Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bb87c9ec-1d9a-3eeb-987c-cfb40413a00d.roa
File:                     bb87c9ec-1d9a-3eeb-987c-cfb40413a00d.roa (raw, json)
Hash identifier:          lKKf6qDtzVL7I2j6yk82Xu3IOxOp+Tm5QAIA8hntvXA=
Subject key identifier:   A7:88:45:67:A0:5D:AC:36:B0:83:EC:4E:74:B4:0B:D4:F6:18:B1:F1
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EDDF74B945F54F1842F1F3A40
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bb87c9ec-1d9a-3eeb-987c-cfb40413a00d.roa
Signing time:             Mon 17 Aug 2026 13:00:11 +0000
ROA not before:           Mon 17 Aug 2026 13:00:11 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     62044
IP address blocks:        165.225.198.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dd:f7:4b:94:5f:54:f1:84:2f:1f:3a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 17 13:00:11 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=7efe580d-cc4a-4c70-a5eb-092457216825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f0:14:be:98:b1:bf:12:12:39:87:cb:3d:cc:
                    80:94:e9:5b:11:66:33:3a:cc:99:d3:ff:a3:cc:2f:
                    c0:34:73:98:5f:32:a7:e5:50:84:9c:9b:27:b3:91:
                    68:2f:76:29:87:60:1b:6e:c7:19:7c:23:67:65:40:
                    54:49:97:6d:8e:2c:3b:94:ef:1d:fc:21:f6:03:68:
                    8a:69:3d:7d:de:14:fe:00:f4:8a:c0:4d:75:87:ce:
                    ea:c7:58:0f:2d:2f:c6:78:c4:44:b3:be:1f:a5:ff:
                    cf:c0:2f:e2:c2:86:e3:a6:e1:99:a0:e8:42:63:cb:
                    d1:d7:19:31:02:c7:36:09:5e:5f:d2:60:32:de:8c:
                    c1:c1:97:44:e6:31:ca:3b:38:e5:eb:c0:94:b0:0c:
                    9c:97:0e:85:70:2c:07:08:ba:d1:7e:25:f9:46:46:
                    d0:8d:c0:aa:3e:fa:9a:90:52:24:37:94:7e:53:5f:
                    60:01:93:95:85:3f:c2:9b:e1:4e:ad:1a:65:ae:da:
                    36:32:e0:19:74:7d:62:2f:7d:df:70:80:93:42:ea:
                    ef:43:1d:eb:fb:01:1a:31:df:5f:9a:8f:0a:2b:c2:
                    8d:de:7f:bf:8b:77:47:42:84:70:7b:2d:53:e5:f6:
                    de:24:63:02:d1:67:fd:d9:e8:ce:a6:6f:af:bf:93:
                    89:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:88:45:67:A0:5D:AC:36:B0:83:EC:4E:74:B4:0B:D4:F6:18:B1:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bb87c9ec-1d9a-3eeb-987c-cfb40413a00d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:e8:07:0f:1f:72:df:9a:be:42:ec:66:b9:cb:d7:33:bf:95:
         d7:ed:91:90:e8:db:e1:1c:39:d9:ab:0f:81:f1:bc:3d:37:46:
         7d:30:f3:33:6e:a3:37:1b:d5:79:91:e1:d0:55:c8:c0:09:b2:
         aa:0f:42:04:65:6e:a2:61:7c:7a:47:e8:67:69:be:d7:6a:0b:
         1c:6f:21:23:fa:34:da:4f:40:dc:a4:27:07:d3:d9:68:6f:45:
         ea:2c:0a:ad:0b:6a:f7:98:5f:f6:18:0f:90:61:75:16:c0:7e:
         21:e4:d1:73:0c:d0:34:97:eb:51:ee:4e:93:8d:d0:8c:cb:62:
         8e:05:df:71:d7:d9:22:bc:74:ff:05:29:b0:23:6f:f3:64:11:
         24:1b:5c:81:50:ff:db:ac:46:cd:96:a3:52:6e:bd:97:74:ff:
         9f:67:7b:46:4d:89:4c:cf:5a:89:c2:60:c2:6e:3e:ef:ea:45:
         53:82:a2:b7:da:ca:89:fb:35:9f:df:b8:52:2b:4b:d5:05:36:
         25:b3:e7:6e:32:b4:d2:09:15:09:c4:ad:a4:7f:3a:6d:1f:d3:
         c4:cb:0a:24:13:9d:9e:4a:a4:e6:3a:b5:f0:39:dd:3b:94:68:
         3d:ab:50:66:fb:af:fb:4f:8d:cf:3d:18:6f:88:50:dd:aa:a7:
         72:8a:b3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 14:22:27 2026 by rpki-client