Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/7d1b1d4f-b115-3475-b269-19baceb34255.roa
File:                     7d1b1d4f-b115-3475-b269-19baceb34255.roa (raw, json)
Hash identifier:          BxO/rfed8U2J9UD8+DYc7xA6t/NGgj97UdDRnwHsYhQ=
Subject key identifier:   0F:45:AE:6C:C1:D8:81:72:F8:4A:F2:39:88:E2:13:E9:9C:06:A0:83
Certificate issuer:       /CN=0858b07f-775e-4c05-ae48-d43b5d938b9b
Certificate serial:       010D0C9F4328584F506D55A053D45E2420BED680
Authority key identifier: CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/7d1b1d4f-b115-3475-b269-19baceb34255.roa
Signing time:             Sun 27 Sep 2026 13:00:12 +0000
ROA not before:           Sun 27 Sep 2026 13:00:12 +0000
ROA not after:            Sat 26 Dec 2026 14:00:12 +0000
asID:                     29684
IP address blocks:        165.125.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:6d:55:a0:53:d4:5e:24:20:be:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0858b07f-775e-4c05-ae48-d43b5d938b9b
        Validity
            Not Before: Sep 27 13:00:12 2026 GMT
            Not After : Dec 26 14:00:12 2026 GMT
        Subject: CN=89c9423e-a02c-4e2c-8d0f-10c10773ca8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ea:0c:67:c5:22:81:6c:4e:be:fd:21:a6:9f:
                    9e:93:e7:c0:2a:c9:0a:03:3e:15:52:7a:c4:8e:39:
                    9c:4b:f2:11:5b:62:1c:a8:8a:6c:78:f5:3c:42:ff:
                    b8:98:e5:85:19:5e:b4:84:7f:d5:38:13:1a:53:d6:
                    c4:61:7d:de:84:f7:4e:af:e4:d6:2e:05:2d:4a:e4:
                    a3:d1:e3:ae:af:49:5a:26:87:24:3a:8e:85:b6:e6:
                    82:1f:d0:b0:48:e1:bc:7a:60:e2:1d:fb:43:89:e7:
                    b5:61:a0:e8:eb:05:50:2d:ab:11:f2:ef:04:b9:cb:
                    6e:76:64:08:78:58:38:56:57:6b:0d:42:f7:21:3a:
                    b8:0a:1a:c6:9b:16:5a:4b:13:2e:32:19:63:c3:21:
                    76:60:ed:63:bb:35:a5:b7:7f:c4:30:8f:8c:11:93:
                    18:93:54:2a:c4:40:5f:89:9f:ac:f6:46:3a:cd:dc:
                    71:51:8f:f5:82:76:16:7e:b2:9f:1d:37:64:93:ac:
                    cf:3b:b3:22:ed:53:22:af:ad:6b:a4:d5:b2:85:ca:
                    7b:64:8e:0c:8c:23:f7:7b:87:56:0c:8d:c7:52:d1:
                    4d:3a:0a:70:bb:71:23:0b:b4:fb:4a:1f:44:59:5d:
                    56:e6:bb:c9:84:05:c3:09:4e:13:b2:8e:15:ab:b5:
                    a2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:45:AE:6C:C1:D8:81:72:F8:4A:F2:39:88:E2:13:E9:9C:06:A0:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/7d1b1d4f-b115-3475-b269-19baceb34255.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.crl

            X509v3 Authority Key Identifier:
                keyid:CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.125.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:f4:81:4e:52:3f:9b:01:23:a2:5d:49:85:7e:43:15:40:27:
         b9:e0:2b:c7:7a:4e:62:f0:3d:69:89:ab:7d:b5:1c:7d:2f:10:
         7b:9c:2e:a5:60:70:f4:97:9c:06:6f:af:4f:12:27:a2:a1:d3:
         2a:0d:19:c9:fb:c6:87:09:db:c7:6d:57:05:6b:ef:ff:92:1d:
         27:e5:66:61:9e:68:23:1a:91:72:81:f1:0b:47:66:ad:08:86:
         0c:01:72:f4:58:09:07:ba:d5:16:97:75:b3:7d:00:b2:b9:22:
         d6:7d:46:8e:fa:81:06:71:c0:aa:e5:aa:5f:09:b6:bf:77:32:
         61:a8:8e:b8:33:24:b4:9f:bf:c1:08:36:4b:0a:a9:f7:83:1b:
         66:a5:28:0e:32:b5:73:15:d9:a8:fd:2a:0d:45:5a:98:53:a2:
         da:75:90:3b:7b:b0:b8:dc:73:c2:14:bf:a4:3d:56:69:9b:e1:
         d5:f1:76:3a:4c:6c:e1:14:a9:7e:3c:7f:a3:a3:78:c1:9e:fd:
         c0:33:b6:d5:f7:75:f7:71:6b:7c:05:e0:87:c3:c3:05:be:61:
         38:45:d3:3f:fc:9c:cf:62:69:e5:e2:31:19:97:54:f5:b4:7a:
         e6:6c:6d:ad:97:ad:d7:44:73:1c:91:31:45:6c:e0:02:ec:8a:
         c2:51:ee:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbVWgU9ReJCC+1oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDg1OGIwN2YtNzc1ZS00YzA1LWFlNDgtZDQzYjVkOTM4
YjliMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk
ODljOTQyM2UtYTAyYy00ZTJjLThkMGYtMTBjMTA3NzNjYThlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneoMZ8UigWxOvv0hpp+ek+fAKskKAz4VUnrE
jjmcS/IRW2IcqIpsePU8Qv+4mOWFGV60hH/VOBMaU9bEYX3ehPdOr+TWLgUtSuSj
0eOur0laJockOo6FtuaCH9CwSOG8emDiHftDiee1YaDo6wVQLasR8u8EuctudmQI
eFg4VldrDUL3ITq4ChrGmxZaSxMuMhljwyF2YO1juzWlt3/EMI+MEZMYk1QqxEBf
iZ+s9kY6zdxxUY/1gnYWfrKfHTdkk6zPO7Mi7VMir61rpNWyhcp7ZI4MjCP3e4dW
DI3HUtFNOgpwu3EjC7T7Sh9EWV1W5rvJhAXDCU4Tso4Vq7WinQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA9FrmzB2IFy+EryOYjiE+mcBqCDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wODU4
YjA3Zi03NzVlLTRjMDUtYWU0OC1kNDNiNWQ5MzhiOWIvN2QxYjFkNGYtYjExNS0z
NDc1LWIyNjktMTliYWNlYjM0MjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMDg1OGIwN2YtNzc1ZS00YzA1LWFl
NDgtZDQzYjVkOTM4YjliLzA4NThiMDdmLTc3NWUtNGMwNS1hZTQ4LWQ0M2I1ZDkz
OGI5Yi5jcmwwHwYDVR0jBBgwFoAUzm+k9LgBLNbG78YySi2NeLwdDYswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8wODU4YjA3Zi03NzVlLTRjMDUtYWU0OC1kNDNi
NWQ5MzhiOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApX0BMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFb0gU5SP5sBI6JdSYV+QxVAJ7ngK8d6TmLwPWmJq321HH0vEHucLqVg
cPSXnAZvr08SJ6Kh0yoNGcn7xocJ28dtVwVr7/+SHSflZmGeaCMakXKB8QtHZq0I
hgwBcvRYCQe61RaXdbN9ALK5ItZ9Ro76gQZxwKrlql8Jtr93MmGojrgzJLSfv8EI
NksKqfeDG2alKA4ytXMV2aj9Kg1FWphTotp1kDt7sLjcc8IUv6Q9Vmmb4dXxdjpM
bOEUqX48f6OjeMGe/cAzttX3dfdxa3wF4IfDwwW+YThF0z/8nM9iaeXiMRmXVPW0
euZsba2XrddEcxyRMUVs4ALsisJR7pg=
-----END CERTIFICATE-----
Generated at Sat Oct 24 12:17:50 2026 by rpki-client