Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/813893f5-3a3a-3cb2-9896-c89a871976be.roa
File:                     813893f5-3a3a-3cb2-9896-c89a871976be.roa (raw, json)
Hash identifier:          GCEXl6wo0GZd7+iUs6ZBR9AO1VWZ8GQe3lGITTecmAc=
Subject key identifier:   BF:6B:8C:38:0E:C5:E8:74:DD:40:2F:CE:E4:2A:F8:43:5D:B9:57:71
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584BC10AE6653330D5560FB56188
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/813893f5-3a3a-3cb2-9896-c89a871976be.roa
Signing time:             Wed 05 Nov 2025 02:00:31 +0000
ROA not before:           Wed 05 Nov 2025 02:00:31 +0000
ROA not after:            Tue 03 Feb 2026 02:00:31 +0000
asID:                     7725
IP address blocks:        174.163.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c1:0a:e6:65:33:30:d5:56:0f:b5:61:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  5 02:00:31 2025 GMT
            Not After : Feb  3 02:00:31 2026 GMT
        Subject: CN=ee99ddee-f1d0-426f-85b6-f1ceacf6f414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:63:e2:ef:98:e6:64:94:7d:d2:29:7d:c6:f5:
                    83:e7:b3:82:31:70:99:77:e3:2c:68:2b:ac:f3:b0:
                    34:78:10:e6:6a:10:e2:4f:1f:a5:b6:a0:0e:35:bd:
                    c8:1c:26:2b:03:87:0b:bf:b1:9f:35:1d:f7:a2:19:
                    96:19:50:b6:52:d2:67:e2:02:f6:b8:20:8b:8d:61:
                    1a:f2:0a:1e:98:58:f8:d7:12:37:88:d1:8c:cd:bc:
                    e8:a8:30:04:95:f1:bd:46:62:b2:42:c7:19:e2:f2:
                    61:2a:09:5c:1f:e2:61:d5:5e:1d:3b:17:3b:d8:ff:
                    14:56:96:3a:c9:3a:01:a9:24:14:40:ec:40:31:7c:
                    d2:e8:b8:7f:3f:f4:39:37:9f:ad:ac:bc:28:c5:d4:
                    ad:42:70:2a:5f:59:92:96:7a:0e:ee:a2:5b:58:0b:
                    a0:25:5e:be:ab:93:df:0f:14:87:7e:1c:fe:22:a6:
                    8e:f0:0d:37:99:87:a0:9b:7b:ed:b7:47:32:79:cd:
                    55:65:2d:ac:6b:b8:18:dd:1b:60:32:1f:46:b1:45:
                    c7:01:96:61:af:08:d3:3e:65:09:16:aa:52:0b:33:
                    47:7a:88:9e:9b:ee:80:55:47:ab:24:ea:24:5d:48:
                    02:67:20:44:f1:a1:be:c0:9b:78:82:e6:94:5b:bb:
                    21:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6B:8C:38:0E:C5:E8:74:DD:40:2F:CE:E4:2A:F8:43:5D:B9:57:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/813893f5-3a3a-3cb2-9896-c89a871976be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.163.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:01:84:e6:5a:bc:44:d3:3b:ad:c4:79:76:4f:b5:f5:23:38:
         4e:1d:7b:d6:1b:fa:f4:d2:da:c7:ba:63:cf:02:82:2c:16:bd:
         b4:24:2e:b9:a1:d3:cb:a3:fa:2f:c6:e4:55:74:3e:5a:10:5f:
         0e:3d:19:cd:f0:7f:e9:e9:bf:51:72:62:2e:8d:3d:4d:e0:98:
         89:9a:cd:90:c1:1c:12:b7:2c:fc:7e:25:3f:8a:7b:1f:a9:db:
         ba:7d:ff:c3:24:07:f9:4d:16:36:f9:fc:c6:0c:ba:a1:f0:4b:
         85:d8:54:b5:01:70:20:bd:31:fd:a0:f8:78:4e:eb:1e:48:46:
         9b:45:fc:27:3e:d6:51:7a:99:b9:c6:19:3f:3e:dd:b4:47:f6:
         e6:64:48:17:29:ff:0e:7e:19:73:4f:95:e9:cf:da:b1:b7:e2:
         fe:18:60:5a:55:fa:d3:64:73:d1:e8:8c:ea:be:62:ac:ed:6d:
         fe:65:c3:f5:c9:05:4a:09:fb:58:b5:99:77:84:10:d8:4d:52:
         f8:1e:e0:79:cd:21:70:1b:34:4d:2d:6a:e6:a8:f4:15:13:44:
         c0:37:0d:bc:f5:fe:f5:2b:85:05:11:49:0e:13:f5:82:0d:f8:
         39:d5:dc:7e:26:4e:85:f7:33:7e:6d:ad:22:26:59:51:79:b2:
         cf:f6:7e:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBCuZlMzDVVg+1YYgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk
ZWU5OWRkZWUtZjFkMC00MjZmLTg1YjYtZjFjZWFjZjZmNDE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWPi75jmZJR90il9xvWD57OCMXCZd+MsaCus
87A0eBDmahDiTx+ltqAONb3IHCYrA4cLv7GfNR33ohmWGVC2UtJn4gL2uCCLjWEa
8goemFj41xI3iNGMzbzoqDAElfG9RmKyQscZ4vJhKglcH+Jh1V4dOxc72P8UVpY6
yToBqSQUQOxAMXzS6Lh/P/Q5N5+trLwoxdStQnAqX1mSlnoO7qJbWAugJV6+q5Pf
DxSHfhz+IqaO8A03mYegm3vtt0cyec1VZS2sa7gY3RtgMh9GsUXHAZZhrwjTPmUJ
FqpSCzNHeoiem+6AVUerJOokXUgCZyBE8aG+wJt4guaUW7shIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL9rjDgOxeh03UAvzuQq+ENduVdxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODEzODkzZjUtM2EzYS0z
Y2IyLTk4OTYtYzg5YTg3MTk3NmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqMkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADkBhOZavETTO63EeXZPtfUjOE4de9Yb+vTS2se6Y88CgiwWvbQkLrmh
08uj+i/G5FV0PloQXw49Gc3wf+npv1FyYi6NPU3gmImazZDBHBK3LPx+JT+Kex+p
27p9/8MkB/lNFjb5/MYMuqHwS4XYVLUBcCC9Mf2g+HhO6x5IRptF/Cc+1lF6mbnG
GT8+3bRH9uZkSBcp/w5+GXNPlenP2rG34v4YYFpV+tNkc9HojOq+Yqztbf5lw/XJ
BUoJ+1i1mXeEENhNUvge4HnNIXAbNE0tauao9BUTRMA3Dbz1/vUrhQURSQ4T9YIN
+DnV3H4mToX3M35trSImWVF5ss/2fi0=
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:24:56 2025 by rpki-client