Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/0d6c589a-daa5-32ac-b4eb-de44bdc1b5d8.roa
File:                     0d6c589a-daa5-32ac-b4eb-de44bdc1b5d8.roa (raw, json)
Hash identifier:          VH3ONVolZgoRPw/wUp9R2BVcU+KtPQ9Cy97flCplXJI=
Subject key identifier:   AB:9F:73:32:D0:AF:69:B4:B6:53:87:62:DC:D0:B4:43:94:21:E4:98
Certificate issuer:       /CN=cf016678-dab3-43d1-b7ea-5d3ad8148e97
Certificate serial:       010D0C9F4328584BC10AD9EA109F521686D92D40
Authority key identifier: 46:85:D2:50:6B:90:50:D3:17:93:6E:11:71:EA:C3:8B:99:E5:01:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/0d6c589a-daa5-32ac-b4eb-de44bdc1b5d8.roa
Signing time:             Wed 05 Nov 2025 02:00:31 +0000
ROA not before:           Wed 05 Nov 2025 02:00:31 +0000
ROA not after:            Tue 03 Feb 2026 02:00:31 +0000
asID:                     4185
IP address blocks:        165.135.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/cf016678-dab3-43d1-b7ea-5d3ad8148e97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/cf016678-dab3-43d1-b7ea-5d3ad8148e97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c1:0a:d9:ea:10:9f:52:16:86:d9:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf016678-dab3-43d1-b7ea-5d3ad8148e97
        Validity
            Not Before: Nov  5 02:00:31 2025 GMT
            Not After : Feb  3 02:00:31 2026 GMT
        Subject: CN=9906341d-c4c4-4bc9-a815-2e21047cd574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e5:a6:d9:a2:a2:d1:48:6d:61:62:3b:7f:bf:
                    e0:65:5d:27:6a:e6:5c:e5:a3:4c:f2:28:e2:fb:37:
                    d0:57:a9:cf:57:fc:eb:41:6c:00:64:34:0d:f6:8e:
                    d8:81:bf:23:0f:88:25:85:dc:46:0b:ec:45:dc:7c:
                    8f:71:6f:73:c3:cc:64:75:c7:e3:90:31:3a:a2:4c:
                    79:41:c0:b2:ce:11:4a:24:6a:48:0c:5d:3f:84:b3:
                    e6:73:ba:16:43:8b:5b:ab:e7:09:2b:0c:6f:1f:c0:
                    c5:a2:08:29:cc:96:16:95:01:2a:7b:40:1a:0a:72:
                    28:68:5b:52:cd:16:d1:a4:03:e3:18:0d:fa:34:c9:
                    e7:d4:01:06:15:c1:01:bd:88:63:f9:69:38:a3:be:
                    35:85:ce:68:98:11:3b:d8:0d:dd:51:3c:0a:d4:43:
                    1c:1f:82:e0:95:6b:0f:b8:50:75:5a:05:f3:69:b7:
                    2b:47:42:90:67:12:58:24:49:01:5d:24:67:83:5b:
                    fa:b2:48:0b:56:36:b6:97:f9:b3:a0:20:ea:61:c8:
                    34:01:86:98:e5:14:52:82:ee:f5:a0:fc:67:1f:3c:
                    10:5e:8e:10:21:17:66:cc:9c:15:18:59:c8:49:eb:
                    57:3d:fe:5c:66:f5:c1:ff:f1:01:c8:bb:00:34:fc:
                    36:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:9F:73:32:D0:AF:69:B4:B6:53:87:62:DC:D0:B4:43:94:21:E4:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/0d6c589a-daa5-32ac-b4eb-de44bdc1b5d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/cf016678-dab3-43d1-b7ea-5d3ad8148e97.crl

