Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/11e9fdca-2e63-3bb9-90ff-e7fc7a7cc47a.roa
File:                     11e9fdca-2e63-3bb9-90ff-e7fc7a7cc47a.roa (raw, json)
Hash identifier:          uEhLIDA7f53XkCZTq20S0aEKgy/t16cxqCaAo+neQn8=
Subject key identifier:   7D:05:8F:C2:1C:2B:41:D7:C0:FB:C2:D9:6A:97:9B:4D:12:E7:ED:B4
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584BBE403E8078AD9645FBA75980
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/11e9fdca-2e63-3bb9-90ff-e7fc7a7cc47a.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     20940
IP address blocks:        165.254.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:3e:80:78:ad:96:45:fb:a7:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=0800d9ca-6cba-47cb-bda4-5a9918e5dbc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e7:2b:9d:36:ca:a4:e0:c7:92:83:97:85:4d:
                    07:21:7b:bd:84:a6:f1:0f:08:86:51:68:3e:1c:5f:
                    31:fa:87:a7:dc:a0:3b:3a:67:a8:ee:2d:d7:fd:c3:
                    c8:c6:43:b0:e3:ce:fc:10:1b:72:8b:6a:1a:88:ce:
                    86:f9:87:f0:1b:d0:05:3b:00:86:fc:2a:3e:90:24:
                    98:3d:d4:e3:31:36:27:87:e7:44:89:77:be:e3:0d:
                    13:98:f3:a6:58:5e:7f:40:a4:22:64:e2:dd:45:80:
                    a7:12:be:f7:f4:b5:c7:89:55:d0:7c:dd:77:66:8f:
                    8b:e2:da:84:f7:03:00:07:43:e2:d5:40:33:8d:2d:
                    f4:04:17:b6:df:54:8a:7e:e4:29:e3:8f:d5:11:34:
                    41:d6:ea:87:39:3d:be:96:32:b4:69:72:42:d3:7d:
                    6d:19:40:de:4e:cb:bd:4c:1c:56:80:ab:24:fd:3a:
                    cc:24:76:fb:16:6a:7d:f6:34:f2:9a:77:bd:92:88:
                    fa:21:a3:ec:27:52:7a:37:b3:d0:89:ce:08:a0:cc:
                    79:bf:12:d5:d5:86:45:58:29:77:8e:bd:db:4b:09:
                    34:36:bc:07:49:96:fe:f0:01:58:66:24:ff:17:4d:
                    c6:36:16:bf:22:48:2e:b2:d3:3c:ae:d1:c3:69:50:
                    2e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:05:8F:C2:1C:2B:41:D7:C0:FB:C2:D9:6A:97:9B:4D:12:E7:ED:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/11e9fdca-2e63-3bb9-90ff-e7fc7a7cc47a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:13:63:8b:0f:64:05:45:f7:4c:b4:ac:b2:0a:df:93:36:06:
         2a:89:c1:ff:27:01:a3:a0:9e:b8:4c:b7:35:cb:97:a1:98:85:
         cd:af:a5:04:61:d8:d2:c1:9b:ee:70:84:bc:7b:5e:2a:1b:7f:
         fd:e5:60:f5:aa:31:90:b0:4a:49:14:f8:c4:8a:0e:8d:15:88:
         c2:ce:8a:dc:c2:fe:2f:49:16:fa:08:af:52:26:f0:71:e0:52:
         da:df:34:0f:53:54:5d:ee:54:99:8a:bb:f1:ae:5e:52:94:20:
         76:77:4b:89:26:7d:6f:e6:37:5a:f2:25:01:3b:b1:ba:be:d2:
         02:24:f4:3d:3f:8f:34:e6:2d:97:c3:3e:59:6d:e0:fb:f6:c7:
         72:ec:c0:80:03:68:2c:f6:59:60:fa:e8:e8:30:13:3f:08:ec:
         bc:42:61:d8:8e:82:5e:e9:08:af:80:21:3b:1a:9b:10:88:50:
         94:64:d9:dc:c0:92:8e:e1:20:0a:d2:59:c8:4b:a3:97:27:0d:
         3e:fe:2f:02:5d:51:d8:8b:08:b4:2b:9c:30:7c:cd:94:ff:f7:
         39:91:60:66:c4:1f:d5:81:a4:14:5a:ac:95:7b:7b:74:c8:cb:
         51:a0:64:e3:51:9a:ee:b3:f6:e1:43:75:82:da:a9:94:69:bc:
         84:d8:f7:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QD6AeK2WRfunWYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk
MDgwMGQ5Y2EtNmNiYS00N2NiLWJkYTQtNWE5OTE4ZTVkYmM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlucrnTbKpODHkoOXhU0HIXu9hKbxDwiGUWg+
HF8x+oen3KA7Omeo7i3X/cPIxkOw4878EBtyi2oaiM6G+YfwG9AFOwCG/Co+kCSY
PdTjMTYnh+dEiXe+4w0TmPOmWF5/QKQiZOLdRYCnEr739LXHiVXQfN13Zo+L4tqE
9wMAB0Pi1UAzjS30BBe231SKfuQp44/VETRB1uqHOT2+ljK0aXJC031tGUDeTsu9
TBxWgKsk/TrMJHb7Fmp99jTymne9koj6IaPsJ1J6N7PQic4IoMx5vxLV1YZFWCl3
jr3bSwk0NrwHSZb+8AFYZiT/F03GNha/IkgustM8rtHDaVAukQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH0Fj8IcK0HXwPvC2WqXm00S5+20MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMTFlOWZkY2EtMmU2My0z
YmI5LTkwZmYtZTdmYzdhN2NjNDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApf57MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAYTY4sPZAVF90y0rLIK35M2BiqJwf8nAaOgnrhMtzXLl6GYhc2vpQRh
2NLBm+5whLx7Xiobf/3lYPWqMZCwSkkU+MSKDo0ViMLOitzC/i9JFvoIr1Im8HHg
UtrfNA9TVF3uVJmKu/GuXlKUIHZ3S4kmfW/mN1ryJQE7sbq+0gIk9D0/jzTmLZfD
Pllt4Pv2x3LswIADaCz2WWD66OgwEz8I7LxCYdiOgl7pCK+AITsamxCIUJRk2dzA
ko7hIArSWchLo5cnDT7+LwJdUdiLCLQrnDB8zZT/9zmRYGbEH9WBpBRarJV7e3TI
y1GgZONRmu6z9uFDdYLaqZRpvITY99s=
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:14:52 2025 by rpki-client