Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/333a0ce7-d1eb-3764-9912-ac610b5a2325.roa
File:                     333a0ce7-d1eb-3764-9912-ac610b5a2325.roa (raw, json)
Hash identifier:          J5pfaa7J5aOXrlPz/9uft7KvH84/lCfVBBK6RTM0lKU=
Subject key identifier:   06:C8:66:5D:23:B1:59:8F:52:C4:43:4F:56:A5:A0:FA:8A:03:C3:7F
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584E3B947FD630873084C927BE00
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/333a0ce7-d1eb-3764-9912-ac610b5a2325.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     22616
IP address blocks:        170.85.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:7f:d6:30:87:30:84:c9:27:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=addf08ee-4271-47d7-b502-4630add9c4fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:69:53:e8:62:10:ba:e9:85:dc:ec:1f:8b:89:
                    0d:9d:75:9e:5d:1c:c1:59:29:0b:02:c8:6a:8c:fb:
                    5d:07:60:d6:2e:d9:cc:c9:21:36:1c:95:ea:37:d7:
                    00:79:4b:d2:df:98:25:96:f0:6e:0e:1c:f7:e3:71:
                    06:21:07:32:b6:47:02:db:77:a2:f8:6e:14:4e:1d:
                    79:eb:ee:4a:44:c9:9e:b5:18:a1:16:0b:67:85:c7:
                    1d:ee:16:ad:0d:5f:74:23:1a:ab:e9:22:cb:2e:e5:
                    55:f5:83:9e:ba:fb:d6:f2:31:0b:2c:de:b3:9d:20:
                    3c:ef:d3:2c:68:b4:67:aa:15:58:75:d4:29:5b:60:
                    7b:e1:22:67:83:93:b0:d7:06:c1:ea:f7:73:f4:1b:
                    b8:84:c6:6a:97:0c:be:a8:57:47:47:19:54:45:79:
                    ea:20:4b:ec:67:f0:65:ee:db:8b:66:7a:4e:17:2e:
                    68:48:de:eb:e0:1f:29:c9:ec:c2:85:f9:92:16:79:
                    36:d4:43:5f:21:25:6e:bb:71:a1:cc:9a:32:f3:c4:
                    b8:0b:d0:82:ab:25:26:5c:a1:b8:ba:25:61:dd:7c:
                    8c:f3:65:e6:14:58:fe:8f:de:76:1b:d9:8f:af:dc:
                    e6:29:00:06:6c:1f:f6:75:80:8d:2e:c6:ec:22:af:
                    8d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C8:66:5D:23:B1:59:8F:52:C4:43:4F:56:A5:A0:FA:8A:03:C3:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/333a0ce7-d1eb-3764-9912-ac610b5a2325.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:e5:bd:53:e8:5a:7a:bd:5f:97:f4:31:2a:e9:26:a4:98:b0:
         57:c9:e9:17:6c:e2:a2:a9:18:36:57:b7:3a:4e:b8:75:18:4f:
         d2:48:2b:df:e0:8f:70:70:c8:61:12:d2:4d:fb:b3:41:7e:0f:
         df:84:a2:df:d3:e9:96:79:30:e6:c9:df:bd:f5:ad:4d:33:34:
         bb:aa:9c:50:da:0e:f8:0b:56:01:0f:3b:8e:7e:a1:03:91:c2:
         9a:7f:fd:42:32:fd:53:c9:b5:24:18:84:fc:07:78:6b:21:d7:
         dc:33:11:50:aa:80:86:97:ee:d8:4c:17:e1:dd:12:87:29:36:
         f3:28:13:6b:72:01:b2:79:96:26:5b:91:27:ff:2f:c3:e0:1a:
         a4:58:a4:c2:8e:d0:23:23:be:a7:a0:e8:6f:a9:01:1f:c8:22:
         56:d2:88:27:be:e3:de:da:b9:c6:d2:e3:62:24:cd:e6:9a:99:
         e1:03:db:37:2c:10:08:c1:ab:79:b6:d8:0e:17:97:1d:d3:1e:
         38:8a:88:5d:fc:f4:eb:30:17:91:2c:e8:9f:1b:a8:d3:59:70:
         00:e3:0c:73:18:3d:5d:1d:d7:2e:b6:ab:21:4e:35:2c:cc:94:
         71:26:f1:79:0a:54:80:07:ba:3a:52:11:da:16:e6:23:d6:52:
         46:69:21:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:23:32 2026 by rpki-client