Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/e3fbc323-4091-322d-ba3c-0a48bf9677aa.roa
File:                     e3fbc323-4091-322d-ba3c-0a48bf9677aa.roa (raw, json)
Hash identifier:          yYz1dkAyn5TytcHc8N4Z1/lv9YHBzrrWSp7dAaPMosw=
Subject key identifier:   1B:79:C3:8A:47:09:72:B9:72:C9:EA:C6:BD:00:1C:86:EF:D5:F4:68
Certificate issuer:       /CN=0858b07f-775e-4c05-ae48-d43b5d938b9b
Certificate serial:       010D0C9F4328584EF44CB305F965E10051441C40
Authority key identifier: CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/e3fbc323-4091-322d-ba3c-0a48bf9677aa.roa
Signing time:             Tue 25 Aug 2026 13:00:12 +0000
ROA not before:           Tue 25 Aug 2026 13:00:12 +0000
ROA not after:            Mon 23 Nov 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        165.125.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:4c:b3:05:f9:65:e1:00:51:44:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0858b07f-775e-4c05-ae48-d43b5d938b9b
        Validity
            Not Before: Aug 25 13:00:12 2026 GMT
            Not After : Nov 23 14:00:12 2026 GMT
        Subject: CN=b239b3c5-892a-4327-98b0-dc69a4d2575d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:51:6f:25:1e:ec:02:1e:50:f9:13:e7:76:ca:
                    6b:92:41:59:7d:b8:6f:d4:67:fd:b5:85:03:c6:6b:
                    34:d7:71:a4:e8:2a:b7:23:19:ab:ed:2f:bc:e2:94:
                    ce:0c:57:8e:9c:23:12:7a:54:95:61:f8:93:e6:65:
                    26:47:8a:f1:b4:ff:86:16:f0:25:32:21:46:9a:60:
                    69:9f:15:35:3a:3c:ae:b0:a1:68:11:43:df:ef:d2:
                    55:2b:d3:03:24:fc:ba:04:2b:d7:30:5d:f9:c5:c0:
                    da:15:c8:07:8b:66:53:44:84:7b:7e:27:e4:1a:d0:
                    2c:ab:c0:d2:31:f4:27:43:2f:34:12:59:ad:82:7c:
                    44:01:3d:a2:3d:1a:e5:33:33:c8:d3:b1:b9:2f:ea:
                    bd:b7:22:17:35:87:dc:d0:5f:73:ec:99:c7:84:0d:
                    01:5b:b2:62:29:e0:4c:17:33:ad:0e:83:11:f6:9a:
                    a1:36:fd:23:54:c8:5f:e8:0a:4e:16:c7:15:5f:cc:
                    cb:53:23:0b:e4:81:e8:c6:77:41:24:7d:4a:90:97:
                    fc:9e:51:83:86:97:7a:d7:90:ee:63:90:f6:db:d7:
                    d9:ba:b0:a1:45:cb:81:cb:0b:5c:6c:06:92:2b:99:
                    6b:1c:88:db:3e:51:c0:ad:3a:8c:10:d1:44:96:7b:
                    36:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:79:C3:8A:47:09:72:B9:72:C9:EA:C6:BD:00:1C:86:EF:D5:F4:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/e3fbc323-4091-322d-ba3c-0a48bf9677aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.crl

            X509v3 Authority Key Identifier:
                keyid:CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.125.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:91:61:2f:40:20:4a:a9:41:db:32:81:31:a4:c3:10:b9:4e:
         c3:d8:73:d6:ea:b1:26:89:79:16:47:23:51:eb:d9:26:ba:43:
         16:0d:18:2b:dd:da:ae:04:b1:cb:b4:a1:86:78:26:eb:81:9f:
         22:de:82:b0:2e:c8:09:1e:28:64:4b:25:ac:f7:8a:62:ac:38:
         77:98:a8:c2:3b:cf:04:e4:6b:9f:ed:21:68:ff:cb:2b:a5:99:
         dc:c2:23:4d:db:4a:98:7a:5c:65:54:8f:8f:c2:3a:01:c5:5d:
         4b:c2:8a:78:14:62:c5:c6:47:77:49:d5:32:39:cf:d4:60:b8:
         d1:3d:b9:a2:ae:ab:8a:bb:65:83:c2:95:bf:be:09:f5:90:aa:
         ab:dc:bd:61:a1:43:13:f5:16:34:33:6f:cd:11:6a:08:cf:5a:
         38:31:0f:53:4b:d4:d9:2c:bb:00:ac:7e:34:45:9d:45:97:4c:
         0b:5b:0b:85:33:bb:e4:09:1e:1e:70:f0:e7:dc:5a:e0:95:23:
         53:1a:70:ec:a4:1b:8b:e0:a5:2a:3e:b2:8c:43:02:d3:65:fa:
         0d:02:77:c0:4f:14:d1:4d:4a:61:f6:67:39:6f:aa:f2:d7:7a:
         e2:a6:2c:28:cb:c4:e1:20:b3:7c:a2:65:7f:8f:68:3a:e1:d2:
         55:24:12:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:01:38 2026 by rpki-client