Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f7bfe13b-a18e-3e58-b575-289fab729295.roa
File:                     f7bfe13b-a18e-3e58-b575-289fab729295.roa (raw, json)
Hash identifier:          fRh+Rgeg7mLRgSW6URKnB/6yiCJFApdtoIejpkUz5xE=
Subject key identifier:   34:45:09:BF:62:13:12:10:6B:C9:59:43:80:17:E9:35:07:8B:75:1C
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EA795367FD1B313099F87BF80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f7bfe13b-a18e-3e58-b575-289fab729295.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     685
IP address blocks:        165.254.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:36:7f:d1:b3:13:09:9f:87:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=85b6e422-3e58-495a-8067-cac164784b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:fe:72:29:ca:6c:44:82:af:18:b1:6c:dc:2b:
                    2e:6f:8e:37:0f:aa:78:76:b3:4f:9e:13:99:ea:24:
                    85:6b:40:ee:86:c7:77:77:16:76:05:2a:56:4b:3a:
                    22:b4:bd:7f:52:02:5c:da:7d:f9:ff:f2:f4:af:58:
                    af:18:43:db:f3:71:16:3c:57:b3:80:a4:d8:8f:d0:
                    71:fa:ec:49:3a:52:a2:64:29:5d:3d:9d:5d:93:e3:
                    76:55:9b:6b:b4:5c:e7:c6:cf:0e:d0:63:17:fe:57:
                    5b:b3:45:b0:bb:7c:5a:41:e8:d5:50:6b:7e:8b:ac:
                    c1:fe:6e:43:e1:84:9b:00:e6:b2:e9:d8:9d:ad:51:
                    42:9a:64:3f:ab:63:ad:d5:87:1e:6e:7a:a5:b6:ca:
                    32:3a:97:02:e8:c8:99:7f:7a:5e:4d:b1:11:6e:a8:
                    24:20:bc:f9:ad:0c:6d:af:0f:17:51:fb:4f:22:10:
                    38:4c:47:01:b7:bc:97:6e:d6:39:60:ba:7a:72:9a:
                    99:86:cd:0f:ce:f9:15:6e:25:8c:fb:42:55:24:2e:
                    77:98:4c:24:84:8e:66:11:cb:27:43:70:44:89:68:
                    74:b9:33:b5:11:a6:74:88:6a:f3:7f:82:05:e4:c9:
                    c0:23:f2:c9:58:29:46:7c:54:9e:e2:3d:a5:8f:30:
                    c5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:45:09:BF:62:13:12:10:6B:C9:59:43:80:17:E9:35:07:8B:75:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f7bfe13b-a18e-3e58-b575-289fab729295.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:01:74:63:24:7e:5f:b9:c5:72:c1:0f:17:c1:08:9f:33:d4:
         d4:05:5b:d2:f3:fd:72:63:d5:e0:1c:8e:3d:25:53:db:a8:f4:
         c1:da:ef:9d:b8:5f:eb:f0:4d:62:b4:ea:18:bf:e5:19:d1:13:
         95:a4:6c:84:d1:d0:5b:1e:e3:fc:32:81:9b:7e:99:13:b0:9a:
         18:9f:55:b0:d3:b0:51:e1:22:9d:eb:f0:19:ac:c0:91:bd:d1:
         50:02:43:d7:ee:07:d1:ce:9f:d9:2f:b6:79:93:a0:9c:09:65:
         4a:4a:97:7a:d2:af:02:09:fa:95:74:6a:3f:bf:f0:31:ee:c2:
         49:bc:3b:56:81:06:42:57:48:4a:9f:4b:59:bf:e8:52:e6:65:
         ef:e1:91:36:79:e3:24:d1:ee:0e:51:57:a4:c5:16:14:77:4a:
         90:1b:df:9f:e3:73:ca:ee:0c:b6:6e:e3:c3:96:27:5b:5e:34:
         af:98:56:9e:96:cc:78:6d:6b:4f:50:a4:eb:9f:66:28:b6:8f:
         81:3a:98:0d:67:0c:e2:79:5a:b9:de:df:10:01:de:d4:6d:bf:
         26:3d:86:d3:8b:30:f7:ba:d8:b5:4d:b9:23:e5:8e:47:6c:30:
         f3:09:71:d5:46:9e:08:e1:41:67:f4:e0:f5:5e:07:9a:3e:18:
         05:aa:ff:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlTZ/0bMTCZ+Hv4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ODViNmU0MjItM2U1OC00OTVhLTgwNjctY2FjMTY0Nzg0YjBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5v5yKcpsRIKvGLFs3Csub443D6p4drNPnhOZ
6iSFa0Duhsd3dxZ2BSpWSzoitL1/UgJc2n35//L0r1ivGEPb83EWPFezgKTYj9Bx
+uxJOlKiZCldPZ1dk+N2VZtrtFznxs8O0GMX/ldbs0Wwu3xaQejVUGt+i6zB/m5D
4YSbAOay6didrVFCmmQ/q2Ot1YcebnqltsoyOpcC6MiZf3peTbERbqgkILz5rQxt
rw8XUftPIhA4TEcBt7yXbtY5YLp6cpqZhs0PzvkVbiWM+0JVJC53mEwkhI5mEcsn
Q3BEiWh0uTO1EaZ0iGrzf4IF5MnAI/LJWClGfFSe4j2ljzDFnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDRFCb9iExIQa8lZQ4AX6TUHi3UcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZjdiZmUxM2ItYTE4ZS0z
ZTU4LWI1NzUtMjg5ZmFiNzI5Mjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApf4IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJoBdGMkfl+5xXLBDxfBCJ8z1NQFW9Lz/XJj1eAcjj0lU9uo9MHa7524
X+vwTWK06hi/5RnRE5WkbITR0Fse4/wygZt+mROwmhifVbDTsFHhIp3r8BmswJG9
0VACQ9fuB9HOn9kvtnmToJwJZUpKl3rSrwIJ+pV0aj+/8DHuwkm8O1aBBkJXSEqf
S1m/6FLmZe/hkTZ54yTR7g5RV6TFFhR3SpAb35/jc8ruDLZu48OWJ1teNK+YVp6W
zHhta09QpOufZii2j4E6mA1nDOJ5Wrne3xAB3tRtvyY9htOLMPe62LVNuSPljkds
MPMJcdVGngjhQWf04PVeB5o+GAWq/9w=
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:33:58 2026 by rpki-client