Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/1a8e232f-f83b-3de7-8816-63d5567cf47b.roa
File:                     1a8e232f-f83b-3de7-8816-63d5567cf47b.roa (raw, json)
Hash identifier:          mSAgAXapc3rA6EuZVrXw7e0ePm2FsgMgyWqqfjgLePM=
Subject key identifier:   F8:43:22:ED:4A:FB:DA:E2:DD:63:D4:D2:1D:9C:1D:2A:D6:55:6E:BD
Certificate issuer:       /CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
Certificate serial:       010D0C9F4328584E78FF7F9365800C00F81DECF0
Authority key identifier: 83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/1a8e232f-f83b-3de7-8816-63d5567cf47b.roa
Signing time:             Sun 12 Jul 2026 09:00:11 +0000
ROA not before:           Sun 12 Jul 2026 09:00:11 +0000
ROA not after:            Sat 10 Oct 2026 09:00:11 +0000
asID:                     30045
IP address blocks:        192.75.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:78:ff:7f:93:65:80:0c:00:f8:1d:ec:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
        Validity
            Not Before: Jul 12 09:00:11 2026 GMT
            Not After : Oct 10 09:00:11 2026 GMT
        Subject: CN=5d8c2dd4-d019-4011-8497-001afecbd26d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f7:da:5b:9b:d2:86:be:0c:ea:24:e5:a6:9a:
                    91:36:0a:6c:8a:73:76:b4:c7:ba:c2:b6:08:5b:03:
                    52:55:e1:21:5d:43:0d:98:a5:d0:46:de:d5:ae:75:
                    26:27:15:2a:6a:99:1b:21:4d:c6:3d:30:7c:9b:5f:
                    2e:ca:5f:cb:3b:95:29:8a:02:72:e0:d9:7a:3d:4b:
                    34:70:5f:57:9d:7b:6d:51:26:b4:d2:26:85:fe:a5:
                    07:11:54:07:e1:c3:5d:ea:b8:8e:ac:2e:da:b1:f5:
                    42:29:d8:ad:c6:9c:cd:12:43:46:01:b0:62:94:fb:
                    ae:8a:ef:c1:0d:0a:30:33:2d:4f:21:af:51:ca:1d:
                    f8:9f:e9:cc:26:f8:10:7c:be:8d:0f:96:85:e8:bc:
                    b2:38:d6:32:2c:42:61:ff:51:b3:44:5f:32:fb:6f:
                    e7:bf:ee:ae:fa:ff:d2:be:67:e5:62:01:6d:15:a7:
                    98:77:ef:80:2c:fb:cf:ae:15:86:4f:05:fa:f3:22:
                    6b:94:85:a9:84:bc:97:b9:42:f6:84:a5:01:b4:35:
                    d6:cd:4d:80:f5:0b:88:9e:d8:1d:9e:a4:96:3b:a7:
                    d7:75:a2:9b:ed:15:1b:98:e9:2a:3c:75:24:39:d3:
                    07:23:d8:67:23:89:90:e8:25:a7:08:db:89:15:e2:
                    e5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:43:22:ED:4A:FB:DA:E2:DD:63:D4:D2:1D:9C:1D:2A:D6:55:6E:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/1a8e232f-f83b-3de7-8816-63d5567cf47b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl

            X509v3 Authority Key Identifier:
                keyid:83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.75.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:1f:97:a1:e5:00:c3:5c:aa:43:fc:92:09:49:a4:84:7c:e3:
         77:7a:b9:e5:32:f9:d8:5b:53:cc:bf:ae:2d:a5:ac:43:7c:d8:
         8d:f4:9a:9e:ac:aa:58:53:60:62:7c:e0:aa:cc:0a:fd:7b:14:
         e7:ad:65:85:15:f9:1d:0e:de:88:c3:87:1b:79:d5:2d:19:6d:
         42:f7:67:4e:cd:cf:eb:6b:18:e6:e1:47:dd:85:c1:fb:6f:bd:
         e0:c1:37:3d:27:36:0b:71:37:4c:11:6b:7b:71:cf:97:34:2c:
         c1:a9:74:2b:af:69:e3:d3:67:f1:da:25:03:25:c1:cf:ab:14:
         fd:03:9c:45:e1:96:f3:11:19:6f:11:a6:01:3d:79:fc:75:46:
         1d:0c:13:e3:4b:79:2e:bd:87:09:5f:42:67:e1:91:1a:0b:c6:
         2d:bf:5a:a2:c3:80:fa:cb:40:9f:2a:47:3b:f8:66:d8:cc:07:
         20:de:18:b2:f6:6b:36:f0:a8:2b:59:bb:9c:6a:30:11:60:9e:
         ce:e1:81:f3:fe:14:dd:96:fa:90:4b:27:43:d8:70:aa:71:eb:
         8a:4a:f9:39:f3:9e:49:c1:f7:df:16:63:d8:10:48:09:12:bd:
         44:16:e2:05:a9:18:84:87:7a:7b:ae:32:6c:17:06:31:06:fe:
         d2:85:3c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:03:38 2026 by rpki-client