Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/eb1e2d42-0f57-3de1-a77d-0bb0238b3c9a.roa
File:                     eb1e2d42-0f57-3de1-a77d-0bb0238b3c9a.roa (raw, json)
Hash identifier:          fa3CPoM8YTzGh5Aq5y6gYMsRmNlfcELo6Jz+tsIMb/w=
Subject key identifier:   97:0F:9B:87:29:5B:6D:5F:BE:08:64:25:9D:0A:87:D3:8E:68:82:40
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B9B3CF952174F44E8820B03E0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/eb1e2d42-0f57-3de1-a77d-0bb0238b3c9a.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     62044
IP address blocks:        165.225.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3c:f9:52:17:4f:44:e8:82:0b:03:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=af7af075-2825-4a1a-9582-1f1889bb01bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a6:ec:24:dd:f8:f0:1b:4c:ed:40:db:4c:fa:
                    d0:93:fc:2c:ee:e2:a1:46:83:0a:1a:0e:7b:f8:78:
                    25:af:d3:0e:29:5c:a4:3d:bf:66:f0:04:6c:eb:f2:
                    a5:ee:53:b4:78:18:d8:6f:8c:8e:71:2f:37:b1:12:
                    b3:77:3b:e6:da:ab:b9:17:92:22:b2:42:8e:26:50:
                    a5:65:3c:5d:83:b9:56:4b:62:91:e4:a3:41:57:24:
                    93:b0:2f:20:1d:4d:1a:e0:5e:58:ea:f9:11:2f:44:
                    c1:c5:50:d4:75:63:a9:9e:cb:4e:68:39:00:fb:83:
                    bf:f5:70:f0:fa:bd:53:a3:a4:0e:16:43:ce:f8:7e:
                    f5:97:f1:dd:cd:b6:a4:66:b6:a9:85:8c:14:1e:d7:
                    0c:fd:42:41:e6:cb:43:1b:a5:2c:8c:e7:f6:44:65:
                    e8:9d:aa:83:6e:cd:f4:70:76:ec:e8:95:89:b0:9f:
                    2e:81:eb:b6:b3:b9:30:fb:06:ec:36:7a:f0:6e:4d:
                    15:c4:3d:fc:15:30:04:7a:6d:4f:67:f3:40:67:ac:
                    0b:9e:22:63:d3:16:c1:e4:27:0b:13:8a:2f:a3:75:
                    1a:bc:0f:ac:c3:ed:ad:ce:91:0b:fc:d2:32:00:5d:
                    04:5b:5c:67:db:a3:a8:75:cb:7b:92:1f:11:ea:ea:
                    8c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:0F:9B:87:29:5B:6D:5F:BE:08:64:25:9D:0A:87:D3:8E:68:82:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/eb1e2d42-0f57-3de1-a77d-0bb0238b3c9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:86:3f:c7:9c:e9:03:88:3f:da:6e:6f:6a:35:ac:9b:c0:61:
         87:e6:46:3e:03:6b:8e:74:88:9a:33:05:ef:7e:73:d1:34:23:
         c6:ca:f6:b7:86:ef:62:88:e0:b9:e2:f3:d6:71:70:ed:40:73:
         34:70:ab:be:0f:c3:1f:c3:fb:ab:93:3e:8e:db:c2:ef:99:36:
         8a:5a:b2:c6:c7:fc:2a:b7:46:7b:63:cf:21:fd:e0:d7:0f:88:
         92:cf:80:44:b8:b1:b0:2e:19:65:93:c1:9e:b2:88:33:06:71:
         1f:8a:6c:18:20:97:24:a7:8a:84:56:7f:ac:6c:f6:e5:fa:1b:
         63:f6:aa:be:3d:81:73:4e:89:0c:22:0f:6e:1d:cc:83:fa:26:
         36:72:fd:aa:2f:9e:a8:07:cf:1a:ae:a0:c5:c2:fb:95:80:6e:
         0e:cb:ca:ae:af:db:fb:d7:25:12:52:c4:10:04:b7:38:f4:e7:
         d5:3e:00:c4:fd:10:71:2a:f1:1b:13:b8:63:ca:aa:f6:0a:ad:
         d8:44:cc:87:e5:af:a0:e7:fb:57:53:4a:0c:c4:f9:d5:bb:57:
         1a:b0:d9:22:c6:f7:e8:4b:9e:73:74:1e:45:97:58:9e:14:ea:
         ae:2f:b9:e9:cf:57:d1:e3:2a:cf:38:64:49:0d:18:d1:55:57:
         7c:d3:31:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 08:14:46 2025 by rpki-client