Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/66ddeac8-3ee9-36c2-b612-a42c58bd4473.roa
File:                     66ddeac8-3ee9-36c2-b612-a42c58bd4473.roa (raw, json)
Hash identifier:          hp3XGXSGPglobmvsTws88pUktPLRP96Mp3+QDKfyh30=
Subject key identifier:   16:54:56:44:51:B2:8E:78:0E:27:F5:D4:D9:01:44:93:7E:BF:8B:9E
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B9B3CFABBB5944900BB39DD00
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/66ddeac8-3ee9-36c2-b612-a42c58bd4473.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     53813
IP address blocks:        165.225.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3c:fa:bb:b5:94:49:00:bb:39:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=d29ad14c-37f9-49b7-9d70-8cff519c37b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e2:d7:98:5b:55:02:a5:97:67:30:e9:ee:a8:
                    07:67:7c:40:95:8c:80:08:39:5e:21:dd:de:18:58:
                    1d:30:11:59:49:6e:92:7b:e9:83:99:fd:53:d8:37:
                    8f:22:c1:00:75:e1:f3:a0:66:3c:26:df:ad:a5:1b:
                    63:13:89:2d:72:ae:ac:86:bf:47:9a:d2:0e:08:ac:
                    5e:07:3e:dc:16:a2:c2:de:d0:b3:b6:b9:81:0e:13:
                    96:90:5d:39:df:b1:1d:98:c9:50:d6:1b:f7:b0:ca:
                    95:22:d2:4f:61:63:f2:22:2b:c2:01:c0:87:d3:50:
                    99:33:dd:47:c3:1e:77:ff:d9:44:17:98:1b:49:21:
                    e5:b2:20:2c:b5:c4:0d:aa:f0:99:5f:a2:75:b8:2a:
                    2a:d3:58:4b:2d:41:bc:f9:f7:48:8e:60:8f:fe:0f:
                    90:72:8e:35:3b:de:8a:f9:71:6f:de:5b:55:d2:83:
                    0a:f3:69:a8:0d:a1:e1:b5:11:44:be:ba:87:9c:46:
                    e3:87:53:c7:81:e0:e6:64:53:3c:4c:46:cf:e4:b9:
                    d2:65:91:ff:77:ec:69:71:6c:d7:c3:e2:be:26:67:
                    49:a5:4b:8f:81:93:3e:a9:41:7a:05:94:a3:14:f3:
                    0b:8c:18:3c:ef:a5:8f:84:55:12:41:6a:28:33:7c:
                    98:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:54:56:44:51:B2:8E:78:0E:27:F5:D4:D9:01:44:93:7E:BF:8B:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/66ddeac8-3ee9-36c2-b612-a42c58bd4473.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:b9:cd:fe:ef:63:88:9b:41:38:d6:24:e2:16:42:fd:e7:41:
         e5:63:15:cd:79:2d:9d:cd:eb:dd:26:25:a1:8b:fc:5b:fd:e4:
         24:91:d8:27:b1:19:0f:52:7f:a4:c9:7b:ed:22:2a:c0:da:32:
         ea:d9:60:87:05:09:d9:33:db:f6:e5:4a:79:28:47:8f:51:75:
         83:ff:a8:c7:d2:d4:ee:66:c6:20:17:76:45:1a:5e:bb:ef:a4:
         7a:d4:0f:12:d8:e7:75:bb:aa:09:1a:b7:51:ff:eb:ac:5d:bb:
         c6:7a:5e:59:c2:08:ce:ed:dc:96:26:29:93:db:00:16:81:1d:
         75:46:c6:81:7d:5a:48:66:79:8e:9e:cd:a2:a6:62:cd:2d:87:
         f5:6d:d3:32:09:5c:96:75:7e:19:bb:8e:3b:2b:38:7d:ae:3d:
         1c:9b:7c:27:69:33:d3:6e:63:ad:9a:83:9f:65:f0:f6:6b:14:
         42:3d:b9:c1:01:70:99:80:5b:aa:da:08:56:a2:dc:c4:a1:57:
         f9:d4:d2:a6:e7:b4:a4:a8:bb:25:47:db:3f:c6:f0:73:d4:6c:
         1b:dd:bf:60:0b:14:e6:5d:c3:3b:75:12:40:58:b2:9c:a5:07:
         f0:31:bb:e9:e6:09:f2:90:bf:34:f6:a9:57:6b:14:c7:f0:ea:
         4e:9a:03:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 02:14:54 2025 by rpki-client