Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/15f039e9-176e-3af0-9418-a8a8a9b8bfef.roa
File:                     15f039e9-176e-3af0-9418-a8a8a9b8bfef.roa (raw, json)
Hash identifier:          QjHOt6OGjdmOxRuUzE7mWTIv0TWweTJ7HdrJI8YRDwI=
Subject key identifier:   16:06:C6:DF:9A:55:08:87:CC:36:60:E6:78:07:0C:84:73:B8:51:B6
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584B970D04664CA8F035FB9E93C0
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/15f039e9-176e-3af0-9418-a8a8a9b8bfef.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     19901
IP address blocks:        207.50.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0d:04:66:4c:a8:f0:35:fb:9e:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=f972e61a-1b42-4e8c-bc57-59d0ea534021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:05:35:af:b5:87:41:bd:22:96:12:f0:98:55:
                    86:0a:b1:01:22:bd:18:60:6e:81:57:a4:39:5a:cf:
                    cd:a4:40:7a:76:14:ff:cf:0b:e0:e8:a5:6e:8e:13:
                    38:ed:ec:8c:f6:dd:ac:9c:86:df:87:c0:1a:2b:1c:
                    39:af:84:30:44:bf:00:76:b0:e2:b5:89:06:12:c1:
                    99:2f:57:7a:e6:db:6c:89:30:9c:2f:43:23:d5:6e:
                    d6:53:97:7c:3c:91:87:25:2b:db:c7:ba:60:9f:4a:
                    5e:96:87:62:c7:47:9d:08:2b:60:4e:eb:d0:41:56:
                    0a:3e:1a:b8:fd:f1:e6:7b:fa:89:bd:e6:37:54:bd:
                    29:19:d1:1a:e5:a2:47:49:6a:e1:c1:33:f0:ae:14:
                    b6:9b:27:ee:90:61:6f:ee:18:18:5e:6a:27:81:e3:
                    44:2c:b8:2f:a5:89:87:62:50:92:e1:14:49:2f:eb:
                    73:81:1e:44:99:9d:fb:8d:77:ac:3f:34:44:30:17:
                    f9:c6:31:3b:da:91:35:83:8f:77:5b:dd:e3:45:2f:
                    62:48:84:c3:58:58:02:a2:69:c0:b9:93:40:a1:5c:
                    06:67:04:6a:74:9e:85:83:e7:e6:e2:d4:b1:28:a8:
                    be:1b:46:3f:8d:ab:5d:a2:27:65:94:ec:c6:8b:8a:
                    cc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:06:C6:DF:9A:55:08:87:CC:36:60:E6:78:07:0C:84:73:B8:51:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/15f039e9-176e-3af0-9418-a8a8a9b8bfef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.50.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:3e:80:81:99:5f:a6:ca:e1:0f:17:03:ca:ab:01:a7:ce:01:
         64:8e:f8:13:be:88:1e:d3:f4:3a:9e:42:98:e0:1d:ef:1e:a4:
         61:36:91:c0:35:3d:08:42:ed:0c:e8:9e:b4:1f:46:78:32:ca:
         3c:36:83:82:75:8e:39:ff:5a:ff:cc:a5:29:f3:95:90:8c:c3:
         26:c3:ca:68:4d:3e:20:20:4e:f7:8c:c4:c9:4e:c3:22:d2:3c:
         d5:bb:42:0a:ed:fd:3a:25:38:cb:81:d1:b0:30:0e:ec:ce:9d:
         d6:ac:ca:00:0d:9f:47:a3:13:16:fb:87:e2:e5:b3:01:b5:fc:
         15:45:c2:4e:87:f7:3c:e0:64:38:4d:57:31:95:39:b0:5e:83:
         28:31:d8:ef:4d:5c:8d:5c:a5:fd:84:cb:70:5e:21:93:5a:0b:
         2e:d9:4b:ec:d8:96:65:99:a0:6e:c4:57:f5:b1:9c:06:7b:51:
         88:cc:db:19:fd:68:cd:68:17:cf:d1:5c:97:a3:5c:b4:36:73:
         ac:db:cc:e1:a0:ed:e4:54:51:93:c0:66:17:d9:0d:ca:27:c5:
         79:80:be:86:e3:26:7b:d0:75:fc:0c:ce:fb:b5:52:5b:94:a6:
         2e:ec:60:b2:82:12:e7:9b:5b:3d:19:a2:21:21:6d:7a:db:60:
         a2:6f:37:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDQRmTKjwNfuek8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDk0NDBhOTMtOTg2Zi00MWRhLTg3MjMtN2I2N2Y4MWJk
YmNlMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk
Zjk3MmU2MWEtMWI0Mi00ZThjLWJjNTctNTlkMGVhNTM0MDIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwU1r7WHQb0ilhLwmFWGCrEBIr0YYG6BV6Q5
Ws/NpEB6dhT/zwvg6KVujhM47eyM9t2snIbfh8AaKxw5r4QwRL8AdrDitYkGEsGZ
L1d65ttsiTCcL0Mj1W7WU5d8PJGHJSvbx7pgn0pelodix0edCCtgTuvQQVYKPhq4
/fHme/qJveY3VL0pGdEa5aJHSWrhwTPwrhS2myfukGFv7hgYXmongeNELLgvpYmH
YlCS4RRJL+tzgR5EmZ37jXesPzREMBf5xjE72pE1g493W93jRS9iSITDWFgComnA
uZNAoVwGZwRqdJ6Fg+fm4tSxKKi+G0Y/jatdoidllOzGi4rMTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBYGxt+aVQiHzDZg5ngHDIRzuFG2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0
MGE5My05ODZmLTQxZGEtODcyMy03YjY3ZjgxYmRiY2UvMTVmMDM5ZTktMTc2ZS0z
YWYwLTk0MTgtYThhOGE5YjhiZmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDk0NDBhOTMtOTg2Zi00MWRhLTg3
MjMtN2I2N2Y4MWJkYmNlLzA5NDQwYTkzLTk4NmYtNDFkYS04NzIzLTdiNjdmODFi
ZGJjZS5jcmwwHwYDVR0jBBgwFoAUSEuB66mWlz+y3uneit7pXEIwQ4MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0MGE5My05ODZmLTQxZGEtODcyMy03YjY3
ZjgxYmRiY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzKlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFk+gIGZX6bK4Q8XA8qrAafOAWSO+BO+iB7T9DqeQpjgHe8epGE2kcA1
PQhC7QzonrQfRngyyjw2g4J1jjn/Wv/MpSnzlZCMwybDymhNPiAgTveMxMlOwyLS
PNW7Qgrt/TolOMuB0bAwDuzOndasygANn0ejExb7h+LlswG1/BVFwk6H9zzgZDhN
VzGVObBegygx2O9NXI1cpf2Ey3BeIZNaCy7ZS+zYlmWZoG7EV/WxnAZ7UYjM2xn9
aM1oF8/RXJejXLQ2c6zbzOGg7eRUUZPAZhfZDconxXmAvobjJnvQdfwMzvu1UluU
pi7sYLKCEuebWz0ZoiEhbXrbYKJvN78=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:36:42 2025 by rpki-client