Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e0e44970-2f87-36be-b4b8-6e3dae9f117d.roa
File:                     e0e44970-2f87-36be-b4b8-6e3dae9f117d.roa (raw, json)
Hash identifier:          7ps/9Bz1X4R/CvmIRNM/BDxZy9KhyHmO1TwrgiOFDW0=
Subject key identifier:   5D:1E:BA:4A:2D:4C:4C:E8:BC:11:09:1E:B6:D5:73:30:41:4A:F0:D4
Certificate issuer:       /CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b
Certificate serial:       010D0C9F4328584C6E2184E37AE8BF7BFBF837C0
Authority key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e0e44970-2f87-36be-b4b8-6e3dae9f117d.roa
Signing time:             Tue 06 Jan 2026 02:00:31 +0000
ROA not before:           Tue 06 Jan 2026 02:00:31 +0000
ROA not after:            Mon 06 Apr 2026 01:00:31 +0000
asID:                     8987
IP address blocks:        165.224.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:6e:21:84:e3:7a:e8:bf:7b:fb:f8:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b
        Validity
            Not Before: Jan  6 02:00:31 2026 GMT
            Not After : Apr  6 01:00:31 2026 GMT
        Subject: CN=33930259-8259-42de-9807-7dbbef81f41a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ef:89:f6:a3:8c:4f:31:23:03:a5:73:2e:c7:
                    61:b6:df:d4:22:35:f1:36:d8:99:09:19:8e:25:00:
                    f2:95:64:64:f5:87:04:03:52:8b:98:9c:e1:98:f0:
                    9d:2f:79:0d:4c:7c:d9:01:d5:db:98:69:03:da:40:
                    c7:3c:90:ca:c0:c5:fd:7e:51:c0:7a:38:35:6f:aa:
                    f2:55:06:d8:96:8d:d7:03:44:d4:0b:ad:ac:c4:93:
                    c1:7c:8e:92:91:0a:a3:b1:26:7f:41:06:46:83:5c:
                    3f:c7:67:4c:37:48:29:79:17:de:4b:88:29:03:a1:
                    95:d6:13:21:1b:5a:85:e2:b0:22:05:2a:c9:a2:d5:
                    0f:94:97:65:df:7c:92:18:50:3c:69:c6:97:25:08:
                    20:50:57:4e:ab:95:6e:eb:f5:b4:f9:7b:3f:f1:67:
                    00:1c:0c:60:f1:b7:5a:89:db:a4:35:9c:d5:27:a9:
                    a5:f9:68:2c:44:92:be:4a:e2:b1:25:44:cf:e6:db:
                    53:d8:77:1d:fb:86:5d:bf:61:87:c0:15:22:b0:13:
                    bd:e2:59:86:5e:26:25:37:10:1d:d5:b2:f0:5c:c0:
                    13:54:89:64:6f:b2:98:d3:c6:9e:66:5b:d9:c6:82:
                    35:3c:2e:ab:68:f2:b8:69:20:88:be:ec:70:92:d2:
                    14:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:1E:BA:4A:2D:4C:4C:E8:BC:11:09:1E:B6:D5:73:30:41:4A:F0:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e0e44970-2f87-36be-b4b8-6e3dae9f117d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl

            X509v3 Authority Key Identifier:
                keyid:06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.224.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:44:8c:77:ad:5d:f5:45:7d:87:a6:cf:6b:c5:ef:24:c0:ef:
         e0:39:66:62:cb:46:b7:40:40:8e:05:15:95:bc:b4:1f:38:06:
         df:6f:66:83:15:be:d6:f4:25:e2:f9:d9:80:2d:3b:5a:04:40:
         1e:b9:f6:a7:66:52:ce:5b:69:30:f4:42:73:23:ce:9b:65:08:
         d3:90:0a:9e:c5:8a:56:d1:24:16:3e:69:6c:14:c9:dc:1c:3b:
         0c:99:eb:c0:c0:89:f3:b4:bc:d3:cb:0b:f5:ae:9e:e5:6e:56:
         72:6e:f8:ea:57:aa:ef:61:8c:30:86:bd:74:6d:c2:01:2b:54:
         22:f9:0b:33:db:4f:8f:b1:2a:38:6f:d9:4e:5b:fb:db:3e:8d:
         f5:86:d8:67:c0:c8:3a:b3:9c:91:6c:a5:36:d4:7d:c9:00:fe:
         b5:12:6b:98:fc:0b:90:f1:dd:41:cd:f6:d9:fc:78:f6:26:ac:
         06:7f:3d:06:6b:6d:0e:79:a2:c1:a5:e9:84:98:1f:d1:57:eb:
         d7:f2:ec:0a:7f:23:d4:08:3c:50:2b:29:c7:31:8e:98:b2:d7:
         6f:37:75:01:b4:bf:db:41:b4:b4:53:cc:f0:3d:08:47:13:c7:
         67:85:ad:22:8f:c2:d3:36:59:29:ec:78:36:e3:b0:68:c1:5e:
         85:bd:47:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 01:32:45 2026 by rpki-client