Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9748c0e3-39f7-346b-9618-60c55a444932.roa
File:                     9748c0e3-39f7-346b-9618-60c55a444932.roa (raw, json)
Hash identifier:          G5ftL1TTb85y36B4NQS62rYabgp5blO7nZ7QO8iNO5Y=
Subject key identifier:   01:73:ED:0B:70:68:43:53:2A:3A:FA:15:EC:64:AF:0C:96:9F:C8:DE
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584DA6B014A967D8FC4DE92CD380
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9748c0e3-39f7-346b-9618-60c55a444932.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        165.225.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:14:a9:67:d8:fc:4d:e9:2c:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=fc580cc5-1da2-41a9-aae5-411af23a9bca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f0:80:1d:18:4d:d5:c1:5a:77:0a:fa:3b:75:
                    e8:5d:2a:4b:b3:7e:6e:5a:30:7d:48:2a:9b:a8:8b:
                    db:28:88:1f:e0:5d:b9:6f:fb:a7:8f:10:97:1c:0b:
                    94:15:24:74:f8:fc:8b:15:91:ac:eb:c1:66:00:0a:
                    e0:f8:db:10:37:3f:4c:3c:be:19:65:e8:92:2b:4e:
                    06:30:9f:04:de:29:5a:3a:0f:8d:8c:39:66:3c:ac:
                    68:65:96:c8:3d:96:f3:32:b2:96:7a:4e:11:64:cb:
                    25:a9:3f:dd:2a:07:7e:ab:31:d1:77:3b:80:de:56:
                    f8:92:53:62:fb:c5:52:e0:73:ba:22:c2:53:c9:0f:
                    91:78:3b:df:34:5d:64:f0:3b:a2:63:b4:bd:00:d6:
                    1b:5f:a2:5c:8b:cc:4a:71:0d:ec:10:ef:43:bb:94:
                    a8:99:1a:3c:33:90:15:3c:e1:d8:42:94:04:e8:2d:
                    36:4d:f5:48:53:9f:bc:e4:28:07:90:4e:c9:bf:f4:
                    18:bf:22:86:43:03:13:f8:97:bc:b0:fb:9c:2e:63:
                    df:72:dd:0e:22:1d:8f:e8:d1:87:8c:e4:8a:7e:bb:
                    0a:d7:8c:70:a0:4c:c4:be:65:d8:fb:3a:81:db:0c:
                    fc:16:3c:5d:a1:14:cc:4d:b2:de:67:df:c7:f9:40:
                    85:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:73:ED:0B:70:68:43:53:2A:3A:FA:15:EC:64:AF:0C:96:9F:C8:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9748c0e3-39f7-346b-9618-60c55a444932.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:40:05:bd:58:99:f5:05:bb:12:f6:13:3a:a3:fe:ed:aa:e3:
         a5:b8:9c:7a:7c:24:5f:73:a2:28:fd:48:4c:fc:57:89:64:eb:
         6c:be:40:55:5a:6a:32:3a:16:be:9b:6e:12:c9:31:02:9b:20:
         65:a0:8c:6d:48:93:e5:00:f4:c2:45:01:50:38:a1:95:25:ae:
         c2:78:1b:ce:b5:2d:b0:83:92:d2:6a:28:43:8b:10:13:94:91:
         1e:21:f0:e2:25:b0:dd:6d:c3:49:8d:9c:7f:2f:5a:b2:dd:39:
         b2:07:0d:54:83:37:5c:21:df:f4:25:cb:cb:c1:fe:70:fe:da:
         5f:54:29:06:fc:ea:23:8c:fa:67:b7:9c:4c:2b:15:88:7f:81:
         82:12:5f:ae:ee:af:3b:c2:99:59:3f:05:fb:b3:8f:ec:9e:33:
         98:c9:29:2e:0f:24:98:32:10:71:44:ed:24:63:52:70:fc:57:
         8c:2f:30:16:56:d2:00:cb:ff:57:82:7e:ae:f6:bc:da:35:47:
         6e:8a:5d:ae:6c:48:e8:60:a8:05:2b:45:bd:83:d0:65:d2:0c:
         ab:d0:da:97:cc:61:01:2b:dc:c7:23:83:fb:e7:fb:49:96:72:
         1b:b0:e9:c9:1e:bc:3b:24:73:64:d6:e3:83:88:b2:91:58:ef:
         bf:dd:ca:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msBSpZ9j8Teks04AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk
ZmM1ODBjYzUtMWRhMi00MWE5LWFhZTUtNDExYWYyM2E5YmNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/CAHRhN1cFadwr6O3XoXSpLs35uWjB9SCqb
qIvbKIgf4F25b/unjxCXHAuUFSR0+PyLFZGs68FmAArg+NsQNz9MPL4ZZeiSK04G
MJ8E3ilaOg+NjDlmPKxoZZbIPZbzMrKWek4RZMslqT/dKgd+qzHRdzuA3lb4klNi
+8VS4HO6IsJTyQ+ReDvfNF1k8DuiY7S9ANYbX6Jci8xKcQ3sEO9Du5SomRo8M5AV
POHYQpQE6C02TfVIU5+85CgHkE7Jv/QYvyKGQwMT+Je8sPucLmPfct0OIh2P6NGH
jOSKfrsK14xwoEzEvmXY+zqB2wz8FjxdoRTMTbLeZ9/H+UCFNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAFz7QtwaENTKjr6FexkrwyWn8jeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvOTc0OGMwZTMtMzlmNy0z
NDZiLTk2MTgtNjBjNTVhNDQ0OTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApeFkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAChABb1YmfUFuxL2Ezqj/u2q46W4nHp8JF9zoij9SEz8V4lk62y+QFVa
ajI6Fr6bbhLJMQKbIGWgjG1Ik+UA9MJFAVA4oZUlrsJ4G861LbCDktJqKEOLEBOU
kR4h8OIlsN1tw0mNnH8vWrLdObIHDVSDN1wh3/Qly8vB/nD+2l9UKQb86iOM+me3
nEwrFYh/gYISX67urzvCmVk/Bfuzj+yeM5jJKS4PJJgyEHFE7SRjUnD8V4wvMBZW
0gDL/1eCfq72vNo1R26KXa5sSOhgqAUrRb2D0GXSDKvQ2pfMYQEr3Mcjg/vn+0mW
chuw6ckevDskc2TW44OIspFY77/dyn8=
-----END CERTIFICATE-----
Generated at Wed May 13 14:49:18 2026 by rpki-client