Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/dc804f16-e6f1-35b9-97e0-3b11476058a3.roa
File:                     dc804f16-e6f1-35b9-97e0-3b11476058a3.roa (raw, json)
Hash identifier:          T1QFthZPPzGb4sIiRe0DUk+Smmv5w1lV4HTY2HB++9g=
Subject key identifier:   8E:D4:32:A5:D3:C9:70:67:65:70:07:B2:C0:D1:1C:41:33:D8:EE:77
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584F7FE2F8817B2763A55A074980
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/dc804f16-e6f1-35b9-97e0-3b11476058a3.roa
Signing time:             Wed 14 Oct 2026 13:00:12 +0000
ROA not before:           Wed 14 Oct 2026 13:00:12 +0000
ROA not after:            Tue 12 Jan 2027 14:00:12 +0000
asID:                     62044
IP address blocks:        165.225.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7f:e2:f8:81:7b:27:63:a5:5a:07:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 14 13:00:12 2026 GMT
            Not After : Jan 12 14:00:12 2027 GMT
        Subject: CN=6bf59798-677b-4251-b8b5-db0c03609739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b0:72:00:e2:63:d7:26:54:7e:3f:87:4e:c0:
                    3a:96:2b:2f:b4:c3:6c:38:6b:08:8a:29:24:49:34:
                    2e:cd:a7:41:7a:37:33:57:a1:da:98:b0:49:f6:b8:
                    a6:f2:2e:cf:6b:17:fd:81:46:35:50:54:3d:1b:7d:
                    36:80:c8:f4:33:fe:f8:c3:f4:d1:c6:1e:87:46:f2:
                    3a:c7:9d:93:e1:46:d7:d7:d0:09:f1:c0:9e:c5:20:
                    60:1b:4b:7c:dc:45:2d:ed:f7:0d:2c:29:06:06:3f:
                    32:3b:97:3b:5e:ee:2b:cf:b5:08:0e:77:ee:33:bc:
                    3f:17:6c:f2:a9:ab:d3:db:88:12:49:00:87:09:82:
                    78:90:e7:2f:dc:ed:3b:ef:a1:73:7f:67:3a:5d:1a:
                    5c:87:46:39:f4:e1:73:13:dc:d8:99:35:e8:d5:4a:
                    13:46:62:a6:16:6b:0d:1c:5e:30:d7:47:6e:98:d0:
                    9a:53:dc:33:a9:13:df:23:a1:e3:1a:d3:e5:18:3c:
                    a2:40:f9:e6:e6:c5:00:4a:11:21:72:3e:a2:5b:17:
                    a2:c8:64:bd:08:11:47:6c:7b:00:d5:d2:a9:27:6a:
                    c7:77:45:c7:e9:b8:11:3a:f5:4a:d5:3c:ce:7f:17:
                    f7:50:c7:fb:71:04:a3:db:24:85:81:05:44:c6:07:
                    23:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D4:32:A5:D3:C9:70:67:65:70:07:B2:C0:D1:1C:41:33:D8:EE:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/dc804f16-e6f1-35b9-97e0-3b11476058a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:dd:78:06:fd:8d:0b:52:2b:f8:92:50:e9:65:9e:9b:f5:87:
         80:ff:32:9b:9a:11:83:68:d3:06:e6:d1:ef:c4:a0:4c:85:9f:
         fc:f1:9e:91:06:5f:e8:ea:09:ea:e4:fe:cb:95:4a:e9:66:ce:
         ba:68:45:21:d9:1e:9b:7a:1c:f8:b3:d4:fb:20:d2:7b:53:04:
         6a:e0:b5:3a:2b:7e:a4:9f:61:1c:a7:5c:71:d7:a6:1d:a3:af:
         52:03:d2:ac:3b:ef:ee:9f:17:ab:42:07:77:a9:37:56:92:ba:
         7c:3f:ab:d6:19:f6:40:54:75:86:5a:8b:10:ee:5f:d0:6a:51:
         b2:6f:37:6a:89:d9:da:22:c8:2b:65:9a:0a:f5:91:3b:06:b1:
         c2:18:fd:37:de:e0:a2:5f:4a:4d:9d:22:ec:f9:5a:36:93:70:
         d5:41:87:7b:10:aa:99:ae:a0:84:db:1b:47:5f:37:45:a1:17:
         3e:43:65:0d:6e:45:42:c4:ff:fe:65:f9:6e:37:96:6b:c2:30:
         11:b7:b4:98:bb:8f:67:a5:2d:23:ba:c0:59:2c:d8:3c:9d:df:
         91:6c:93:42:10:40:4b:34:0a:33:ca:97:80:21:5a:4d:19:12:
         7b:96:a7:92:f1:d5:16:26:73:fb:bf:5a:f2:9b:d2:d9:90:bf:
         35:fa:86:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 03:32:56 2026 by rpki-client