Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c5cb9f77-f0af-3a05-8611-473a4641a268.roa
File:                     c5cb9f77-f0af-3a05-8611-473a4641a268.roa (raw, json)
Hash identifier:          MnRXssBQRnIEqeWAXPGJL4jgIvR5XaVUm84FmY8VLj0=
Subject key identifier:   E6:2B:4F:AC:8C:A3:74:A7:B6:F6:F5:21:84:01:E8:15:46:58:CD:9E
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584F7FE2EF4F283D8AAFCFDF2500
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c5cb9f77-f0af-3a05-8611-473a4641a268.roa
Signing time:             Wed 14 Oct 2026 13:00:12 +0000
ROA not before:           Wed 14 Oct 2026 13:00:12 +0000
ROA not after:            Tue 12 Jan 2027 14:00:12 +0000
asID:                     22616
IP address blocks:        165.225.222.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7f:e2:ef:4f:28:3d:8a:af:cf:df:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 14 13:00:12 2026 GMT
            Not After : Jan 12 14:00:12 2027 GMT
        Subject: CN=396d93ce-22dd-4561-8ff5-34d601455f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:96:5c:a7:fd:ce:75:75:ac:08:8d:ef:d1:38:
                    7e:98:35:b2:88:37:cc:76:15:6d:45:93:b2:03:c2:
                    b6:ad:9c:5a:be:d0:b6:e2:30:57:4e:56:1a:35:1b:
                    8c:d5:07:bd:26:2a:f8:e4:30:07:f9:1e:aa:0c:a4:
                    60:fb:ce:42:87:b2:56:00:4e:48:35:ee:db:45:03:
                    fa:4b:96:80:cf:7c:65:81:18:1e:a5:e2:ba:f5:20:
                    4e:fa:a5:eb:4a:b3:de:d0:25:f9:a8:14:5d:3c:db:
                    14:6d:4e:60:2c:c4:94:ad:93:71:27:7d:ba:38:97:
                    0d:28:c6:27:85:e0:31:f4:30:93:cf:9a:21:34:4e:
                    64:e9:e4:f9:4c:8d:ea:68:a8:4a:11:54:c8:36:66:
                    56:f2:38:d3:a8:82:8e:d8:41:01:f0:06:da:bf:85:
                    ee:0c:c6:4e:3e:b9:20:85:56:c2:09:1b:f5:0d:79:
                    b3:3b:06:e5:01:42:88:8a:88:dc:ec:75:54:b7:7e:
                    c9:66:4f:7d:6d:c8:32:5c:bd:d8:ed:40:a1:59:02:
                    dc:32:d0:2f:21:13:19:07:73:28:13:90:e4:31:d7:
                    b0:93:9c:fe:03:8e:88:26:49:06:9d:5e:39:a1:42:
                    26:8b:cf:d0:12:73:47:dd:15:56:e7:8e:a0:28:c4:
                    de:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2B:4F:AC:8C:A3:74:A7:B6:F6:F5:21:84:01:E8:15:46:58:CD:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c5cb9f77-f0af-3a05-8611-473a4641a268.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:c9:54:77:8f:83:94:a6:0a:fe:c4:f4:75:c0:b9:4a:b5:53:
         bf:69:ac:7b:c1:7b:19:02:eb:1d:3e:cc:99:d6:da:d4:da:7e:
         1c:91:7c:98:e7:da:26:06:96:1a:d2:82:bc:58:1f:f6:e9:e2:
         b6:4e:a1:76:5f:bb:76:61:e6:11:5d:3f:06:4d:c4:71:0d:ce:
         d0:3e:a3:bb:55:44:a4:16:70:10:ca:7f:a1:af:8b:d9:b8:6b:
         83:8d:0e:12:cb:2f:d8:97:6d:36:39:06:36:50:e9:98:d2:55:
         8d:ef:ff:2f:ab:16:55:0e:55:27:66:b2:bf:86:b7:2f:8a:2d:
         c7:fe:05:81:cc:28:90:e4:c9:3f:f6:f5:7b:c2:33:ea:e9:2f:
         02:45:98:90:ff:79:35:dc:f5:79:41:2b:6d:26:fd:75:f5:04:
         60:dc:1b:71:b8:f3:3e:9a:12:67:67:67:66:59:07:8c:5e:16:
         da:31:de:3a:76:08:01:c1:61:c8:74:44:62:3c:41:0e:d2:ed:
         36:42:93:ce:bd:c4:4e:6a:c0:65:46:16:55:9d:63:f6:95:51:
         52:36:42:fc:f0:87:3d:f1:0c:15:c8:27:71:f8:c9:0c:00:da:
         29:a9:43:fe:55:f3:7c:48:16:9a:79:aa:9b:2a:84:83:d8:f9:
         b8:24:dc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:21:39 2026 by rpki-client