Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8772e951-450a-3b72-8a47-d1e5760321ce.roa
File:                     8772e951-450a-3b72-8a47-d1e5760321ce.roa (raw, json)
Hash identifier:          C/++xJRyWVFT/oAIB8v5/YO5jJz6ilo0hsUjIx/lu6c=
Subject key identifier:   D7:71:E2:D9:6C:DC:72:3D:88:0F:81:CB:40:9D:11:C0:66:D3:0A:7D
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584E3B946C0BB219D454F4A0B120
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8772e951-450a-3b72-8a47-d1e5760321ce.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     22616
IP address blocks:        165.225.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:6c:0b:b2:19:d4:54:f4:a0:b1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=cca1eab5-0c04-4c52-a7e1-d3eb8b3bafcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d9:4e:52:89:4c:89:67:af:61:16:85:b7:f8:
                    32:e4:19:3a:93:3a:e6:c0:06:8c:c8:be:c9:5b:f9:
                    da:53:1a:d2:95:d7:bc:3b:87:3d:28:45:f9:d2:d7:
                    71:5f:6e:19:bb:3f:39:63:0d:54:e7:a3:d4:0c:74:
                    ec:8b:b9:78:7a:09:dc:d8:6f:f0:69:c4:bc:f8:04:
                    d3:36:dd:c5:c2:fb:a9:bb:08:e5:fd:42:98:30:d6:
                    2e:0a:6c:8b:da:68:bf:7d:df:e3:0a:82:61:88:54:
                    c0:9a:0f:23:41:06:b1:2e:cd:20:34:2e:b7:09:0f:
                    3e:c0:8f:c0:ac:aa:2a:de:2c:41:9b:82:92:50:ef:
                    14:1c:e5:4e:fd:fb:a8:4d:33:7b:d1:dd:3d:64:e9:
                    b6:c0:74:8a:65:89:89:53:dc:8c:56:1d:f2:e4:cb:
                    5b:b6:80:55:4c:a2:7e:6a:70:bd:d1:f8:2e:c8:ed:
                    d2:a0:7d:61:39:38:2c:47:0c:b6:2e:7f:6a:f4:a8:
                    a9:79:18:69:84:bf:65:3f:b7:6d:c7:38:00:cf:58:
                    8c:dd:08:60:80:9c:a8:2d:ea:54:d5:6c:75:d9:5d:
                    a7:1e:41:01:de:ed:47:d6:aa:fc:f6:50:c7:17:a5:
                    0f:79:0a:f4:59:58:d4:5d:bb:c9:d9:31:0b:4b:c5:
                    67:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:71:E2:D9:6C:DC:72:3D:88:0F:81:CB:40:9D:11:C0:66:D3:0A:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8772e951-450a-3b72-8a47-d1e5760321ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:1b:c4:e9:b5:fa:37:e9:2a:2d:24:3c:62:af:38:b6:4d:ca:
         97:45:a6:1f:39:cd:6e:cf:d1:ff:10:02:37:47:cb:91:b7:5d:
         53:ef:25:40:63:c0:4d:7a:4f:bd:fb:65:e2:a7:77:8f:5e:28:
         95:96:24:b3:0b:b2:06:a9:c1:8a:f7:57:9f:69:e6:19:63:9b:
         c2:73:fb:89:07:49:21:5f:8b:bd:c1:27:e9:c9:9c:fb:17:a9:
         50:7e:bc:bc:f6:d2:d8:e6:eb:20:b6:3c:a8:a1:90:d0:a4:8d:
         67:1f:7d:03:0d:b9:7d:66:00:e3:a9:3e:a2:90:04:53:77:fe:
         34:d9:a5:1c:b1:ee:3e:41:f1:8f:d1:55:80:5f:6a:92:60:63:
         99:34:e7:3d:b3:25:4e:e8:91:ce:97:30:57:fd:38:68:14:f4:
         9d:92:71:a3:95:21:e6:c4:db:ac:a4:fb:3d:eb:99:58:c7:82:
         2f:49:91:dd:80:9d:64:e3:6b:60:26:50:b1:87:ae:c1:7f:58:
         68:04:95:5d:31:3a:05:53:38:48:b8:51:3e:98:c1:13:37:47:
         a9:cc:79:be:b3:73:ef:07:33:b6:11:db:0d:cc:80:28:db:68:
         f0:e1:6b:eb:9a:41:37:dd:89:bd:35:e5:44:02:95:bf:68:47:
         9a:43:bd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:18:50 2026 by rpki-client