Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/e3fbc323-4091-322d-ba3c-0a48bf9677aa.roa
File:                     e3fbc323-4091-322d-ba3c-0a48bf9677aa.roa (raw, json)
Hash identifier:          bEGihK5pdQiygAlgI6BDwBXaWtWS4R2CIU3wyxHrFYg=
Subject key identifier:   84:53:5D:CF:77:DE:C7:A1:83:FB:F5:F0:8A:30:DB:30:FB:D4:4A:3C
Certificate issuer:       /CN=0858b07f-775e-4c05-ae48-d43b5d938b9b
Certificate serial:       010D0C9F4328584D71A50D5345BB7FB167FC0480
Authority key identifier: CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/e3fbc323-4091-322d-ba3c-0a48bf9677aa.roa
Signing time:             Thu 09 Apr 2026 01:00:23 +0000
ROA not before:           Thu 09 Apr 2026 01:00:23 +0000
ROA not after:            Wed 08 Jul 2026 01:00:23 +0000
asID:                     16509
IP address blocks:        165.125.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:71:a5:0d:53:45:bb:7f:b1:67:fc:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0858b07f-775e-4c05-ae48-d43b5d938b9b
        Validity
            Not Before: Apr  9 01:00:23 2026 GMT
            Not After : Jul  8 01:00:23 2026 GMT
        Subject: CN=8f6f602e-adc4-4fc3-9ab3-d8cc8f9670e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b1:e0:ab:d3:7b:32:87:1d:ab:3e:fc:66:ca:
                    82:6c:67:9f:bd:38:95:e7:02:7e:00:07:3f:db:9d:
                    cd:ad:c3:7a:a2:57:12:e4:09:0b:86:33:6a:31:d7:
                    85:c0:a0:64:51:5f:46:5b:c1:7d:02:81:a3:27:57:
                    42:29:1b:a6:0d:06:e5:f4:22:93:a6:8e:7f:40:6e:
                    d0:17:34:18:a9:23:78:6c:ee:4c:7e:02:a6:f5:05:
                    c1:23:4e:1f:95:e1:7d:c2:e7:d3:9d:78:16:ba:3f:
                    bd:cd:fd:cb:e3:6b:29:17:7c:47:cd:87:9c:73:f7:
                    53:09:bf:4c:87:93:2c:ab:e0:21:53:61:65:a7:26:
                    eb:bc:80:6d:63:5a:b9:7d:87:e0:70:62:46:ce:25:
                    e3:91:86:68:0f:12:22:e8:b4:cb:a8:be:c9:04:5f:
                    fd:2d:56:27:89:45:8c:6a:63:bc:13:36:66:52:af:
                    68:9e:78:75:c8:9c:e9:32:1d:ae:e4:2a:f9:9e:af:
                    ff:4f:c6:2c:47:d0:c8:fb:a0:1c:6f:f0:00:08:9e:
                    c3:1e:1f:0f:23:a1:b2:59:35:66:8f:bd:28:f1:3e:
                    80:a3:d4:19:fe:53:f0:9d:e2:dd:5c:0e:97:29:3e:
                    e1:43:d5:06:f8:55:5f:54:ea:2a:fb:ab:b4:ac:fc:
                    3b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:53:5D:CF:77:DE:C7:A1:83:FB:F5:F0:8A:30:DB:30:FB:D4:4A:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/e3fbc323-4091-322d-ba3c-0a48bf9677aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.crl

            X509v3 Authority Key Identifier:
                keyid:CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.125.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:67:38:c8:9d:33:86:f8:07:88:3f:52:99:76:11:b5:58:47:
         04:d9:20:69:d7:57:bf:0a:58:93:54:9e:c3:67:b9:ca:52:47:
         45:3a:20:a7:da:73:28:ae:1c:4b:5c:fe:af:e4:55:58:51:5a:
         57:4d:5a:24:8f:bd:91:3b:55:7d:f9:01:2e:d9:c3:0e:86:56:
         d8:57:98:ee:4d:91:a3:de:93:b0:dc:b6:e1:7e:49:77:82:d5:
         94:6a:c1:7d:cc:66:69:3c:13:ff:24:74:85:ee:2a:71:66:4a:
         f0:8c:41:d6:ec:dc:51:c3:2b:d2:0d:1f:72:73:f3:b8:3c:59:
         a7:af:1a:fa:56:da:e8:e7:85:d4:73:9c:2c:f2:b1:05:5e:a3:
         d2:bf:3a:3f:45:f7:c4:5b:f5:5c:7b:66:ed:dd:68:8d:7f:48:
         8d:ea:74:18:93:a0:ed:a1:13:93:eb:75:99:b0:c1:56:75:e4:
         3c:41:75:af:20:39:6b:22:05:21:75:b3:ae:74:46:d9:c1:ad:
         1a:a7:fb:b1:3c:ff:c6:b3:64:cf:73:25:c6:a6:74:21:e1:d4:
         e5:8f:e5:73:03:d3:fd:3d:37:e5:8d:f6:6a:e2:ac:31:ef:11:
         9d:9a:57:10:fd:31:2e:0e:25:51:1f:fa:ce:de:25:5c:40:99:
         f3:93:e5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 02:23:25 2026 by rpki-client