            X509v3 Authority Key Identifier:
                keyid:46:85:D2:50:6B:90:50:D3:17:93:6E:11:71:EA:C3:8B:99:E5:01:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.135.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:e8:ce:d5:9b:19:64:92:0f:04:e3:da:c3:58:82:16:f8:2c:
         c7:9f:1e:db:d9:c5:4e:57:a0:8d:90:c2:18:28:2b:f6:9e:6e:
         6c:38:5b:16:63:c7:cc:94:0c:a4:79:cc:be:df:76:4c:ba:19:
         7b:43:35:f4:cb:68:29:3b:f5:e9:62:75:7c:bd:ac:00:50:4e:
         f5:3b:d3:a5:e6:d1:7c:9d:63:ce:15:79:a0:95:9a:7f:aa:9c:
         49:71:64:89:52:f1:73:4a:c0:a6:73:a8:a5:ac:f0:47:d9:35:
         17:2a:dc:2f:16:30:35:27:48:74:df:7b:36:8b:05:5e:2b:30:
         c3:ea:53:02:9a:c0:3b:b7:18:6b:39:a8:c1:04:90:b4:ee:b0:
         78:75:97:65:d0:0d:29:02:3f:80:c6:54:87:b8:df:bb:69:ce:
         7a:60:8c:4b:73:e6:a5:08:0c:d0:90:2e:52:8d:9c:5b:7b:d2:
         5b:66:2b:95:f2:23:21:69:71:ab:04:81:1a:8c:c0:c3:68:bc:
         58:02:00:ca:17:52:5f:c8:1c:27:a7:19:82:20:28:5a:78:98:
         da:01:a0:73:bc:d6:d8:1d:13:54:b2:f3:68:4b:b9:5b:d1:5e:
         95:0a:3d:28:b9:15:79:ac:d1:4a:1d:36:7d:b2:dd:f6:2f:43:
         79:54:82:f7
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEvBCtnqEJ9SFobZLUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2YwMTY2NzgtZGFiMy00M2QxLWI3ZWEtNWQzYWQ4MTQ4
ZTk3MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk
OTkwNjM0MWQtYzRjNC00YmM5LWE4MTUtMmUyMTA0N2NkNTc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+Wm2aKi0UhtYWI7f7/gZV0nauZc5aNM8iji
+zfQV6nPV/zrQWwAZDQN9o7Ygb8jD4glhdxGC+xF3HyPcW9zw8xkdcfjkDE6okx5
QcCyzhFKJGpIDF0/hLPmc7oWQ4tbq+cJKwxvH8DFoggpzJYWlQEqe0AaCnIoaFtS
zRbRpAPjGA36NMnn1AEGFcEBvYhj+Wk4o741hc5omBE72A3dUTwK1EMcH4LglWsP
uFB1WgXzabcrR0KQZxJYJEkBXSRng1v6skgLVja2l/mzoCDqYcg0AYaY5RRSgu71
oPxnHzwQXo4QIRdmzJwVGFnISetXPf5cZvXB//EByLsANPw2fQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKufczLQr2m0tlOHYtzQtEOUIeSYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jZjAx
NjY3OC1kYWIzLTQzZDEtYjdlYS01ZDNhZDgxNDhlOTcvMGQ2YzU4OWEtZGFhNS0z
MmFjLWI0ZWItZGU0NGJkYzFiNWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2YwMTY2NzgtZGFiMy00M2QxLWI3
ZWEtNWQzYWQ4MTQ4ZTk3L2NmMDE2Njc4LWRhYjMtNDNkMS1iN2VhLTVkM2FkODE0
OGU5Ny5jcmwwHwYDVR0jBBgwFoAURoXSUGuQUNMXk24RcerDi5nlATYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9jZjAxNjY3OC1kYWIzLTQzZDEtYjdlYS01ZDNh
ZDgxNDhlOTcuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApYcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEANOjO1ZsZZJIPBOPaw1iCFvgsx58e29nFTlegjZDCGCgr9p5ubDhbFmPH
zJQMpHnMvt92TLoZe0M19MtoKTv16WJ1fL2sAFBO9TvTpebRfJ1jzhV5oJWaf6qc
SXFkiVLxc0rApnOopazwR9k1FyrcLxYwNSdIdN97NosFXisww+pTAprAO7cYazmo
wQSQtO6weHWXZdANKQI/gMZUh7jfu2nOemCMS3PmpQgM0JAuUo2cW3vSW2YrlfIj
IWlxqwSBGozAw2i8WAIAyhdSX8gcJ6cZgiAoWniY2gGgc7zW2B0TVLLzaEu5W9Fe
lQo9KLkVeazRSh02fbLd9i9DeVSC9w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:57:33 2025 by rpki-client