Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0b354c56-b1c1-3be3-852d-2a607348a71d.roa
File:                     0b354c56-b1c1-3be3-852d-2a607348a71d.roa (raw, json)
Hash identifier:          XiM7EOIJ4p/GC4z89ITl1J15EWD/RYmEnFlIonENRBc=
Subject key identifier:   84:2C:11:29:06:96:ED:4E:BC:CB:6D:1D:78:39:ED:E5:8D:71:53:45
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584F093CE9A206045947782E73C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0b354c56-b1c1-3be3-852d-2a607348a71d.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     3939
IP address blocks:        165.254.1.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:e9:a2:06:04:59:47:78:2e:73:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=d64a9dc5-af6f-4784-a15c-f9320e55675d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:74:7a:1e:83:87:95:79:93:da:42:73:eb:e3:
                    b5:13:e7:c5:fa:78:1a:e7:2b:29:54:fa:ba:7f:a6:
                    e4:c6:63:9a:a4:07:ed:ca:a4:70:12:64:17:46:f2:
                    cd:d9:84:82:68:06:1b:99:c0:2e:1f:7f:fd:04:bc:
                    03:51:2e:03:f0:dc:e0:55:d3:4e:f0:8c:58:2a:b9:
                    74:77:d9:7e:ab:f1:76:68:60:35:81:5a:b0:02:ab:
                    20:ba:2a:fc:3f:77:95:bc:d5:8d:3f:0c:6f:28:09:
                    54:ef:08:8c:74:01:d4:86:a7:05:b4:ab:2a:ef:d1:
                    c1:46:31:e7:7e:61:1f:f0:22:a9:5c:12:98:48:57:
                    0c:23:28:88:e6:87:2c:7d:ab:95:56:1c:3b:f5:b4:
                    5e:59:e8:ea:21:d8:66:be:47:4a:07:b5:04:02:e3:
                    8c:3c:5a:4c:91:81:55:30:e5:19:a2:6e:17:01:95:
                    46:21:d8:19:b7:e2:a0:77:58:5d:c4:df:ee:e1:60:
                    cb:2a:13:c4:a5:4b:60:74:4c:a2:b3:28:b4:bb:b5:
                    03:39:3e:00:62:a4:3d:08:33:bf:37:b5:54:e6:8d:
                    9a:2e:07:3c:07:2f:74:44:df:b6:cc:13:c7:cc:13:
                    e2:e1:17:f6:9d:7e:7d:08:b1:06:ef:9c:d1:27:54:
                    a9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:2C:11:29:06:96:ED:4E:BC:CB:6D:1D:78:39:ED:E5:8D:71:53:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0b354c56-b1c1-3be3-852d-2a607348a71d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.1.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:23:37:45:a1:56:59:02:92:6c:45:db:c4:d4:45:41:82:66:
         c4:8c:69:90:4f:8a:99:3b:90:c7:9d:81:c5:81:4a:0d:78:7c:
         27:11:44:3c:10:cb:82:12:23:10:b4:12:87:32:cd:69:fe:87:
         8d:f3:61:2e:a5:d3:ea:01:8e:e8:16:d5:63:0a:cc:f2:fa:ef:
         d5:0e:16:bc:97:3c:13:43:11:db:16:fe:20:d4:e8:cb:89:33:
         84:a2:53:77:0a:c9:67:3f:8a:d0:e7:27:f4:51:32:d4:95:d3:
         00:30:6b:25:9f:49:fe:df:9b:80:8e:ec:cb:00:92:a9:65:3e:
         93:d1:f8:28:27:62:f0:52:b0:f1:f5:ab:e4:8d:32:0c:3a:c3:
         94:da:21:29:c2:41:e3:57:b4:08:9e:e9:20:90:61:32:92:5c:
         00:5b:e8:47:06:1a:67:c8:03:2a:3f:a7:b8:51:36:dc:b4:c9:
         14:af:90:4d:a6:a2:73:f5:47:c2:c8:fb:c5:9d:62:e4:db:6d:
         cb:0a:6b:a4:64:5f:8f:67:70:e5:7a:64:a3:3c:63:09:c3:6b:
         4b:e9:c3:f7:64:bb:08:e8:fa:17:d9:86:1b:7c:c6:01:b6:61:
         cf:a4:81:dd:e0:59:da:3a:e1:66:dc:26:6c:1e:34:9e:5e:01:
         3a:30:da:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 07:14:12 2026 by rpki-client