Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/542821b9-8a48-30ca-b7c5-93e78e17221f.roa
File:                     542821b9-8a48-30ca-b7c5-93e78e17221f.roa (raw, json)
Hash identifier:          lt2X2O4obFTOddc7sTALe3ve7swsTMjbPFSrWoS4zLQ=
Subject key identifier:   35:F4:2E:98:3F:0C:0B:51:12:24:C0:F1:DF:61:36:A9:2E:2E:0D:33
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584E3B948B073266FB2BCF0D7A40
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/542821b9-8a48-30ca-b7c5-93e78e17221f.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     22616
IP address blocks:        165.225.210.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:8b:07:32:66:fb:2b:cf:0d:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=45129f1d-a311-4b84-a99e-6a0f1ac2b504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c8:a8:d4:59:0c:0f:1c:60:c2:f9:64:00:ea:
                    7b:14:17:50:22:78:b1:1a:32:d3:6c:41:0d:95:72:
                    fb:61:a4:e7:c2:6c:7a:0a:d0:02:89:7a:db:34:4b:
                    f2:85:96:52:74:16:6b:fb:f7:ce:ba:55:6a:21:ad:
                    d2:f4:43:bb:2b:79:bf:7e:df:90:48:3b:fa:ef:5b:
                    44:6e:74:cf:08:6e:48:b0:d0:81:d5:20:e4:8d:48:
                    3c:1c:01:b5:66:aa:5e:83:f5:06:18:f0:44:89:cc:
                    3a:98:b5:56:14:9c:aa:bd:3b:08:d8:8d:45:c9:3c:
                    71:b1:6e:f5:11:ec:e5:13:fc:eb:96:b8:39:1b:a4:
                    b3:db:bf:64:97:87:c1:27:59:9c:cc:a5:fa:d8:b9:
                    34:c3:0b:90:26:50:33:83:8b:ac:11:6d:22:10:1b:
                    f4:37:4c:ba:89:b3:ab:01:e0:d9:df:58:d8:25:d0:
                    9c:c5:b3:09:ee:99:63:67:76:6f:3f:b5:3a:0c:e5:
                    53:c2:6e:0e:2c:f9:2f:e7:55:99:6c:7d:9b:f3:91:
                    82:1a:7d:9e:61:5f:00:ce:36:36:94:f5:e7:a7:7e:
                    fe:6a:de:1d:13:8c:d4:87:31:08:a4:5d:3e:55:bc:
                    b7:64:57:97:8e:b7:47:77:db:60:f7:fa:24:c9:02:
                    a4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F4:2E:98:3F:0C:0B:51:12:24:C0:F1:DF:61:36:A9:2E:2E:0D:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/542821b9-8a48-30ca-b7c5-93e78e17221f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:ec:19:97:26:a1:33:32:b9:73:0a:64:85:be:f9:00:9c:f9:
         7a:00:82:8c:06:8f:8a:95:0c:59:bb:6d:79:42:b8:31:da:c6:
         58:a4:a6:14:88:51:b3:68:b9:73:51:e9:81:7f:d5:85:3c:80:
         8f:d5:a8:13:49:c6:92:20:f2:49:42:71:13:e7:1e:29:96:27:
         cd:72:5e:ef:c4:3a:77:91:10:2f:5b:8c:44:26:4d:06:d4:d6:
         c9:81:c5:9e:7f:9f:6f:ab:d1:86:bb:8c:a2:de:e1:c7:3f:f1:
         e1:57:68:a5:0f:f4:1c:52:7e:ab:14:30:2a:32:4c:e8:1f:7a:
         3a:5c:d9:97:d7:a1:32:9c:9c:31:0c:ce:1b:1a:09:94:8e:a5:
         8d:ea:6b:80:ee:b8:20:a1:54:68:cd:86:81:e7:3f:28:0e:83:
         8d:8d:da:8c:2c:77:1c:2c:bf:15:c0:60:79:1d:f5:36:f2:7e:
         68:19:34:b7:9b:0a:8c:88:d8:c3:cf:da:cf:b9:58:4a:34:45:
         5b:0d:fc:35:bd:44:d7:1d:0a:16:41:0e:86:1c:24:05:93:ef:
         64:56:02:ad:96:41:af:95:21:33:b1:93:f8:c8:a9:7c:99:ed:
         9a:25:08:ad:d4:ab:bd:eb:f7:3e:2b:17:be:6b:e8:7f:80:87:
         3e:83:b1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:42:27 2026 by rpki-client