Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/c03d52e7-7083-36c6-85dc-12a66ca4b8ac.roa
File:                     c03d52e7-7083-36c6-85dc-12a66ca4b8ac.roa (raw, json)
Hash identifier:          0wxS6PxYpy5heJ9C0CjSi2Fk9nUDCqlhsywE4lG5d5g=
Subject key identifier:   CE:79:63:26:E9:DC:16:FC:7B:28:90:AB:C7:AC:F7:AC:BF:55:6E:AF
Certificate issuer:       /CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b
Certificate serial:       010D0C9F4328584E90BA529A1257518195E34280
Authority key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/c03d52e7-7083-36c6-85dc-12a66ca4b8ac.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     8075
IP address blocks:        165.224.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:52:9a:12:57:51:81:95:e3:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=eb246caa-9f26-440f-9cf8-5d2f90621528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:43:58:0e:1d:89:34:76:20:0d:93:b2:47:e7:
                    a6:9f:bd:2f:d1:13:92:23:1a:1a:ce:74:82:a3:06:
                    95:96:87:02:77:05:58:10:9c:6d:b3:ba:e5:d1:6a:
                    5f:94:30:30:16:b5:92:14:17:54:4d:bb:7e:4d:f4:
                    dd:b4:c0:f3:1a:21:27:28:0a:0f:cb:ba:a4:69:99:
                    f6:10:dc:15:c9:51:54:aa:8d:da:4c:66:c1:32:26:
                    04:c0:51:85:be:72:0b:11:11:2a:10:c5:0d:75:0e:
                    8c:1c:ec:ba:5b:ea:de:f5:c7:70:a3:90:1f:8a:94:
                    a1:51:d1:88:e4:54:64:21:f9:26:d2:80:f1:16:8d:
                    3c:8e:d6:dd:05:7f:7d:2c:5e:68:09:36:35:70:0c:
                    40:e1:3d:cb:8a:6c:54:dc:84:98:29:48:96:20:39:
                    0f:2f:aa:ef:44:bb:9a:fd:de:d7:f2:5c:2b:d3:d3:
                    51:a6:4b:b3:1c:ef:61:ac:59:98:b7:69:2a:f3:81:
                    b5:de:f4:e0:47:15:69:0a:ff:22:39:02:67:9a:aa:
                    76:7a:da:ec:ff:22:19:71:ff:94:28:63:30:97:68:
                    a4:3c:c6:e5:d4:82:19:76:8e:2b:ac:7c:61:f5:77:
                    bb:e2:84:66:59:f0:e2:39:61:d1:e4:ec:09:39:12:
                    62:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:79:63:26:E9:DC:16:FC:7B:28:90:AB:C7:AC:F7:AC:BF:55:6E:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/c03d52e7-7083-36c6-85dc-12a66ca4b8ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl

            X509v3 Authority Key Identifier:
                keyid:06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.224.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:74:ae:43:49:85:b1:e1:e1:ff:f9:ea:13:07:4e:50:07:60:
         98:c6:51:21:a9:74:fd:de:8a:be:34:8c:0b:49:f8:7c:04:96:
         68:f9:5b:46:32:53:e3:0c:d5:1e:20:b6:5f:99:62:9d:df:d7:
         1f:0d:66:76:c6:8d:57:01:1c:bb:ba:1c:60:46:32:ec:19:cf:
         eb:88:f0:81:0e:79:e4:d0:6a:22:fe:fa:14:f4:1a:a4:1f:62:
         49:78:f9:65:3d:2f:89:42:8c:a4:72:6e:06:2d:7d:94:5c:32:
         49:73:af:78:79:98:c4:4a:b8:34:f9:68:4a:b3:fc:31:77:d9:
         1b:17:28:02:92:43:85:6d:d1:01:ab:4e:4b:00:b9:85:50:c4:
         a8:7c:c2:8b:ac:7b:da:ea:6c:2a:fd:ca:49:8c:cd:8f:83:9e:
         55:f6:de:c6:06:fe:36:f3:52:8e:3b:76:c9:9f:9a:32:a8:86:
         4e:e6:96:a3:57:41:30:a1:e2:1e:40:40:2a:16:37:36:ef:be:
         dd:35:4d:3d:9a:1c:40:f4:a8:b1:9a:81:40:c9:1f:28:19:21:
         d3:88:24:6f:56:c5:98:11:1e:42:53:e7:30:38:de:d9:f8:76:
         1e:c7:09:c1:43:a7:be:48:8c:11:e9:61:26:61:f0:a9:8f:f0:
         ce:80:02:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:29:42 2026 by rpki-client