Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/7d4a0730-5290-3e65-b079-91e1ebf53658.roa
File:                     7d4a0730-5290-3e65-b079-91e1ebf53658.roa (raw, json)
Hash identifier:          VaFlbGJRIsS56jGvkQXiCHh1FkMlX4p0MSu9ABp72FY=
Subject key identifier:   A5:78:6A:45:84:46:E8:17:27:C5:0A:F7:DC:5E:4D:3D:71:9F:77:74
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584D4D5A6444D8FA52CC565A8000
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/7d4a0730-5290-3e65-b079-91e1ebf53658.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     46152
IP address blocks:        65.51.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:64:44:d8:fa:52:cc:56:5a:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=194099a7-bf88-4411-bb86-0d998e697fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0b:ad:52:ea:ea:4d:a6:d7:c5:42:fe:80:4b:
                    b8:8d:7e:8e:4f:56:e2:c0:e3:a2:f4:e7:ef:d4:49:
                    d2:68:e9:74:69:93:0e:8b:60:78:f4:03:1d:19:39:
                    53:94:10:e0:45:8c:64:6a:ba:97:8b:ad:95:be:c9:
                    43:39:b3:55:fb:63:e2:d6:94:77:c3:6e:90:ff:1c:
                    6e:01:72:bf:c6:f7:fc:18:94:77:8e:be:09:5b:3a:
                    23:87:7a:09:b1:52:e8:5f:bf:bd:d3:86:8a:79:5b:
                    c6:41:ea:b3:35:08:f0:74:3a:a4:05:4b:fb:30:ce:
                    70:50:e4:1b:fb:f0:f5:ee:76:00:dd:63:34:92:88:
                    2f:0d:33:99:ee:f5:94:19:fc:e2:d2:16:f4:4c:b3:
                    0c:22:4c:63:cd:ae:6e:35:e7:9e:0a:d8:67:43:43:
                    04:b8:e9:f1:ec:08:fb:30:81:3e:f3:71:d5:8c:5d:
                    10:2f:fc:f2:2d:83:73:17:d8:dc:40:b6:6f:8f:eb:
                    32:6e:33:8a:2d:61:0d:1c:1f:8f:bd:26:aa:2e:3d:
                    3a:60:f0:e1:51:5b:2a:3e:8c:e5:2d:3f:0f:60:36:
                    1a:e8:fb:cc:99:33:32:ca:16:d1:e0:8e:9b:00:9b:
                    3d:c0:91:bb:49:0f:8b:8a:3b:34:13:2e:e0:2d:94:
                    5f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:78:6A:45:84:46:E8:17:27:C5:0A:F7:DC:5E:4D:3D:71:9F:77:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/7d4a0730-5290-3e65-b079-91e1ebf53658.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:9a:d4:51:79:d8:1e:e9:89:97:02:48:4a:f9:3a:12:ce:6f:
         5d:a4:c4:a0:44:28:d5:6c:d5:46:40:84:5e:52:36:93:e4:4c:
         89:c3:6b:53:eb:2a:fd:3a:79:65:24:5e:98:54:94:22:e2:a2:
         c1:c8:4a:06:80:76:20:22:a8:06:f9:b6:aa:2c:db:45:44:59:
         cd:be:a7:2c:4d:98:9c:48:dc:67:d2:ba:5b:5a:7a:e1:04:39:
         3a:b0:4c:27:4e:fd:e8:fc:6d:59:51:19:73:4c:4b:60:31:00:
         c4:20:1b:9b:81:fe:88:b5:12:58:09:cf:bb:84:3f:7c:c2:83:
         a0:9c:4e:65:f4:28:46:06:57:aa:a0:f7:e0:ac:d0:8b:aa:b8:
         09:2b:20:cb:c1:12:97:ee:31:f5:a8:8b:ee:3c:53:5b:16:75:
         f9:d9:a9:04:f1:f1:9a:de:b0:ef:91:4f:f9:e4:ac:eb:73:38:
         82:63:fd:ca:01:fe:9c:30:5e:87:60:9d:35:dc:28:4e:bf:16:
         32:50:b7:93:ab:8d:ef:4a:ed:a1:4e:82:39:3e:17:b4:7e:a8:
         86:d2:a9:23:7c:fa:46:bf:5c:a7:f1:4c:21:f6:5b:b5:f4:b3:
         8e:27:e5:5a:b2:98:f1:d1:54:56:7b:e9:df:6d:f5:25:23:2d:
         ed:e1:3a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:16:50 2026 by rpki-client