Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/c7437b9a-2dcb-33ec-b613-8d30a58c4e55.roa
File:                     c7437b9a-2dcb-33ec-b613-8d30a58c4e55.roa (raw, json)
Hash identifier:          aTVnc4dwAlTwxxHhd5ggyDV3MZvDYyDF0Q3+MOmMNDE=
Subject key identifier:   A1:12:1D:22:61:AD:92:2A:71:37:A6:07:52:40:FA:4F:54:8A:D2:85
Certificate issuer:       /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial:       010D0C9F4328584EC7A1D085D7086018EB714480
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/c7437b9a-2dcb-33ec-b613-8d30a58c4e55.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        65.37.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:d0:85:d7:08:60:18:eb:71:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=9f84021b-e79a-4294-ba0e-9dda82305ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a1:2a:6c:c9:54:1f:85:70:5a:de:5d:a8:3b:
                    c2:00:c2:67:ef:5c:ee:de:d1:3d:ef:b6:a7:56:69:
                    f5:7f:a0:b3:25:bd:0d:b5:cc:f2:d0:d4:ff:78:39:
                    45:a2:37:63:46:cf:25:70:00:ac:7d:ab:a7:1d:05:
                    16:99:8c:a0:f8:c0:a1:cf:47:6a:ca:e6:1d:43:0d:
                    5f:5f:3f:dc:22:36:d3:4d:11:cb:16:7b:2c:4f:79:
                    81:86:c5:ae:f5:9f:3c:82:41:16:fb:ed:0d:fa:40:
                    f6:14:44:a5:0d:a8:ea:6b:31:ea:b4:c5:b3:fe:91:
                    49:7b:28:71:f7:39:8c:fb:c7:0e:1f:1b:da:f6:9d:
                    6c:35:30:bb:80:12:fb:64:3d:43:4a:05:7b:bb:82:
                    12:43:84:a2:64:61:c1:e7:c1:aa:5b:da:e5:16:08:
                    34:df:0d:0f:9a:59:e0:b8:26:45:47:b9:8e:5c:b3:
                    23:9b:21:19:d5:e8:b3:9d:33:23:a1:b5:c7:ee:00:
                    53:4d:2b:48:76:20:34:09:0e:43:0c:dc:26:1c:24:
                    d3:a2:a9:8a:13:ab:3a:52:ab:e7:a2:42:e4:a2:c7:
                    ce:24:bb:60:f8:e6:99:7f:78:89:98:93:1b:a0:64:
                    80:09:53:12:c5:f1:7f:9b:bb:c9:69:49:2b:92:5a:
                    45:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:12:1D:22:61:AD:92:2A:71:37:A6:07:52:40:FA:4F:54:8A:D2:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/c7437b9a-2dcb-33ec-b613-8d30a58c4e55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl

            X509v3 Authority Key Identifier:
                keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.37.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:57:7f:80:3b:00:11:ba:76:34:83:6e:d8:99:c1:d4:98:de:
         ae:5b:9d:26:0d:8f:1a:45:42:2a:17:f3:e3:4b:88:b5:65:06:
         d7:da:85:9b:1b:5c:1b:5b:81:c9:ce:37:22:b5:ee:dd:a5:ae:
         3f:be:1c:b7:c6:4f:87:5d:e0:4e:66:66:55:22:51:21:17:59:
         37:46:51:3e:22:ac:34:d2:67:44:4c:a5:29:8b:45:07:70:ce:
         dd:86:98:9f:b7:96:0f:45:87:9c:15:55:e4:9c:9e:a5:4b:81:
         47:68:9d:bc:1e:7d:ae:25:ca:a9:40:70:b4:fd:54:3c:b6:e7:
         a9:32:6b:f7:f4:99:5f:33:1e:a4:42:5a:d2:4f:40:aa:23:e7:
         6c:76:a8:81:31:0f:28:f0:32:dd:c5:8d:a4:18:4c:8b:a8:9c:
         56:0f:02:93:8c:29:df:ad:f1:d7:17:a1:69:cb:03:f6:a4:6a:
         9e:b2:df:93:07:f7:01:78:fa:c2:2b:6c:c9:44:14:ff:ca:49:
         96:e6:42:b5:eb:c4:91:ae:43:70:68:27:58:84:92:bc:6b:7b:
         93:23:90:a7:f0:94:55:20:69:3d:f3:14:45:41:b5:32:50:d7:
         12:1f:f0:f1:62:5c:25:6b:9b:c5:2e:41:f3:9b:3f:05:49:fe:
         d9:d4:88:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:18:18 2026 by rpki-client