9:95:3d:62:f8:57:0f:82:bf:b7:1e:
                    bc:40:f0:83:5b:2a:78:e5:b5:be:27:f6:9c:3e:79:
                    d1:f4:ad:ea:cd:91:1a:f6:df:27:e4:73:e9:0a:f2:
                    13:ec:b6:3a:96:11:15:6e:ae:fa:fb:b0:d5:6b:de:
                    26:f5:ac:1f:86:ce:f1:e9:d6:f5:ca:02:82:2c:3a:
                    36:ac:ab:be:14:e7:69:a1:3d:6e:ca:81:27:78:47:
                    af:95:89:36:69:4c:1b:05:2d:3e:93:bb:09:cd:c6:
                    16:7f:f7:a4:1b:c0:24:3f:3a:8e:4f:a0:77:fb:a1:
                    d3:f7:65:da:6d:3d:90:db:17:ed:78:94:6d:87:8e:
                    cb:c7:f1:41:fe:be:1d:44:76:73:48:98:cf:22:68:
                    cf:ae:32:6e:4d:3a:f3:57:c7:b3:8b:f1:51:93:6b:
                    ca:5c:b0:94:80:c0:45:5b:ba:b2:af:f5:a8:c4:be:
                    b4:00:56:20:7b:5f:64:f0:3d:bf:66:62:39:d3:d7:
                    f5:73:bc:24:0f:80:ce:0a:14:ac:5e:bf:48:cc:36:
                    9c:f6:29:4b:ca:be:19:04:dc:4a:61:2a:2c:09:da:
                    fd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:91:1F:12:F4:DC:D3:DF:8B:93:1E:E0:F2:1E:DF:D4:40:2F:A6:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/6453da9a-a624-37dd-997d-744f78a0b4e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:12:8e:5c:90:a1:ce:1e:60:08:e0:13:d8:db:d0:a5:3b:45:
         fd:c7:d8:4e:cd:94:13:1c:76:11:00:3c:15:78:05:35:51:9f:
         cc:6e:98:56:50:60:28:a7:7c:ae:ed:bc:de:5e:9d:79:32:59:
         94:a2:88:c1:46:a0:cc:55:d1:02:cb:6d:82:52:97:65:7b:72:
         2d:ae:00:85:12:a3:ff:87:8a:cd:7d:ee:cb:5f:8f:57:d4:37:
         11:c4:58:6e:0e:e2:b2:66:88:d6:05:e8:1c:b1:d7:cd:ec:b7:
         47:ac:7e:c4:9d:fb:e6:cd:a9:6c:eb:d5:1e:a3:9e:32:e1:43:
         47:74:ef:07:6a:a1:2b:a0:38:de:fe:a9:10:82:59:aa:50:19:
         dc:c3:ff:20:fd:9c:a1:27:ec:e1:a1:ec:32:32:36:ab:f5:45:
         31:eb:83:1d:b0:86:31:7c:ba:26:fa:44:7e:02:54:15:4c:bd:
         9b:8c:a8:78:9d:f6:42:de:56:c2:c1:12:fe:ac:63:3c:c4:88:
         cd:a0:74:42:4e:79:71:ec:41:7d:41:64:36:09:96:2f:bc:35:
         f3:8f:52:e5:b1:1f:07:89:4b:a5:5c:09:bb:bf:65:f4:37:4b:
         a5:56:85:ab:c8:45:4e:43:c8:47:e9:eb:16:4a:80:c2:d9:a6:
         6e:e9:05:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7d901HJRYPIcxWpAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI2MDgxNzEzMDAxMVoXDTI2MTExNTE0MDAxMVowLzEtMCsGA1UEAxMk
ZjczYjAwMmYtMDA1ZC00NGM2LTlmNjQtNGE2MWQwYTEyYTI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgGkAUdNV8dDE7b8MHMBAZESY4/Z4KItpjkn
D/DomAezuZU9YvhXD4K/tx68QPCDWyp45bW+J/acPnnR9K3qzZEa9t8n5HPpCvIT
7LY6lhEVbq76+7DVa94m9awfhs7x6db1ygKCLDo2rKu+FOdpoT1uyoEneEevlYk2
aUwbBS0+k7sJzcYWf/ekG8AkPzqOT6B3+6HT92XabT2Q2xfteJRth47Lx/FB/r4d
RHZzSJjPImjPrjJuTTrzV8ezi/FRk2vKXLCUgMBFW7qyr/WoxL60AFYge19k8D2/
ZmI509f1c7wkD4DOChSsXr9IzDac9ilLyr4ZBNxKYSosCdr96wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM6RHxL03NPfi5Me4PIe39RAL6ZxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNjQ1M2RhOWEtYTYyNC0z
N2RkLTk5N2QtNzQ0Zjc4YTBiNGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApeExMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFoSjlyQoc4eYAjgE9jb0KU7Rf3H2E7NlBMcdhEAPBV4BTVRn8xumFZQ
YCinfK7tvN5enXkyWZSiiMFGoMxV0QLLbYJSl2V7ci2uAIUSo/+His197stfj1fU
NxHEWG4O4rJmiNYF6Byx183st0esfsSd++bNqWzr1R6jnjLhQ0d07wdqoSugON7+
qRCCWapQGdzD/yD9nKEn7OGh7DIyNqv1RTHrgx2whjF8uib6RH4CVBVMvZuMqHid
9kLeVsLBEv6sYzzEiM2gdEJOeXHsQX1BZDYJli+8NfOPUuWxHweJS6VcCbu/ZfQ3
S6VWhavIRU5DyEfp6xZKgMLZpm7pBQw=
-----END CERTIFICATE-----
Generated at Sun Sep 13 19:42:33 2026 by rpki-client