Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/66ddeac8-3ee9-36c2-b612-a42c58bd4473.roa
File:                     66ddeac8-3ee9-36c2-b612-a42c58bd4473.roa (raw, json)
Hash identifier:          x6zpiO4W5vgu8D4+pBT75BZB6UwT5QI4PubJNnpoUKY=
Subject key identifier:   83:7A:11:04:B8:B3:DE:EE:F9:0D:D2:35:EF:5B:C4:77:52:6E:45:3F
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EDDF73881A5D80EE62E7FDE90
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/66ddeac8-3ee9-36c2-b612-a42c58bd4473.roa
Signing time:             Mon 17 Aug 2026 13:00:11 +0000
ROA not before:           Mon 17 Aug 2026 13:00:11 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     53813
IP address blocks:        165.225.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dd:f7:38:81:a5:d8:0e:e6:2e:7f:de:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 17 13:00:11 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=e1f334df-d60d-410f-979f-9ec9d5cd61a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a5:2b:8b:d0:18:55:3a:8b:eb:35:f9:65:c6:
                    21:2c:c0:c8:8a:2c:e2:2a:51:89:2e:ee:0a:c3:2d:
                    10:7e:c7:6a:6a:05:46:c9:94:c9:13:57:3f:de:a7:
                    9a:36:a1:68:57:07:5b:a0:a5:4d:01:6c:72:7f:bb:
                    c8:16:e7:30:5f:76:19:23:50:3c:64:3f:c9:0a:dd:
                    f7:e0:a9:5b:17:fe:fc:62:51:90:1a:e8:20:d5:92:
                    4b:f9:91:23:5e:0d:a9:8d:ec:25:bc:c7:44:4b:61:
                    07:66:68:d1:24:ab:d5:6c:40:bc:c6:86:b4:72:14:
                    4e:9e:2b:ec:db:28:66:0a:af:f2:5e:20:77:25:c6:
                    79:31:07:25:87:34:cd:4f:f0:44:25:ec:37:b7:c8:
                    8b:ab:0d:59:25:55:25:3d:af:8d:fb:4c:87:fe:f0:
                    31:fb:f1:79:cb:32:b1:13:aa:b4:05:81:7b:b2:c2:
                    77:88:a5:c8:ee:65:d6:73:d1:8e:11:2d:d2:42:8b:
                    0c:d1:86:6a:81:21:05:c7:ec:82:0f:9f:ce:68:b9:
                    3f:be:4c:33:ee:5e:c8:c9:14:18:bd:3c:fd:a5:13:
                    47:8d:c5:ce:3b:e0:cb:8d:e3:4c:ba:0b:af:17:25:
                    73:2a:6d:6a:8d:dd:4d:e7:30:a8:c9:8f:f3:59:6f:
                    c5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:7A:11:04:B8:B3:DE:EE:F9:0D:D2:35:EF:5B:C4:77:52:6E:45:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/66ddeac8-3ee9-36c2-b612-a42c58bd4473.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:85:67:73:27:82:4d:0b:f3:46:99:a4:1e:93:08:04:24:00:
         45:04:47:fe:27:2c:f9:7e:d4:26:83:da:07:09:19:eb:6b:65:
         e2:9a:97:fe:99:86:62:b3:26:ea:75:c6:06:74:c5:30:23:24:
         9f:ee:8f:e7:75:18:f1:98:00:5a:c2:42:f2:86:9d:b0:ee:20:
         94:7e:fa:de:4a:55:bc:26:32:32:c5:3c:60:39:8e:c5:81:3c:
         61:7a:7e:5c:3e:2b:d4:24:df:ed:a7:8f:70:8c:d0:f1:8f:c9:
         32:0e:81:f7:4d:26:3b:ef:98:75:b5:66:be:13:45:c5:c4:2d:
         f8:21:95:d8:8b:fe:a5:be:5b:d9:0b:9b:77:9b:2c:32:7f:1f:
         40:58:57:c0:ce:08:4f:19:6f:cf:98:8d:c4:97:a2:12:f2:58:
         2f:fb:03:c9:a2:00:f1:bd:e9:a0:fe:d4:f0:b0:64:2b:3d:23:
         89:f7:b5:38:95:0f:61:5c:2d:ff:30:82:23:3d:19:ec:fe:11:
         1b:d7:46:28:9c:55:12:48:7a:3c:14:e6:2c:f7:b1:06:40:29:
         93:41:0b:53:ad:e6:fd:90:06:b5:36:5a:64:5f:d0:5d:0c:07:
         45:1c:ad:e4:7a:10:bf:73:22:92:01:38:7c:8d:11:75:ae:6e:
         aa:a6:2b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 15:02:37 2026 by rpki-client