Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c312053a-249e-3f5a-b15f-351b98755ccb.roa
File:                     c312053a-249e-3f5a-b15f-351b98755ccb.roa (raw, json)
Hash identifier:          EOY2gQWTrEYYbQuWDjR/hIMtThIGs9di/gFaYUaCKjc=
Subject key identifier:   99:D9:4B:FA:07:A3:A3:4B:9E:1F:7C:8C:33:05:A6:05:84:C6:CB:27
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584BBE403ECB4AE6F05AF0DED880
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c312053a-249e-3f5a-b15f-351b98755ccb.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     20940
IP address blocks:        165.254.26.128/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:3e:cb:4a:e6:f0:5a:f0:de:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=31dea74a-fa10-450b-930e-91460893a55e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f8:82:08:5b:b9:f4:8d:d3:c6:d0:8f:1a:61:
                    e8:c7:0c:e5:25:ee:e6:b8:5c:41:12:f0:40:82:14:
                    f6:f6:c6:25:ba:12:fd:28:e3:f7:75:ce:fa:0d:da:
                    15:37:a7:8b:94:6d:a1:7d:10:a6:17:b2:ad:9e:6c:
                    9f:2d:9b:9b:9a:44:ba:bd:06:79:fc:7c:27:4e:43:
                    81:af:5f:25:b1:6b:36:fb:f7:0d:d1:87:2a:b0:d9:
                    4c:0d:b2:10:ba:ad:e1:44:17:48:b4:be:00:40:f0:
                    32:eb:6b:9d:37:55:4b:c7:d0:57:07:28:5e:cc:3d:
                    29:e7:2c:fb:31:cb:80:71:18:96:85:4f:0f:58:25:
                    4e:5e:8b:8e:93:d8:07:38:06:0b:05:f2:12:cb:89:
                    af:26:49:03:0b:4c:d6:c0:56:4f:78:74:8e:97:6c:
                    44:79:d7:39:e8:1c:b5:df:0e:ae:3f:42:97:00:f2:
                    6a:5d:ec:4f:9a:0f:29:8e:d9:f3:a8:70:81:6f:12:
                    02:97:3f:fc:b6:fe:42:89:bf:d5:f2:9b:f9:32:77:
                    1d:76:3d:b6:8e:08:f9:f4:d1:36:6b:52:85:6d:a7:
                    63:9e:d6:3b:c5:cb:22:e8:90:15:8a:9d:bb:44:bb:
                    3b:05:7c:9f:0e:de:64:41:b4:46:1a:e0:c0:4c:87:
                    1b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D9:4B:FA:07:A3:A3:4B:9E:1F:7C:8C:33:05:A6:05:84:C6:CB:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c312053a-249e-3f5a-b15f-351b98755ccb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.26.128/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:8e:5f:07:0f:f1:0a:47:80:ca:fa:55:6e:58:93:1e:b3:e3:
         f2:af:3e:9f:5f:d8:52:eb:b1:b9:de:7c:09:a5:6b:95:94:4c:
         8b:dc:a0:ca:68:c5:ff:c2:ed:f9:a8:47:9e:4b:3c:7e:43:3c:
         44:3c:b8:10:84:18:be:7c:ce:6e:c1:e9:c9:f0:3e:0c:e9:2c:
         37:8d:19:27:bb:72:ea:ba:5f:de:e6:34:af:d2:f7:d2:78:6e:
         fa:7a:71:63:aa:ba:71:b5:ad:6c:b4:50:fa:8d:d0:63:7f:67:
         0b:c9:d2:5b:57:cf:39:93:52:e4:48:f6:62:c4:5c:5c:87:22:
         b5:a9:c9:48:58:e3:99:22:9f:f3:6a:7c:39:f8:a9:37:cc:38:
         b7:d6:71:74:36:4f:28:a3:16:c9:4b:9a:d7:fc:55:55:1e:cd:
         a1:74:fa:17:a4:39:d3:18:9b:dc:f0:74:c0:98:05:1e:31:c6:
         3a:a8:12:84:d4:1b:21:a0:3a:65:72:3d:b1:f6:50:d7:f5:77:
         d7:d9:8c:16:ab:24:a6:d3:42:b6:4d:5d:8a:33:77:60:ea:f8:
         bf:13:24:95:07:f3:d6:51:b0:3c:09:8b:53:cf:bc:44:1c:a7:
         c4:d1:d0:aa:e6:7e:54:28:28:0d:76:9d:af:90:7b:fd:8a:84:
         17:69:b6:30
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEu+QD7LSubwWvDe2IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk
MzFkZWE3NGEtZmExMC00NTBiLTkzMGUtOTE0NjA4OTNhNTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxviCCFu59I3TxtCPGmHoxwzlJe7muFxBEvBA
ghT29sYluhL9KOP3dc76DdoVN6eLlG2hfRCmF7KtnmyfLZubmkS6vQZ5/HwnTkOB
r18lsWs2+/cN0YcqsNlMDbIQuq3hRBdItL4AQPAy62udN1VLx9BXByhezD0p5yz7
McuAcRiWhU8PWCVOXouOk9gHOAYLBfISy4mvJkkDC0zWwFZPeHSOl2xEedc56By1
3w6uP0KXAPJqXexPmg8pjtnzqHCBbxIClz/8tv5Cib/V8pv5Mncddj22jgj59NE2
a1KFbadjntY7xcsi6JAVip27RLs7BXyfDt5kQbRGGuDATIcb8wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJnZS/oHo6NLnh98jDMFpgWExssnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYzMxMjA1M2EtMjQ5ZS0z
ZjVhLWIxNWYtMzUxYjk4NzU1Y2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGpf4agDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBgjl8HD/EKR4DK+lVuWJMes+Pyrz6fX9hS67G53nwJpWuVlEyL3KDK
aMX/wu35qEeeSzx+QzxEPLgQhBi+fM5uwenJ8D4M6Sw3jRknu3Lqul/e5jSv0vfS
eG76enFjqrpxta1stFD6jdBjf2cLydJbV885k1LkSPZixFxchyK1qclIWOOZIp/z
anw5+Kk3zDi31nF0Nk8ooxbJS5rX/FVVHs2hdPoXpDnTGJvc8HTAmAUeMcY6qBKE
1BshoDplcj2x9lDX9XfX2YwWqySm00K2TV2KM3dg6vi/EySVB/PWUbA8CYtTz7xE
HKfE0dCq5n5UKCgNdp2vkHv9ioQXabYw
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:13:50 2025 by rpki-client