Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/7d1b1d4f-b115-3475-b269-19baceb34255.roa
File:                     7d1b1d4f-b115-3475-b269-19baceb34255.roa (raw, json)
Hash identifier:          8FCCp0Lbc498LN2iKuqtXWaeWkzLz1Jly/wsYXer8ic=
Subject key identifier:   16:FB:BE:70:C4:12:33:B5:0D:FE:29:19:38:25:9F:DB:A8:FC:5F:49
Certificate issuer:       /CN=0858b07f-775e-4c05-ae48-d43b5d938b9b
Certificate serial:       010D0C9F4328584EAE81A5FD4BCD699229342F80
Authority key identifier: CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/7d1b1d4f-b115-3475-b269-19baceb34255.roa
Signing time:             Fri 31 Jul 2026 13:00:12 +0000
ROA not before:           Fri 31 Jul 2026 13:00:12 +0000
ROA not after:            Thu 29 Oct 2026 13:00:12 +0000
asID:                     29684
IP address blocks:        165.125.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:81:a5:fd:4b:cd:69:92:29:34:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0858b07f-775e-4c05-ae48-d43b5d938b9b
        Validity
            Not Before: Jul 31 13:00:12 2026 GMT
            Not After : Oct 29 13:00:12 2026 GMT
        Subject: CN=23c24a9c-1294-48a4-843e-99362bffc4cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:46:5a:4a:b7:26:24:52:d8:23:67:25:66:95:
                    ca:c2:86:9f:d7:bd:83:ff:47:c2:44:6b:fa:8f:f6:
                    f2:17:bd:0d:4c:a6:c6:d7:b3:a6:87:57:fb:f2:2a:
                    c4:be:60:44:3c:84:a7:a3:b9:e2:89:13:77:bf:c0:
                    55:b8:2f:1c:7a:19:9d:1e:fa:fb:41:47:12:f0:99:
                    b6:50:ac:78:f8:87:ad:fc:53:b6:32:0c:58:d0:c8:
                    59:a3:55:30:51:29:ce:ac:4a:35:e4:c6:6b:d5:a6:
                    88:f4:81:b7:8d:6d:dc:1b:22:28:ce:8f:ae:14:5e:
                    96:6b:a2:da:1d:02:be:ce:df:bc:bc:a7:dc:00:1d:
                    c1:e4:59:6a:fb:68:36:b2:b2:d1:90:72:10:0c:47:
                    1c:a0:3e:e9:5b:ce:e6:2c:15:8b:16:27:c1:ff:1b:
                    82:d3:46:6c:f0:19:a1:2b:53:7a:be:64:e7:4e:f5:
                    37:92:48:16:81:bc:6f:b5:f6:3b:bb:cc:80:4c:4c:
                    7b:ae:76:5f:f7:cc:db:10:47:00:9c:e0:1d:2c:7c:
                    c8:98:dd:fe:a6:45:3a:73:1d:30:03:a4:8c:5a:3e:
                    d8:71:e3:08:68:b3:f2:a0:da:46:fe:05:fe:c3:a3:
                    82:e4:b3:55:51:db:a5:79:4d:63:09:f1:d6:68:10:
                    9a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:FB:BE:70:C4:12:33:B5:0D:FE:29:19:38:25:9F:DB:A8:FC:5F:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/7d1b1d4f-b115-3475-b269-19baceb34255.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.crl

            X509v3 Authority Key Identifier:
                keyid:CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.125.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:88:f2:ad:cb:b1:e7:be:d2:46:6a:07:9c:a3:9e:03:37:be:
         67:dd:21:7a:19:69:73:44:13:54:32:ee:77:30:17:1c:df:58:
         22:00:61:b9:ca:10:ca:7d:f3:30:9d:aa:e8:94:93:45:39:5c:
         78:86:6f:8f:89:19:2e:10:5a:88:1b:fe:f1:98:8d:ff:65:81:
         69:fe:6e:8c:dd:67:4a:7f:c6:12:03:86:ef:b7:d8:42:b5:33:
         be:3f:1a:d3:c2:0d:af:e6:ef:fa:90:e2:78:e6:10:33:34:e2:
         65:af:7f:5b:3b:20:1b:f9:78:63:ef:66:bf:34:e1:9d:8a:1c:
         41:db:02:c6:bb:6e:36:b3:98:a4:35:1f:ae:ca:fe:44:69:f2:
         c2:df:89:49:f4:54:9b:5d:b8:6d:a3:dd:da:49:3e:99:cd:f2:
         1a:d1:6a:ba:0c:56:84:8a:92:26:0c:83:86:86:8a:0d:e4:29:
         8e:bd:a9:b6:35:18:fa:44:8f:98:e3:1c:ab:a0:48:3a:2c:23:
         2e:99:c8:be:90:3a:7d:93:c6:36:c8:17:f2:aa:9f:b1:60:8d:
         83:14:7f:19:d0:6e:21:32:f3:91:c9:7b:b1:94:ed:f5:05:bf:
         8a:73:cf:c0:31:74:85:a6:a5:f5:db:a8:3c:75:d5:28:a3:86:
         e2:0a:56:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:03:34 2026 by rpki-client