Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d30f1986-8042-3c76-9bf4-67a8d3f25e89.roa
File:                     d30f1986-8042-3c76-9bf4-67a8d3f25e89.roa (raw, json)
Hash identifier:          U5f8KsOh3udMrTQ43cEUV+FGLg3+CDJ4p6fY4iNWK88=
Subject key identifier:   C5:32:38:8C:FB:FF:3C:E0:52:05:78:17:1E:A0:48:2A:56:FA:32:1D
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EE4233C9F3B0D1C3C8EC1CAC0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d30f1986-8042-3c76-9bf4-67a8d3f25e89.roa
Signing time:             Wed 19 Aug 2026 18:03:49 +0000
ROA not before:           Wed 19 Aug 2026 18:03:49 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     12008
IP address blocks:        165.254.102.64/26 maxlen: 32
                          165.254.103.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:3c:9f:3b:0d:1c:3c:8e:c1:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 19 18:03:49 2026 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=a10b245a-1087-47fe-9a50-cb6a19a41659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a3:3a:75:2b:9d:16:ca:da:95:a6:b6:cc:2d:
                    1a:53:39:f0:4d:f8:00:c6:5b:10:72:59:26:a8:75:
                    a7:00:73:38:10:cf:3a:4d:3f:50:bb:11:c2:81:02:
                    a7:fc:d6:a5:ec:f8:00:d8:38:c0:5d:a8:21:c4:8b:
                    cd:be:0d:13:99:6c:fd:37:67:78:aa:31:5a:95:77:
                    fb:3d:4b:a0:96:cf:d3:db:7f:5b:83:6a:14:7a:ca:
                    98:aa:ab:07:b0:f5:2c:f8:4b:13:3e:7d:0b:6e:54:
                    e1:c9:ee:eb:e7:32:4a:e7:c6:6a:65:15:03:49:84:
                    6d:9e:d0:d8:ee:78:14:cf:2c:74:3f:61:3d:32:f6:
                    2c:33:a0:9b:f0:de:33:7c:49:19:5b:da:23:d4:13:
                    1b:b4:44:e4:2e:aa:15:d3:5b:52:09:63:e1:25:b2:
                    0d:c8:d9:46:d4:16:c0:7e:55:d3:34:89:60:6b:45:
                    56:20:57:6c:14:cf:0f:9d:35:1c:87:fd:ba:19:b1:
                    30:50:15:13:62:fe:9f:fc:60:1e:77:91:75:38:97:
                    24:a7:21:fc:28:4a:76:a5:51:69:c9:49:66:85:3e:
                    67:fa:bb:4f:13:72:8a:76:e0:9f:6c:e7:e1:85:5d:
                    54:de:e9:6e:32:a1:92:40:a9:8d:7c:7e:e2:72:c9:
                    1e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:32:38:8C:FB:FF:3C:E0:52:05:78:17:1E:A0:48:2A:56:FA:32:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d30f1986-8042-3c76-9bf4-67a8d3f25e89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.102.64/26
                  165.254.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:44:c7:0d:cd:07:c5:c4:28:d6:d5:f4:36:0f:09:e7:8f:0e:
         82:eb:7e:80:36:d1:c9:cf:42:61:92:fd:b8:2b:24:aa:83:0d:
         1c:52:dc:fb:87:7c:9c:c3:19:d0:83:2c:f7:d4:d3:54:54:fc:
         0e:b1:34:bb:52:30:aa:93:00:8d:3c:89:07:7f:f3:ba:ac:f8:
         ec:4b:f6:f2:40:12:79:73:71:fb:45:d9:2b:b6:0a:9c:29:3a:
         bf:e2:ae:bb:e8:bb:57:e5:57:74:22:26:10:1a:0e:2c:9a:bf:
         0d:8c:7f:48:9f:fb:ee:3f:dd:2b:a5:bf:4e:4c:97:ab:68:94:
         54:12:bc:8d:9d:a2:67:65:4e:c2:8c:ac:4b:4c:10:98:9a:ec:
         ac:df:a3:cd:73:11:33:cc:0f:9e:7c:27:c2:93:02:1f:97:9a:
         0b:31:ea:73:93:c0:3a:ed:d7:c4:11:e0:e9:73:3e:7c:a7:47:
         8d:16:1b:0f:ce:80:83:67:03:69:69:e4:39:09:26:a2:45:1f:
         89:97:47:3e:66:01:58:eb:47:11:ed:90:64:bc:7f:ee:ff:a9:
         74:55:a5:ef:ba:cd:e7:c3:74:ba:b5:fc:8e:34:db:bc:a3:d6:
         6b:60:bc:bd:42:30:99:75:f1:61:28:b7:e5:01:5e:58:70:bd:
         d4:ad:b9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:14:02 2026 by rpki-client