Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/7eeb4e59-f65c-3cb1-b51f-11a1ec3150a3.roa
File:                     7eeb4e59-f65c-3cb1-b51f-11a1ec3150a3.roa (raw, json)
Hash identifier:          E599IXN6GU+WpaB82vtjAIBHbAl96ioR9++b847heLc=
Subject key identifier:   16:F2:C5:B3:F9:B3:B3:C8:CD:D9:71:60:E0:5F:89:92:CE:73:4B:74
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EDDF73C8F441FAFDB92D31980
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/7eeb4e59-f65c-3cb1-b51f-11a1ec3150a3.roa
Signing time:             Mon 17 Aug 2026 13:00:11 +0000
ROA not before:           Mon 17 Aug 2026 13:00:11 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     53813
IP address blocks:        165.225.232.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dd:f7:3c:8f:44:1f:af:db:92:d3:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 17 13:00:11 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=f55dc667-66ec-4d32-95a9-fccafdab11a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8a:80:6c:41:44:11:f4:b9:27:f1:eb:44:ff:
                    6c:9f:35:da:5d:52:76:32:d5:53:1b:34:fb:8b:28:
                    4b:cb:33:84:51:77:1a:33:9f:82:95:e4:4a:ff:d8:
                    39:85:4e:72:2b:ef:7e:bd:b8:c5:fd:0c:b3:fa:38:
                    bc:42:86:46:8a:17:8a:8a:fd:ee:01:7c:da:f0:42:
                    ef:44:35:74:be:55:b1:23:0f:52:76:13:5a:1c:96:
                    8b:5a:7b:45:93:c0:73:f4:85:4b:a2:56:05:e7:51:
                    4a:64:67:60:f1:fa:db:05:4c:f8:e5:85:f1:26:77:
                    aa:fc:1f:ae:3d:22:27:74:d7:54:12:66:56:cb:d7:
                    ab:45:26:2c:5d:ec:48:20:03:5a:a4:13:36:8e:ae:
                    e9:dc:fd:18:c1:8e:56:fb:6e:fb:93:be:cc:8b:a1:
                    c6:b6:4f:d4:80:2e:68:c5:05:d2:11:9a:36:4b:90:
                    bc:27:48:f9:52:47:89:61:72:a7:05:8a:ce:04:77:
                    c0:cd:81:4f:2b:d1:8c:60:34:79:3f:16:5e:78:a8:
                    02:e7:10:e2:ed:08:33:c9:bc:2e:ee:de:22:eb:d9:
                    3f:04:4a:b6:ce:fc:94:b2:ab:58:63:ae:75:51:db:
                    4f:f2:31:8c:67:2d:62:b2:ac:f4:80:57:49:11:ac:
                    fb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F2:C5:B3:F9:B3:B3:C8:CD:D9:71:60:E0:5F:89:92:CE:73:4B:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/7eeb4e59-f65c-3cb1-b51f-11a1ec3150a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:2b:c3:97:bd:97:40:10:49:5e:c5:d7:1b:35:cf:0d:d8:fa:
         e7:69:85:01:83:02:e7:7d:8f:50:03:32:1e:52:da:44:b8:16:
         fe:ed:41:5a:d0:dc:76:19:11:60:5d:2d:8d:01:37:1d:e3:86:
         7e:48:9a:79:00:0e:5d:6b:9e:f1:a8:c5:80:fd:67:92:aa:f1:
         5a:1f:95:83:b4:a0:39:f1:e6:50:7c:7f:00:52:79:da:20:4e:
         38:c6:cc:53:14:92:6f:38:35:5f:5c:c5:34:dc:fa:93:0b:77:
         fd:cc:e1:49:fc:48:10:49:c4:88:d5:a6:cd:33:36:f4:f0:41:
         3e:57:d5:63:62:5c:f5:d8:94:64:1c:82:29:f7:03:14:29:65:
         1d:ec:0c:ad:71:4b:bd:56:16:d6:17:32:ad:31:17:50:e2:cc:
         41:9a:0b:8e:75:0c:a0:53:9e:65:86:4a:9d:9e:9a:de:c0:10:
         15:39:b0:95:2d:e8:83:0c:3d:d8:8c:fb:28:c4:25:8c:eb:bb:
         54:6a:81:a6:c1:a9:08:68:aa:3c:3d:33:aa:9e:45:3b:85:41:
         5c:05:67:28:2b:34:f7:c5:66:83:62:6c:78:71:dd:0e:ce:57:
         af:ad:bf:7f:8e:0c:7e:4b:6d:ca:bb:4b:96:88:eb:eb:c0:68:
         55:86:24:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 14:09:02 2026 by rpki-client