Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/8c38affa-b7b6-3147-b194-57417958ad36.roa
File:                     8c38affa-b7b6-3147-b194-57417958ad36.roa (raw, json)
Hash identifier:          oV1rtgDfJahP3o9oSSyatoEOtjZaQCvqQum81ADiGls=
Subject key identifier:   E0:00:DA:F0:3F:3C:69:D5:F3:4C:F2:53:32:0E:AE:57:CC:CE:15:53
Certificate issuer:       /CN=324346b5-3875-43b0-bb0d-8052274567d4
Certificate serial:       010D0C9F4328584D492A6F23E8035F46628233C0
Authority key identifier: 4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/8c38affa-b7b6-3147-b194-57417958ad36.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     55
IP address blocks:        165.123.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:6f:23:e8:03:5f:46:62:82:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324346b5-3875-43b0-bb0d-8052274567d4
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=a923d952-512d-4966-bbd6-99b8bf061dc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:19:f6:32:39:72:21:04:c8:f1:93:6a:33:2a:
                    19:f4:25:c4:c3:7b:43:a9:58:2f:e9:21:c6:dc:44:
                    86:d6:64:19:b3:10:7e:68:db:05:c3:04:5e:3e:74:
                    fc:0b:0b:b2:2e:18:3c:0b:dd:88:29:c5:9e:d3:0b:
                    e7:ef:99:af:db:c0:b5:e2:83:c7:64:28:32:d4:85:
                    63:a0:de:06:0b:58:4c:63:67:4d:a4:89:fa:54:c2:
                    92:cf:5a:7e:4e:e9:8e:56:18:79:74:6f:c1:2f:eb:
                    39:07:aa:5a:42:18:a5:b3:0b:6f:98:04:f8:78:6a:
                    00:4c:1b:fe:85:b5:37:7d:4a:2b:3f:06:4c:8d:85:
                    37:49:7b:62:cb:c1:29:f6:ff:2a:11:ab:c9:6f:dc:
                    e2:75:a0:f2:df:ca:30:fd:97:48:7d:0a:c9:a5:ba:
                    a4:b1:5c:c5:0f:15:e9:65:b7:1c:0a:b8:41:7f:cd:
                    be:a1:0b:fe:00:a2:61:32:70:05:d1:89:b5:ab:01:
                    4b:0f:92:c4:65:fd:0c:dd:ab:85:3e:aa:5e:3d:c1:
                    3d:0e:68:c1:2f:6c:fb:32:8a:60:59:81:3a:a6:2a:
                    2f:3b:74:0e:8a:7c:dc:14:7b:f8:76:64:46:f5:cf:
                    1f:17:eb:1a:99:01:4c:0e:ed:b7:b0:a3:af:87:07:
                    30:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:00:DA:F0:3F:3C:69:D5:F3:4C:F2:53:32:0E:AE:57:CC:CE:15:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/8c38affa-b7b6-3147-b194-57417958ad36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl

            X509v3 Authority Key Identifier:
                keyid:4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.123.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:9e:54:49:77:11:d1:84:62:82:b5:33:89:38:12:d8:d4:9e:
         e6:31:32:58:a7:8c:b4:f1:d2:30:92:65:48:16:b2:34:09:a5:
         e6:cd:12:e6:31:6a:6b:93:ff:ed:20:aa:7e:0a:52:17:19:1c:
         61:88:db:4e:5b:e1:77:ec:c1:3c:b1:0c:b6:ac:56:2f:99:e7:
         31:3a:59:6e:bd:a9:13:50:38:cc:d3:9e:a2:75:8b:18:1e:e2:
         57:f8:42:31:f3:9b:28:d1:a9:6b:fe:cb:e9:a3:5b:47:29:08:
         40:21:a3:49:40:15:aa:70:3b:19:ed:8d:08:e1:fd:ab:b3:46:
         9d:0b:f5:03:9f:df:f3:8e:b0:14:b0:a5:74:46:28:34:81:5a:
         1e:d8:89:56:2f:20:a2:27:9d:77:1b:15:af:62:82:7b:50:f3:
         5f:20:f3:1d:81:89:01:ca:35:57:b5:4a:f7:83:19:40:67:fb:
         84:57:3c:70:70:14:7b:90:a0:30:66:4e:4f:1e:f4:fe:c9:a2:
         bd:9e:51:c5:e3:c0:1c:e1:47:44:4c:f4:52:1d:06:3d:c5:21:
         5c:83:7d:38:d8:34:99:65:99:85:0c:34:ee:e1:f9:66:a4:3a:
         c4:68:9b:ce:f7:fd:9f:a1:30:29:01:d6:4a:19:0b:f3:28:8c:
         7f:ed:f3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:34:22 2026 by rpki-client