Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e18bdbd3-419e-3128-b2a4-dd03596e79cc.roa
File:                     e18bdbd3-419e-3128-b2a4-dd03596e79cc.roa (raw, json)
Hash identifier:          5I1/A2jjkEKeGqBKV5pvozRae7ykd9GxL/kBMCyUqGE=
Subject key identifier:   57:EF:CE:EA:97:0B:EA:ED:B5:2F:79:0C:45:3C:36:85:C3:F3:8D:CE
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584E3B947972214BA1F329138840
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e18bdbd3-419e-3128-b2a4-dd03596e79cc.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     53813
IP address blocks:        165.225.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:79:72:21:4b:a1:f3:29:13:88:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=88007dd8-e2a7-49a8-9d41-ef8a4c72753d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a8:45:c9:0b:81:da:36:72:ff:a4:6e:3d:96:
                    17:22:4c:e2:f2:83:e6:05:87:f4:33:50:22:3a:b3:
                    25:4c:9b:4d:d4:ca:82:85:c6:78:9d:06:96:09:f0:
                    fb:ba:17:b7:1a:06:0b:ee:6a:f2:e0:bc:6c:a8:fd:
                    05:91:1e:85:ec:cc:10:88:ae:40:10:1f:10:b5:5e:
                    2e:77:a5:0c:e3:63:d6:9e:cc:7d:7f:32:93:df:cb:
                    dc:3e:70:68:f3:c9:1c:87:0b:93:cf:0b:ec:c5:34:
                    d3:97:a8:45:5d:63:de:ad:be:d2:bb:b5:83:3a:1d:
                    82:f8:dd:9d:a6:c3:cf:14:2e:d6:e9:25:41:22:23:
                    34:e6:0b:aa:e0:66:bb:5a:0c:92:51:6b:91:f4:ca:
                    b3:cc:d9:8d:d3:55:dd:12:2b:80:ac:ff:50:bf:ea:
                    32:b2:99:60:32:5d:f6:75:3b:73:a2:5a:61:c3:48:
                    8b:dd:66:8d:15:d7:66:d3:04:e2:eb:7d:b7:0d:82:
                    ea:f6:06:fb:c4:76:2d:a7:58:a4:ea:14:50:b6:fc:
                    38:5c:8b:1f:f8:64:00:e5:5e:37:89:ec:a5:31:0d:
                    63:09:48:17:ca:a1:f2:78:58:e1:d6:de:4c:bf:f1:
                    f4:d3:c1:d6:1f:e0:44:3d:38:79:1b:7d:e7:48:74:
                    40:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EF:CE:EA:97:0B:EA:ED:B5:2F:79:0C:45:3C:36:85:C3:F3:8D:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e18bdbd3-419e-3128-b2a4-dd03596e79cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:fa:55:83:cb:f7:2a:1d:df:85:d3:ec:2a:9a:fd:88:88:3d:
         f7:22:45:7b:41:3a:89:39:f1:ec:23:58:2a:55:0a:d4:4e:cb:
         c7:67:27:23:32:75:4d:4e:ac:ca:b3:22:ea:94:3b:b0:9c:0d:
         84:df:bf:85:19:be:14:49:ac:40:20:b0:0d:97:b4:53:8f:49:
         b5:ae:80:39:f7:ad:0a:eb:06:e5:13:76:66:9d:93:95:98:24:
         b3:ab:f6:da:ad:d4:1b:77:e3:79:37:aa:b9:a1:27:5e:bc:95:
         eb:96:68:c0:a5:bb:94:01:6f:f0:98:07:63:18:e5:12:e1:03:
         36:a2:83:0c:38:6c:6f:76:d8:b1:6f:61:1d:b3:9b:20:4f:49:
         9d:c5:e0:b2:53:af:75:54:87:74:e3:05:71:03:fb:90:9d:86:
         0a:c4:80:1e:83:1a:50:39:b5:a3:74:88:e8:24:30:bf:33:6e:
         97:9c:d5:cf:ed:1d:a5:da:08:21:6f:6e:25:29:67:09:c9:d6:
         55:ee:bb:2e:88:24:1c:5a:a9:fb:69:cc:d4:6e:30:aa:91:f8:
         d6:50:76:71:5a:42:04:01:c5:ef:1f:3f:bb:6b:7e:13:05:3a:
         88:8c:43:d8:d5:e0:3d:46:78:f0:63:37:ce:60:3b:ae:46:b4:
         76:02:c8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:28:30 2026 by rpki-client