Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/28825819-faa0-3299-98f6-374b899c8d28.roa
File:                     28825819-faa0-3299-98f6-374b899c8d28.roa (raw, json)
Hash identifier:          1ZUKsRMl+NFoGLon7em0s6H3v5S2i7a6ffWiT8Qai3U=
Subject key identifier:   B9:50:05:21:1C:F1:1A:B0:96:7D:C0:0D:E9:28:5A:C8:6C:41:9D:D8
Certificate issuer:       /CN=65efdd79-a2c2-4fd4-ad1a-5d5384138412
Certificate serial:       010D0C9F4328584EA790B01E39503B1056CEE240
Authority key identifier: AC:12:E4:98:4B:F2:07:3C:A9:8C:3F:88:21:06:DD:26:65:FC:5C:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/28825819-faa0-3299-98f6-374b899c8d28.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14048
IP address blocks:        141.225.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:b0:1e:39:50:3b:10:56:ce:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65efdd79-a2c2-4fd4-ad1a-5d5384138412
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=961c5e0f-52e6-4fe9-8200-eecb7a1e8a28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5b:95:a3:2e:ef:23:da:7e:6f:bb:6b:bc:93:
                    9c:d7:07:80:23:ba:66:25:a9:b0:eb:6d:b5:dc:0e:
                    a8:22:6e:28:34:6f:d0:1f:d0:4f:a1:a0:e2:26:6b:
                    b8:eb:00:dc:fc:46:4d:9e:a7:dd:d5:2d:52:ba:1b:
                    ee:ce:e0:29:74:0b:0a:78:b9:b4:a7:12:6b:41:84:
                    14:bd:7e:a4:57:6c:35:07:e2:c2:4d:41:9e:a6:e1:
                    4b:3d:21:5e:4d:bb:4a:3c:69:66:9e:02:a3:92:01:
                    da:c1:30:22:ed:ba:85:8b:5b:f7:25:46:e8:1f:6a:
                    32:a6:04:38:3c:51:af:58:f1:b8:cf:3d:97:bb:b6:
                    28:5b:d8:52:89:18:6d:76:c5:4a:95:74:c9:c8:56:
                    b1:69:bb:df:e2:28:a2:a7:36:c3:b6:df:6a:69:ce:
                    40:1a:bc:48:aa:e9:37:cd:9a:c7:99:bd:8c:89:c9:
                    f8:ad:c4:0e:b4:43:37:89:f9:71:ac:15:05:3e:bf:
                    9c:75:6b:58:a6:8f:16:ad:a8:fc:5d:25:c3:62:49:
                    c8:7d:cc:1e:ab:7c:c1:6d:e6:a9:3c:70:5e:67:a6:
                    6e:02:5e:69:8e:ae:c0:bd:8d:ce:cc:86:44:6c:a3:
                    de:46:a8:ac:c5:4b:49:67:eb:2c:93:81:9e:07:96:
                    3f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:50:05:21:1C:F1:1A:B0:96:7D:C0:0D:E9:28:5A:C8:6C:41:9D:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/28825819-faa0-3299-98f6-374b899c8d28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.crl

            X509v3 Authority Key Identifier:
                keyid:AC:12:E4:98:4B:F2:07:3C:A9:8C:3F:88:21:06:DD:26:65:FC:5C:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.225.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:f9:ee:c4:0a:8e:86:4b:dd:c8:f7:a7:b5:11:d5:69:5d:0a:
         ef:05:c5:59:08:61:b9:5a:a5:ff:f3:4d:20:c1:a6:94:d6:97:
         c0:a9:7d:c1:70:0d:b6:de:f4:c1:78:df:82:4a:20:fa:13:34:
         e2:93:9f:62:6b:de:ce:2a:a4:19:cf:a7:4e:56:ec:41:a1:6b:
         79:fb:9a:85:dc:e6:11:9d:0d:01:1c:ab:d3:98:f7:36:87:10:
         07:05:10:91:4f:37:22:28:a9:fd:0b:2e:fe:1a:77:2c:b2:77:
         ec:a0:6a:5f:24:be:b9:6c:89:43:5a:9b:14:e3:92:2d:0a:e4:
         b5:3e:c9:3d:8c:ad:1a:18:e8:dd:3f:f8:37:fa:a2:8f:7e:b8:
         03:a5:28:04:5d:43:21:22:0d:ba:20:22:65:96:cf:6d:51:b6:
         0f:db:c2:a9:6a:c0:8f:d0:dc:c1:b8:13:12:d2:da:4e:80:90:
         b8:23:02:11:d8:99:ab:b2:89:6f:ce:7e:e9:b4:3a:a9:20:6b:
         33:d6:ae:39:45:9e:bf:10:3e:fe:77:f5:24:39:b6:28:a7:e8:
         87:26:3a:aa:2f:a7:c8:d1:c9:e4:a1:f0:15:04:90:2f:ce:70:
         a1:52:99:d7:fb:17:e8:1e:99:80:6c:e8:cb:ac:14:ad:c5:a7:
         ec:ce:7a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:40:22 2026 by rpki-client