Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19/ee5442f0-2739-340d-b087-f18695c6629e.roa
File:                     ee5442f0-2739-340d-b087-f18695c6629e.roa (raw, json)
Hash identifier:          8L8egPT2UBerl8VIYKIDCB9dWORNTdy9djQYcaFvRWQ=
Subject key identifier:   73:C9:69:50:FB:6A:1A:6D:28:B3:FC:18:24:4B:1F:41:E1:F0:BE:DE
Certificate issuer:       /CN=3525d024-8bc7-4b8d-b33a-40ef1c8faa19
Certificate serial:       010D0C9F4328584EB2B1A1E7A143FD998FB76020
Authority key identifier: 91:1D:9C:9A:11:9B:E0:70:2D:48:A2:79:A1:09:DC:AB:5C:4A:70:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19/ee5442f0-2739-340d-b087-f18695c6629e.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     25955
IP address blocks:        207.210.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19/3525d024-8bc7-4b8d-b33a-40ef1c8faa19.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19/3525d024-8bc7-4b8d-b33a-40ef1c8faa19.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:a1:e7:a1:43:fd:99:8f:b7:60:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3525d024-8bc7-4b8d-b33a-40ef1c8faa19
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=2805610b-57a1-4fb8-89a5-cc065dafd49d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:92:70:fd:28:bf:16:85:46:75:60:e7:14:9e:
                    d9:26:2e:cb:bf:2c:75:1d:02:e7:20:1c:e3:03:09:
                    ef:8d:30:a9:c0:52:04:58:c3:be:f2:b3:1f:35:5f:
                    31:25:98:8e:b8:fd:85:78:0a:e5:66:96:db:07:ed:
                    71:bc:50:54:db:f9:c1:4a:6e:b7:01:1b:63:c5:80:
                    0a:aa:99:8f:89:ea:4d:ba:c3:63:be:af:ec:9c:25:
                    58:5b:cf:0e:22:47:32:19:ff:a3:97:39:82:13:20:
                    fd:6a:93:8a:e4:7f:ae:23:d2:bb:55:3d:58:5a:c8:
                    9b:af:37:23:19:10:8a:d6:60:f8:de:37:e3:e9:a1:
                    e8:71:78:3a:3c:65:9e:74:28:38:94:58:e4:10:96:
                    8f:c7:cb:48:8c:59:37:0a:89:4d:fd:f0:fc:e0:4e:
                    27:ce:90:6d:21:43:79:a3:d4:18:d1:d2:d7:84:48:
                    bd:bd:25:ec:ec:71:ad:3e:5a:e9:30:69:2c:b0:b8:
                    47:58:02:03:f4:4f:95:82:07:9a:ee:c1:04:45:29:
                    08:57:ae:ab:fe:bc:e1:12:b9:c9:4f:50:38:ce:dc:
                    b8:27:08:9d:48:ab:2b:4d:3d:ca:19:3b:9f:07:ac:
                    8c:2e:2d:01:c2:51:f4:13:26:c7:9c:f5:46:03:77:
                    97:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C9:69:50:FB:6A:1A:6D:28:B3:FC:18:24:4B:1F:41:E1:F0:BE:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19/ee5442f0-2739-340d-b087-f18695c6629e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19/3525d024-8bc7-4b8d-b33a-40ef1c8faa19.crl

            X509v3 Authority Key Identifier:
                keyid:91:1D:9C:9A:11:9B:E0:70:2D:48:A2:79:A1:09:DC:AB:5C:4A:70:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3525d024-8bc7-4b8d-b33a-40ef1c8faa19.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.210.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:8f:6d:35:e5:ce:7c:90:38:10:10:e9:23:8d:29:de:d9:01:
         57:12:19:35:75:ea:f7:bf:24:07:23:9b:e0:8c:43:36:01:af:
         29:25:72:46:b2:48:c0:d7:36:46:2c:68:e7:ba:ae:3b:24:8e:
         b7:84:6a:c8:ac:cf:67:88:5a:4c:5b:3d:b1:6b:f4:7c:0a:49:
         7e:e9:c9:37:98:53:e6:14:82:85:06:d2:c4:97:fa:bf:89:2d:
         02:15:e4:cc:f2:97:28:5c:d9:28:93:b6:d0:f7:be:3d:14:e5:
         53:56:db:3e:31:84:3e:a8:3b:7a:48:ce:b5:fb:42:6d:3b:1a:
         2e:45:5f:bf:c0:78:83:09:27:49:4e:49:19:45:05:29:1a:2d:
         e3:ae:60:83:82:57:e0:4c:1f:25:8f:25:0c:80:b6:78:d1:13:
         41:e6:c4:aa:5d:55:c2:dc:dc:d7:f6:e6:4a:9e:e5:88:27:61:
         25:bf:37:4d:59:a2:99:07:f5:78:e8:3e:06:ee:61:a0:fb:c2:
         79:b7:36:fc:f2:13:19:8c:3c:25:f2:2b:86:69:f5:77:a1:fc:
         3e:8a:72:87:48:d9:04:c5:5c:8c:c1:eb:44:8b:07:b0:65:36:
         c2:b2:c4:87:95:74:10:d6:37:ad:47:e7:4f:63:fc:79:02:f9:
         3f:42:9a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 03:03:20 2026 by rpki-client