Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/03ef1328-46e3-31b0-9d26-6b0cdaa7264e.roa
File:                     03ef1328-46e3-31b0-9d26-6b0cdaa7264e.roa (raw, json)
Hash identifier:          0iwT4HKYqOLvY12cOn3WNeb1w5wk3Ww+96xgKdsg9jA=
Subject key identifier:   80:66:3C:AE:15:8B:23:3D:E5:F6:F6:9C:CE:B0:41:60:1C:0F:42:57
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584E3B946E3CC69B5DE4703DE000
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/03ef1328-46e3-31b0-9d26-6b0cdaa7264e.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     62044
IP address blocks:        165.225.88.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:6e:3c:c6:9b:5d:e4:70:3d:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=176f4985-88f5-41d5-b85d-624efced8f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:18:40:f7:b8:86:b4:90:fd:21:16:28:d5:4a:
                    6f:f5:aa:31:5f:75:df:4f:fe:5e:f8:84:fd:75:2d:
                    27:2b:8a:dd:ce:1f:d2:2f:24:0c:3c:c9:7c:b1:84:
                    5e:df:86:d6:08:0c:89:b6:f7:3e:61:19:d3:b9:db:
                    41:06:5a:62:5c:e0:5d:ec:fe:5f:1d:28:f2:34:97:
                    90:bc:b0:b1:c2:89:7b:4f:e9:0b:fd:da:ff:b8:9f:
                    ff:0c:4f:48:8d:75:1f:38:10:e5:a3:9f:c5:02:15:
                    89:f7:aa:30:e0:92:5a:4f:2a:c8:88:f7:80:2f:b8:
                    a4:4b:da:34:f6:22:fb:2d:22:df:34:81:29:66:6c:
                    ef:ae:01:b0:f0:80:ea:ae:03:e3:c4:bc:5b:a3:ad:
                    de:d1:82:8d:69:35:03:42:87:61:91:c7:64:1f:c6:
                    1b:3a:84:bb:5e:ff:c6:8d:05:a3:ef:e6:8c:44:ac:
                    2b:f5:bb:8a:4d:88:8a:64:19:5d:9e:ac:0a:6c:0b:
                    65:37:8e:c9:8a:3e:1c:e7:88:df:4e:60:f7:50:21:
                    6b:f0:ad:44:b2:9d:09:3f:63:e5:fb:c8:dc:73:54:
                    66:f2:ec:89:cf:2e:9f:98:ac:02:8e:1f:2a:33:5c:
                    57:72:83:15:2f:8b:c6:0e:c7:43:a3:37:c1:10:fd:
                    c4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:66:3C:AE:15:8B:23:3D:E5:F6:F6:9C:CE:B0:41:60:1C:0F:42:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/03ef1328-46e3-31b0-9d26-6b0cdaa7264e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:a2:b3:d6:3f:fa:5e:d9:7a:66:56:c2:4c:97:68:12:bf:b0:
         bd:82:f4:77:44:09:cb:00:9f:23:f5:12:34:f7:68:22:3a:a8:
         a9:04:91:f1:e9:74:8c:ce:ba:74:83:e6:72:6c:03:14:b6:b9:
         f1:58:63:93:b0:fe:91:6e:cc:9f:28:9e:62:e3:bd:b9:45:0f:
         7f:11:60:a7:46:1a:67:4c:cb:3a:95:52:1a:60:1e:e1:ba:c8:
         ad:56:e1:43:d1:00:5b:d6:63:8c:57:4a:38:ba:1d:84:b7:e3:
         c8:5e:83:94:a8:25:e5:56:d8:a5:be:cb:7a:cb:42:b2:64:57:
         4c:38:e0:23:6b:fd:80:8b:c6:2c:f6:12:6d:d3:3b:81:a3:55:
         07:09:4b:0b:a9:ed:89:47:1a:e6:c0:d2:5f:ac:60:ba:03:a6:
         8c:26:9e:18:ac:c1:55:a4:09:df:8f:a6:95:07:ae:1f:72:06:
         9f:3d:28:a3:79:34:6b:9b:f8:8c:41:31:d8:c2:a0:ab:54:37:
         f4:87:d5:23:6d:3b:80:d5:34:bb:e0:ee:06:54:40:35:42:d6:
         be:01:3b:5f:1e:d0:a1:e0:89:35:42:76:fd:1b:bd:6b:2c:90:
         2e:32:77:41:22:af:9e:59:73:ec:11:59:2d:b6:0c:32:98:c6:
         9a:b1:00:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE47lG48xptd5HA94AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI2MDYyMDA5MDAxM1oXDTI2MDkxODA5MDAxM1owLzEtMCsGA1UEAxMk
MTc2ZjQ5ODUtODhmNS00MWQ1LWI4NWQtNjI0ZWZjZWQ4ZjQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhhA97iGtJD9IRYo1Upv9aoxX3XfT/5e+IT9
dS0nK4rdzh/SLyQMPMl8sYRe34bWCAyJtvc+YRnTudtBBlpiXOBd7P5fHSjyNJeQ
vLCxwol7T+kL/dr/uJ//DE9IjXUfOBDlo5/FAhWJ96ow4JJaTyrIiPeAL7ikS9o0
9iL7LSLfNIEpZmzvrgGw8IDqrgPjxLxbo63e0YKNaTUDQodhkcdkH8YbOoS7Xv/G
jQWj7+aMRKwr9buKTYiKZBldnqwKbAtlN47Jij4c54jfTmD3UCFr8K1Esp0JP2Pl
+8jcc1Rm8uyJzy6fmKwCjh8qM1xXcoMVL4vGDsdDozfBEP3EAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIBmPK4ViyM95fb2nM6wQWAcD0JXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMDNlZjEzMjgtNDZlMy0z
MWIwLTlkMjYtNmIwY2RhYTcyNjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpeFYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABuis9Y/+l7ZemZWwkyXaBK/sL2C9HdECcsAnyP1EjT3aCI6qKkEkfHp
dIzOunSD5nJsAxS2ufFYY5Ow/pFuzJ8onmLjvblFD38RYKdGGmdMyzqVUhpgHuG6
yK1W4UPRAFvWY4xXSji6HYS348heg5SoJeVW2KW+y3rLQrJkV0w44CNr/YCLxiz2
Em3TO4GjVQcJSwup7YlHGubA0l+sYLoDpowmnhiswVWkCd+PppUHrh9yBp89KKN5
NGub+IxBMdjCoKtUN/SH1SNtO4DVNLvg7gZUQDVC1r4BO18e0KHgiTVCdv0bvWss
kC4yd0Eir55Zc+wRWS22DDKYxpqxABA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:17:12 2026 by rpki-client