Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/78de1641-a5c6-3395-afbb-a7b09c8ca7bc.roa
File:                     78de1641-a5c6-3395-afbb-a7b09c8ca7bc.roa (raw, json)
Hash identifier:          x23Sk7GxSpw3NPeDmRAFBOMDdfag7WHKarm1IB/Wnsg=
Subject key identifier:   DA:14:CC:52:69:1D:AF:D2:62:87:5C:C2:2E:0A:92:24:94:23:A1:68
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584E5A49FB7261261557CC464E00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/78de1641-a5c6-3395-afbb-a7b09c8ca7bc.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     22691
IP address blocks:        165.254.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:49:fb:72:61:26:15:57:cc:46:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=b0f68b11-dfde-4436-b62c-1117dddce02b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b0:a8:b6:a4:0d:81:93:14:57:6b:ae:f3:62:
                    08:45:ae:1b:c5:80:9c:29:63:a3:ea:4a:17:d8:f8:
                    f9:55:eb:5a:89:b6:2f:ab:9d:ca:b0:52:38:7d:09:
                    db:30:72:ac:72:3c:39:ce:2f:de:7c:ce:0a:e2:07:
                    b3:49:08:2f:35:33:d9:c6:98:8d:45:95:5e:29:8f:
                    5f:2f:82:06:36:8d:90:84:df:7d:11:84:d6:ef:7f:
                    6d:7d:7a:83:b6:5b:20:52:cb:23:c3:ae:bc:72:bd:
                    c2:b9:1f:e1:6d:3e:5c:77:8f:2a:21:c7:b5:19:b2:
                    a2:f5:e2:7b:8b:82:30:42:e0:2f:1e:2b:61:a4:1a:
                    72:c6:c5:5f:64:b4:c2:7b:dd:e2:86:94:23:84:cf:
                    bf:98:38:e2:28:d0:db:64:12:36:41:7f:1a:07:98:
                    ab:e4:23:85:91:dc:06:b2:bd:9e:a2:3f:30:09:c1:
                    da:4d:39:c5:54:b3:be:5d:18:73:b0:53:78:b1:1e:
                    d2:c5:e8:61:b9:32:f6:ed:c3:12:bd:53:b9:65:48:
                    e6:c9:2d:48:a4:03:dc:b8:5e:de:8a:55:1b:16:ed:
                    6e:75:8e:3e:b3:91:25:98:2b:b2:44:98:6b:ea:28:
                    71:7c:92:98:72:05:5a:f6:56:85:44:22:e9:a6:0c:
                    a8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:14:CC:52:69:1D:AF:D2:62:87:5C:C2:2E:0A:92:24:94:23:A1:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/78de1641-a5c6-3395-afbb-a7b09c8ca7bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:35:78:07:dc:30:c6:04:21:48:b8:fe:a0:ad:0f:ca:cf:16:
         2b:6c:9c:73:7a:99:6c:bc:f7:95:9a:54:2b:bf:f7:7d:f1:18:
         a4:fa:e3:2b:82:57:da:24:3a:0d:9d:c5:ff:76:ad:4b:91:29:
         89:2a:cc:c9:55:e6:41:eb:3e:4c:5d:83:db:40:a2:ac:10:b2:
         16:13:49:05:5b:19:5d:7a:44:bc:0c:c5:1f:a7:ce:a8:24:c3:
         2f:6d:fd:44:77:ac:e2:b6:04:55:1a:93:b3:0e:0c:f9:78:ae:
         c6:f4:21:2d:69:c2:7d:c4:23:4d:1d:e7:01:01:28:44:f4:97:
         1e:a0:69:f6:1a:77:38:ad:5a:d0:69:09:00:1c:c4:59:eb:04:
         67:c6:f2:a0:76:b6:ef:98:e2:3a:c5:e8:b7:76:db:b7:dc:78:
         24:25:99:81:fc:c3:d3:a7:3f:ba:1e:84:9c:18:6c:3e:58:23:
         9f:d1:72:18:2f:14:1b:a3:d3:51:ee:78:c8:08:8a:02:3e:ca:
         b5:e2:a2:12:57:b9:06:f2:7c:fd:45:1a:1e:d9:86:11:61:ea:
         da:ef:20:40:84:22:b5:56:3f:6b:9b:c9:ac:83:21:ab:56:66:
         e2:22:53:9f:1e:46:08:35:af:8f:fc:51:4e:bc:47:67:67:3b:
         99:86:e8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:15:07 2026 by rpki-client