Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/aebb0e61-7f53-38ef-8368-90f594c6957b.roa
File:                     aebb0e61-7f53-38ef-8368-90f594c6957b.roa (raw, json)
Hash identifier:          AWJ9+0anRmtYAHfliE7rOwOK4BEQ2M3fw5E6cyfiXcs=
Subject key identifier:   65:52:FF:A9:48:F8:C6:CC:01:08:2D:F9:07:5B:75:90:3B:2B:46:9D
Certificate issuer:       /CN=75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5
Certificate serial:       010D0C9F4328584F5E62CC77E99C309B57E57DC0
Authority key identifier: 58:5D:77:66:28:0A:AE:1C:F1:EF:FB:C5:79:8B:79:BF:53:7C:73:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/aebb0e61-7f53-38ef-8368-90f594c6957b.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     30437
IP address blocks:        165.156.31.0/24 maxlen: 24
                          165.156.48.0/24 maxlen: 24
                          165.156.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:cc:77:e9:9c:30:9b:57:e5:7d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=7059ca99-73dc-4f50-b904-826c170022ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3e:66:27:02:da:fd:64:1b:80:dd:4f:2c:12:
                    7b:f3:17:db:89:d5:16:e7:1b:77:9f:c8:b1:ba:6c:
                    a7:0a:44:18:92:00:a5:73:4c:7c:a3:92:b2:c9:0d:
                    dd:2b:41:58:63:07:1b:bd:87:af:6e:18:8d:c7:0b:
                    31:93:32:c4:7c:e6:33:7e:a5:05:cf:08:b1:d9:2d:
                    8a:90:1c:5e:c8:f2:9e:c0:52:75:07:e1:fe:d8:71:
                    fe:b1:55:86:c1:77:27:ac:b5:ad:64:b3:87:db:35:
                    31:44:48:22:4f:ea:15:84:51:5a:da:5f:04:0b:9c:
                    10:3c:5e:43:b8:f4:da:1a:4a:d6:87:69:6d:aa:2d:
                    55:62:1c:dd:f8:1d:7d:16:bf:7c:f4:bf:75:c2:fd:
                    2c:3c:b7:2c:3a:8c:43:34:d9:00:9c:0b:de:8a:bf:
                    ba:a4:a1:da:bc:98:9f:2a:38:9d:c5:1e:ba:c5:9b:
                    73:12:c6:db:9f:48:38:5e:ba:f6:cc:ba:6e:cb:b5:
                    28:09:c2:f8:a4:27:a2:93:69:fe:f2:99:d7:68:16:
                    86:ac:9f:e5:bc:6a:4a:c9:3a:a5:b2:94:59:66:38:
                    b2:2c:6d:15:ad:f7:27:da:98:d7:88:f2:30:e5:d6:
                    33:9a:1c:22:74:ca:37:30:23:b6:58:1d:0a:44:ad:
                    4e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:52:FF:A9:48:F8:C6:CC:01:08:2D:F9:07:5B:75:90:3B:2B:46:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/aebb0e61-7f53-38ef-8368-90f594c6957b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.crl

            X509v3 Authority Key Identifier:
                keyid:58:5D:77:66:28:0A:AE:1C:F1:EF:FB:C5:79:8B:79:BF:53:7C:73:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.156.31.0/24
                  165.156.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:b3:86:59:42:58:48:b0:14:99:59:32:db:0e:d7:c6:a6:58:
         52:23:52:5d:c2:b6:18:be:71:be:d8:ca:7d:ad:e5:8c:00:5c:
         ae:20:71:58:0e:13:d5:30:23:72:64:ce:b3:8a:f5:22:69:77:
         ba:dc:39:4b:ed:a5:28:2a:0e:37:b8:bb:cd:db:a7:5e:25:34:
         09:3b:dd:f0:7e:d6:ca:3a:d0:f0:dd:5e:7a:40:0e:21:59:e7:
         f4:b6:e4:eb:40:d0:15:56:a2:0c:34:d4:1c:05:8b:98:41:49:
         b0:02:b8:89:9d:6b:f8:f2:f5:20:3b:92:b7:5e:90:c5:b0:00:
         41:70:65:0b:74:17:8f:00:9f:03:01:11:6c:95:26:67:5f:71:
         72:43:59:73:6e:9b:a5:f5:9a:ac:f1:46:11:7f:72:8e:67:60:
         3c:25:c4:c0:50:18:57:c1:eb:a1:9b:5d:12:a1:b0:ef:6d:53:
         8c:20:97:95:d3:fa:85:68:9d:e4:33:04:3b:ce:07:04:2c:e9:
         b7:c9:f0:4c:f1:18:bc:90:0a:c9:3f:1b:59:53:66:27:47:3f:
         19:b0:fe:b5:26:5a:e8:ae:23:65:4a:28:e5:28:79:78:bb:a8:
         c5:f2:24:ce:b3:68:e0:de:b5:64:e4:1c:da:92:42:b2:89:4e:
         38:4b:28:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 23:50:44 2026 by rpki-client