Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/94c81576-d7df-3712-8359-86dc46480453.roa
File:                     94c81576-d7df-3712-8359-86dc46480453.roa (raw, json)
Hash identifier:          bOQZG4Ex6TgugBfBqvQ4p/5r3bPeqst0nDEJvz0nvPQ=
Subject key identifier:   27:98:E1:EA:A6:88:47:1B:9F:C6:1C:6D:34:BB:B6:95:A3:EC:0B:AB
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584EA79C09987F1CC53A0A1E7E00
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/94c81576-d7df-3712-8359-86dc46480453.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14061
IP address blocks:        165.245.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:09:98:7f:1c:c5:3a:0a:1e:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7008fd55-dbdb-420f-837d-0ccd575e3181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:78:32:f5:47:2e:d8:fb:68:11:dc:6b:ea:40:
                    a7:d7:0f:3f:b6:e3:1b:d1:09:0a:d8:63:01:91:04:
                    0f:96:90:80:c4:b5:a9:03:61:78:db:9f:f8:c4:0b:
                    fc:6e:e4:1c:e0:09:8f:f0:d0:82:fb:bb:00:a7:82:
                    83:8b:23:81:43:6c:d6:42:c8:7d:c1:46:51:cf:21:
                    df:74:20:70:45:5c:b5:ac:56:9a:1d:4e:61:38:6d:
                    a4:5e:94:e1:1f:f8:ce:b2:b8:2e:8c:2d:cb:38:22:
                    6a:3c:98:d6:c2:4d:53:b7:bc:e0:32:22:19:dc:4a:
                    a5:63:d9:a2:45:e5:7f:d5:34:88:47:c4:ea:af:94:
                    b1:d2:1c:95:87:ea:c0:6a:33:a2:7b:8b:f4:e7:74:
                    67:86:1a:4c:a3:8a:1b:1a:d0:07:ae:0b:f6:b9:25:
                    7f:b2:be:35:9b:3f:73:7f:a9:bf:b1:4f:ae:2d:9a:
                    dd:3e:3a:b1:75:c9:48:13:45:63:0f:7b:43:94:83:
                    0a:47:33:58:dd:28:7a:a6:8e:f9:48:be:9c:24:73:
                    b7:63:0a:63:87:0f:8d:95:68:40:33:60:08:e7:39:
                    fc:cd:df:c9:62:18:52:61:f0:43:8a:c1:2e:97:e9:
                    09:b2:f9:eb:5a:3d:68:85:0c:4c:df:58:ac:86:f3:
                    8e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:98:E1:EA:A6:88:47:1B:9F:C6:1C:6D:34:BB:B6:95:A3:EC:0B:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/94c81576-d7df-3712-8359-86dc46480453.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.245.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:ee:ba:4c:ce:1a:e8:65:f7:f4:f5:7d:af:54:89:e2:bb:00:
         71:7f:fd:6a:97:70:a7:85:89:9c:fc:1f:0d:36:c3:a1:06:be:
         72:19:71:be:28:06:48:d6:7b:6e:b1:74:7f:6c:19:96:57:75:
         e9:e3:ad:c0:8f:51:1d:b7:ac:35:0a:51:fd:92:8e:39:b9:bf:
         f7:71:f3:02:8b:60:51:19:ab:3d:98:6b:b9:02:80:f5:0a:f7:
         76:5b:dd:d0:53:a2:35:58:a6:a3:d5:14:76:5b:c9:83:de:9a:
         bf:cb:8e:21:28:d5:c0:47:86:1b:64:b1:fd:b8:4e:96:04:b6:
         3f:eb:b2:54:7f:e9:1b:21:03:06:5f:6c:eb:74:27:44:55:b1:
         6b:83:7b:f9:1e:7d:94:60:17:ae:1f:88:c0:61:b7:de:b7:43:
         2c:8d:77:32:3f:8d:c4:83:9a:29:6a:49:2b:1d:aa:eb:77:b9:
         eb:22:4e:03:97:11:7c:34:40:e5:71:f5:fa:5e:58:f3:38:62:
         6d:79:0a:25:c8:c9:f8:16:a7:8f:a1:4f:30:d9:97:5f:e4:82:
         35:0c:90:7a:7a:ee:dc:af:3b:8b:75:74:cd:b6:82:fe:61:9d:
         36:da:72:cf:8a:d1:4e:95:46:0d:6c:9f:47:11:a6:9b:19:41:
         6e:7a:09:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:19:43 2026 by rpki-client