Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ec63c766-dc07-3781-98b1-d81f80c88023.roa
File:                     ec63c766-dc07-3781-98b1-d81f80c88023.roa (raw, json)
Hash identifier:          61oRk0eUtDp3Yjfm3B8Xx600InTT70TNzKqF4HCKhfc=
Subject key identifier:   4E:82:5B:E4:10:D6:1E:72:A7:D4:FB:42:99:FF:8F:B9:CC:01:EB:3F
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B9B3CFC124FA31A48F0572380
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ec63c766-dc07-3781-98b1-d81f80c88023.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     53813
IP address blocks:        165.225.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3c:fc:12:4f:a3:1a:48:f0:57:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=48633da7-5af1-42b3-acc8-2e6dcaf989d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:78:08:7d:a2:4f:04:8b:f1:f6:0d:b7:c0:64:
                    8a:e1:cc:22:fe:ba:8b:80:44:6c:d6:da:96:c3:c1:
                    4e:49:48:99:3b:2b:03:b2:98:22:52:0f:0b:2d:10:
                    d6:17:94:c4:90:7a:1a:d0:ca:c2:88:9d:80:22:08:
                    39:60:2a:f1:a9:93:fe:a4:17:ad:f9:90:64:fb:d8:
                    9a:13:f3:6b:84:b5:fe:67:3d:27:72:1b:8f:05:13:
                    17:91:4c:5a:8c:83:a6:34:0f:10:42:e1:33:14:5e:
                    0c:6e:66:f1:ce:c2:f4:1d:35:c9:07:7c:82:1b:d4:
                    44:b7:be:8a:2b:57:d8:ed:dc:d0:5e:8e:93:bf:7c:
                    0e:eb:8a:c7:62:1e:15:a7:4f:f2:9c:9c:48:55:32:
                    4b:0d:aa:02:c6:b5:47:64:21:1b:fd:d2:de:51:3b:
                    85:f7:75:0b:e0:c2:6f:4c:ea:81:db:0d:be:3a:8b:
                    05:ce:8e:e4:10:a4:31:88:a1:a3:66:d8:30:a0:de:
                    c1:10:29:78:3b:c3:1e:91:98:86:f9:1f:ad:41:f4:
                    26:8a:f8:de:bd:a3:90:9e:d6:b2:56:e5:2b:04:72:
                    d9:ab:3d:03:c5:6b:da:cb:ae:de:aa:df:0a:82:81:
                    7d:46:ac:ce:e6:83:7b:61:a6:5a:c0:1d:95:f3:40:
                    0e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:82:5B:E4:10:D6:1E:72:A7:D4:FB:42:99:FF:8F:B9:CC:01:EB:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/ec63c766-dc07-3781-98b1-d81f80c88023.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:a4:07:71:03:63:fb:97:2d:a2:e9:1d:c7:45:76:8e:07:a1:
         c2:c2:3f:09:22:dd:84:1e:42:5a:2e:0f:51:58:73:9b:30:91:
         75:a9:bd:1e:ea:07:04:bc:d2:0a:00:6b:ff:bd:d7:3d:a7:d7:
         32:11:29:fb:c5:31:73:d4:ab:34:f4:f4:01:53:11:f9:0f:9a:
         80:ae:65:33:d8:51:d5:9e:63:10:f4:8b:59:62:e1:fb:50:7a:
         e6:1c:4a:c0:77:a5:8b:b2:3f:ee:01:f9:70:67:ce:a7:82:e3:
         ce:e5:b2:5a:b1:7b:55:3d:f5:4d:ce:b8:56:92:3e:a5:78:53:
         f4:2d:52:10:45:1a:ed:0d:97:eb:aa:4a:b1:cb:b6:34:78:90:
         45:1e:8a:2b:27:5f:69:37:50:87:43:fd:d1:8b:60:fd:9b:61:
         95:f3:58:a9:40:28:8e:06:b5:a8:fe:cf:dc:a0:c2:5a:69:fe:
         28:d1:89:9f:1b:d9:fa:21:ac:ec:b0:ef:62:7c:94:4b:ad:62:
         cd:38:b5:78:34:ea:b6:f5:36:dd:b2:60:76:af:1c:5f:86:90:
         f1:b3:9e:1a:c2:3f:68:f6:3f:ec:9b:0b:31:66:75:07:86:d2:
         cd:6d:3e:44:a8:1f:e3:c0:fa:9b:a6:9c:d1:97:4d:2a:8d:ef:
         04:f3:49:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 02:11:26 2025 by rpki-client