Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a17904ec-6090-3af0-b9f6-6608f60a43b0.roa
File:                     a17904ec-6090-3af0-b9f6-6608f60a43b0.roa (raw, json)
Hash identifier:          9nN0MOtZgBewguxWNQYc78el/rmlc5b1OLuJS8dDsDQ=
Subject key identifier:   DA:77:A9:CF:57:8F:09:D6:71:E5:FB:1F:04:AD:08:0C:F0:6A:6F:15
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584E3B946E882563D6FF9B4F9AC0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a17904ec-6090-3af0-b9f6-6608f60a43b0.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     22616
IP address blocks:        165.225.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:6e:88:25:63:d6:ff:9b:4f:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=cd4f8a3a-489d-4e15-b6db-0b602692981c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5f:5a:2f:f8:44:09:9b:25:99:8b:9d:a9:cc:
                    69:e5:54:3d:81:be:ed:a3:03:c4:df:6b:4b:0c:fb:
                    2f:2b:6f:b3:29:24:2f:9d:05:1d:42:56:70:a3:13:
                    78:45:31:17:16:71:38:58:0d:ce:f4:b1:0d:60:19:
                    c2:da:40:9b:51:54:01:1c:02:46:0c:ab:55:6e:69:
                    79:66:33:29:84:4f:25:55:12:92:a8:fa:f5:53:56:
                    a8:87:d5:72:46:9c:ee:43:44:de:03:53:62:a2:c7:
                    d5:ea:dc:30:83:06:2f:50:cf:e0:f8:df:87:fd:5b:
                    d0:32:b7:b7:35:71:5c:9e:97:9c:2f:83:05:59:51:
                    5f:e6:21:89:27:63:66:24:5b:ca:54:79:33:79:1b:
                    87:db:6b:65:61:72:24:06:90:32:a7:e0:3e:e6:0c:
                    64:20:df:9e:3b:1f:98:86:58:91:48:5f:44:a2:df:
                    d8:2e:38:85:04:63:fe:6f:c5:76:e2:07:fc:95:9a:
                    63:c2:87:c1:c0:43:be:6e:6f:15:3c:8a:fa:1c:59:
                    79:96:9d:d1:59:40:e1:b7:42:ea:30:2f:2d:2c:f2:
                    e1:c9:0c:26:54:5f:55:71:e5:49:99:d6:f7:a2:c7:
                    14:d9:4c:7f:ca:40:1a:80:23:ad:df:3b:13:e3:bc:
                    e2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:77:A9:CF:57:8F:09:D6:71:E5:FB:1F:04:AD:08:0C:F0:6A:6F:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a17904ec-6090-3af0-b9f6-6608f60a43b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:79:ff:01:4b:75:dc:65:2a:1d:5c:a7:c3:97:d0:a2:47:76:
         25:14:9f:11:d5:d5:6b:b9:ac:44:12:2d:22:2b:71:6c:72:50:
         96:5b:97:05:dd:b9:b7:23:54:52:e7:33:d9:14:d3:4b:93:dc:
         80:25:28:e7:61:02:81:53:f3:86:d7:aa:16:31:34:1d:3f:3b:
         74:39:df:d8:75:71:c8:a2:61:f0:ed:54:a5:be:00:0a:15:c1:
         ca:eb:53:7a:2a:9a:7a:b3:f3:75:c9:3d:c6:03:28:24:69:52:
         ef:c6:e8:11:83:97:ce:5e:2d:e6:fa:2a:71:0c:3a:83:9f:1a:
         74:8c:77:d0:42:23:9c:8b:e1:65:34:3e:23:ca:dc:0a:3f:83:
         4c:5a:d1:94:28:63:8c:3b:c6:9e:4f:c4:b2:f2:70:e0:14:c0:
         fe:d8:02:e9:ce:0f:f8:66:23:da:bf:fc:e5:a2:fc:e6:a5:6b:
         dd:19:c0:cf:f3:9d:a8:e2:e3:c8:24:43:f2:65:94:03:c8:ac:
         f1:b6:3d:26:23:12:a5:04:f2:39:e8:76:87:4b:b8:01:50:f2:
         68:db:57:88:d5:9d:81:ff:6f:ca:c4:81:a5:a5:25:54:e4:65:
         02:3e:bb:8e:24:17:cc:e6:d5:d8:77:6d:a1:d0:0c:cb:5a:28:
         b2:e9:74:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:57:41 2026 by rpki-client