Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0eddf336-ce40-3272-ba3f-78607f29de84.roa
File:                     0eddf336-ce40-3272-ba3f-78607f29de84.roa (raw, json)
Hash identifier:          XmxNF9Ym552XmBmHj51kylkKwC0x8UO+LfBMFhlyYos=
Subject key identifier:   23:1F:C7:15:EA:48:34:29:75:69:52:D8:66:AE:49:33:C1:DD:82:08
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584BBA1043B71273962D41884780
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0eddf336-ce40-3272-ba3f-78607f29de84.roa
Signing time:             Sun 02 Nov 2025 14:00:38 +0000
ROA not before:           Sun 02 Nov 2025 14:00:38 +0000
ROA not after:            Sat 31 Jan 2026 14:00:38 +0000
asID:                     20940
IP address blocks:        165.254.23.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ba:10:43:b7:12:73:96:2d:41:88:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Nov  2 14:00:38 2025 GMT
            Not After : Jan 31 14:00:38 2026 GMT
        Subject: CN=7e68f152-09c2-45ed-81a7-1e886ece914b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:94:53:f1:d4:b2:a0:62:80:c4:18:e0:57:73:
                    f0:db:31:c5:d1:f5:1a:0a:9b:e0:44:2f:cb:86:c2:
                    ef:ed:dd:70:75:f3:5d:ca:c9:e7:c1:6e:13:b0:72:
                    26:7f:f5:23:0f:b5:86:3a:ff:3c:6b:5b:c7:f4:1c:
                    b5:07:e9:84:aa:db:51:a8:7c:80:56:5e:bd:5e:81:
                    5d:4c:74:0f:56:5e:0b:a0:1c:4d:eb:04:a8:67:1e:
                    ad:af:bb:04:82:03:cc:d3:a8:c1:13:03:76:c4:5f:
                    23:af:a2:14:1d:25:7f:c0:f6:13:c4:af:0b:b6:75:
                    f8:64:79:ed:e7:a2:ae:7f:12:02:84:ae:75:65:f0:
                    6a:ed:c6:c1:11:3d:2b:73:88:69:5d:77:14:d3:9e:
                    63:3f:47:c3:c3:49:06:99:6e:83:bc:59:e1:66:0d:
                    d1:f9:d9:8c:aa:26:cc:61:d0:2b:c5:b0:5e:0f:00:
                    ae:c6:40:b0:24:7d:a8:bb:8f:83:32:9d:e8:c6:3a:
                    f4:f6:c1:90:5e:36:87:61:ed:06:57:90:e9:fa:db:
                    a8:7f:ab:39:23:20:b8:1b:2c:ca:28:41:63:7c:0b:
                    09:ef:27:66:ce:0f:ad:88:66:0c:51:4e:3c:9b:9c:
                    48:42:58:5c:e5:42:5b:12:94:a9:46:7d:0c:a7:bb:
                    e2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:1F:C7:15:EA:48:34:29:75:69:52:D8:66:AE:49:33:C1:DD:82:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0eddf336-ce40-3272-ba3f-78607f29de84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.23.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:3f:9c:46:de:57:ec:37:73:5f:aa:b5:9f:d4:a0:85:cd:63:
         2e:e5:d7:9c:27:36:e0:91:b6:b4:9d:53:9e:43:90:2e:bb:b7:
         bb:89:92:21:0c:28:fa:11:07:d3:2a:d6:88:b4:f5:ae:89:d5:
         09:f7:55:1f:03:13:c7:43:05:0a:4d:7e:bf:4d:52:fe:87:3e:
         a7:c2:20:66:56:ce:16:14:a0:81:ee:30:96:ea:76:0a:42:fc:
         e4:76:8c:97:32:58:7e:59:80:8c:4c:9f:fd:e7:be:51:97:19:
         5d:f9:d8:04:ba:4a:d2:60:0f:b4:b6:0e:bf:47:48:e6:a1:f2:
         10:63:5e:dd:77:e4:8c:cd:af:8a:25:ad:d6:0c:6c:a6:d1:b2:
         32:93:b5:ff:d5:e6:6a:83:2a:37:78:82:12:44:2e:3b:f9:a1:
         5c:20:54:a0:c4:fb:fa:cc:de:2b:f9:81:a7:81:06:86:0f:af:
         56:98:2d:9f:ad:78:b1:0a:3a:7c:4e:ad:84:03:39:14:0f:86:
         cd:da:0c:61:f1:c4:72:48:b7:2b:f0:ca:73:9a:87:73:63:df:
         a8:c6:d8:b8:eb:f1:95:45:ce:da:cf:cb:df:af:89:c6:b8:ad:
         bf:74:4b:b8:c5:c0:0a:45:9d:4d:bf:98:2d:8d:8c:47:fd:9e:
         b2:f8:43:5a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEu6EEO3EnOWLUGIR4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk
N2U2OGYxNTItMDljMi00NWVkLTgxYTctMWU4ODZlY2U5MTRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5RT8dSyoGKAxBjgV3Pw2zHF0fUaCpvgRC/L
hsLv7d1wdfNdysnnwW4TsHImf/UjD7WGOv88a1vH9By1B+mEqttRqHyAVl69XoFd
THQPVl4LoBxN6wSoZx6tr7sEggPM06jBEwN2xF8jr6IUHSV/wPYTxK8LtnX4ZHnt
56KufxIChK51ZfBq7cbBET0rc4hpXXcU055jP0fDw0kGmW6DvFnhZg3R+dmMqibM
YdArxbBeDwCuxkCwJH2ou4+DMp3oxjr09sGQXjaHYe0GV5Dp+tuof6s5IyC4GyzK
KEFjfAsJ7ydmzg+tiGYMUU48m5xIQlhc5UJbEpSpRn0Mp7vidwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCMfxxXqSDQpdWlS2GauSTPB3YIIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMGVkZGYzMzYtY2U0MC0z
MjcyLWJhM2YtNzg2MDdmMjlkZTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHpf4XADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB7P5xG3lfsN3NfqrWf1KCFzWMu5decJzbgkba0nVOeQ5Auu7e7iZIh
DCj6EQfTKtaItPWuidUJ91UfAxPHQwUKTX6/TVL+hz6nwiBmVs4WFKCB7jCW6nYK
QvzkdoyXMlh+WYCMTJ/9575Rlxld+dgEukrSYA+0tg6/R0jmofIQY17dd+SMza+K
Ja3WDGym0bIyk7X/1eZqgyo3eIISRC47+aFcIFSgxPv6zN4r+YGngQaGD69WmC2f
rXixCjp8Tq2EAzkUD4bN2gxh8cRySLcr8MpzmodzY9+oxti46/GVRc7az8vfr4nG
uK2/dEu4xcAKRZ1Nv5gtjYxH/Z6y+ENa
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:44:18 2025 by rpki-client