Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/878ba420-6895-3a14-bf5f-52593d2b9932.roa
File:                     878ba420-6895-3a14-bf5f-52593d2b9932.roa (raw, json)
Hash identifier:          IVeutjfEW5Yg3Y3l8imh/PV0fsQzdJ6BeuAQGl+QRuY=
Subject key identifier:   43:51:41:3C:06:24:B7:EE:B6:93:A0:D2:25:4F:05:6D:76:B3:43:2B
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F4328584B80B7596C059BF9223A282100
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/878ba420-6895-3a14-bf5f-52593d2b9932.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     2495
IP address blocks:        164.113.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:59:6c:05:9b:f9:22:3a:28:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=3847d8c4-b05e-482e-8bc9-fb6b763e9106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cd:d7:f9:d5:a2:51:cc:2d:6f:48:8d:46:0e:
                    48:af:a2:ba:2c:3f:a8:9a:dc:8a:17:a6:fa:15:b0:
                    49:93:a2:f9:23:67:c4:eb:76:ff:d0:db:98:e3:75:
                    a0:99:5d:8e:39:be:4d:1e:e5:fa:1d:d9:2a:a7:0c:
                    7b:0a:27:44:da:2c:cf:c2:38:b1:0f:62:a8:5a:58:
                    2f:4b:c6:11:ad:fb:e5:2b:4c:15:60:d0:59:66:36:
                    2d:7f:ff:4a:38:fc:21:0f:65:44:1c:8f:4c:ba:90:
                    fe:e4:b4:9d:e7:04:76:a2:db:a5:91:d4:8b:a1:7d:
                    af:50:c1:f7:89:0a:4d:4e:ca:11:7c:ab:2f:d4:cb:
                    bb:91:f8:75:94:73:d9:be:2b:9b:5e:c2:b4:cc:b4:
                    0a:c8:74:fb:72:32:c8:ca:67:c0:98:a5:ad:c0:77:
                    58:d8:f3:b5:06:fa:78:df:7f:d3:19:c7:c5:5e:42:
                    60:53:e6:29:d7:e3:ab:f5:e2:08:fb:1e:a4:73:5f:
                    61:e1:8b:bd:ee:47:80:c7:01:04:9c:a3:0a:08:92:
                    72:f5:e5:74:a1:41:44:b6:cc:be:7b:b5:32:68:90:
                    fe:66:8e:90:a9:30:7a:47:6b:81:dd:a2:a5:71:fa:
                    17:5e:67:1e:d4:3a:5f:16:dd:ae:27:4f:ec:24:cc:
                    ca:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:51:41:3C:06:24:B7:EE:B6:93:A0:D2:25:4F:05:6D:76:B3:43:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/878ba420-6895-3a14-bf5f-52593d2b9932.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.113.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:09:04:bc:a3:37:34:83:46:84:51:76:56:b2:ff:46:92:6c:
         44:49:61:a6:47:77:10:e8:55:32:93:e3:1f:bf:fe:60:0f:1f:
         db:6a:95:53:29:44:46:36:f6:22:d6:6b:1d:64:95:16:c8:f7:
         b6:99:57:4b:6b:20:1f:ea:ce:be:18:ff:c6:5b:89:87:c0:dd:
         e7:eb:0a:c3:61:2b:db:1d:5b:f2:1e:93:07:6d:08:91:aa:f6:
         e8:b1:aa:51:9b:09:d5:be:36:02:3d:b0:71:ca:0d:20:fe:b9:
         09:4e:8e:d1:b6:34:98:78:1f:e5:9f:a0:23:b5:6c:a1:07:95:
         62:6d:b8:2a:40:0c:d7:c8:63:f8:03:75:fa:e3:a7:87:fb:4f:
         77:c9:71:f9:0a:5d:c5:a9:f1:e2:4e:34:ac:a1:12:16:cf:e9:
         f0:26:0c:c4:2c:86:77:07:ab:fa:37:8f:10:7e:e9:e2:24:74:
         76:94:9e:c3:0f:c0:2f:82:f0:ca:81:43:8a:91:ae:61:d1:28:
         97:e6:ab:49:67:47:74:c6:d9:15:3b:d4:6b:19:8c:57:a5:5b:
         01:55:57:0e:b7:a4:d7:07:fa:29:f3:51:e3:8b:51:a1:2f:ab:
         27:b7:66:2b:9e:b7:19:e5:71:1d:59:6a:5d:95:54:0d:42:f6:
         33:bc:12:17
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuAt1lsBZv5IjooIQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRi
ODNkMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk
Mzg0N2Q4YzQtYjA1ZS00ODJlLThiYzktZmI2Yjc2M2U5MTA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw83X+dWiUcwtb0iNRg5Ir6K6LD+omtyKF6b6
FbBJk6L5I2fE63b/0NuY43WgmV2OOb5NHuX6Hdkqpwx7CidE2izPwjixD2KoWlgv
S8YRrfvlK0wVYNBZZjYtf/9KOPwhD2VEHI9MupD+5LSd5wR2otulkdSLoX2vUMH3
iQpNTsoRfKsv1Mu7kfh1lHPZviubXsK0zLQKyHT7cjLIymfAmKWtwHdY2PO1Bvp4
33/TGcfFXkJgU+Yp1+Or9eII+x6kc19h4Yu97keAxwEEnKMKCJJy9eV0oUFEtsy+
e7UyaJD+Zo6QqTB6R2uB3aKlcfoXXmce1DpfFt2uJ0/sJMzKxwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFENRQTwGJLfutpOg0iVPBW12s0MrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0
Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvODc4YmE0MjAtNjg5NS0z
YTE0LWJmNWYtNTI1OTNkMmI5OTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODg4NDI4NzgtMTA1MC00ZGY3LTgy
MmItZWE4ZWMyNWRiODNkLzg4ODQyODc4LTEwNTAtNGRmNy04MjJiLWVhOGVjMjVk
YjgzZC5jcmwwHwYDVR0jBBgwFoAUCvQvaSDxqtdtZzyGmgTIgB6tfZkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThl
YzI1ZGI4M2QuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApHEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAgQkEvKM3NINGhFF2VrL/RpJsRElhpkd3EOhVMpPjH7/+YA8f22qVUylE
Rjb2ItZrHWSVFsj3tplXS2sgH+rOvhj/xluJh8Dd5+sKw2Er2x1b8h6TB20Ikar2
6LGqUZsJ1b42Aj2wccoNIP65CU6O0bY0mHgf5Z+gI7VsoQeVYm24KkAM18hj+AN1
+uOnh/tPd8lx+Qpdxanx4k40rKESFs/p8CYMxCyGdwer+jePEH7p4iR0dpSeww/A
L4LwyoFDipGuYdEol+arSWdHdMbZFTvUaxmMV6VbAVVXDrek1wf6KfNR44tRoS+r
J7dmK563GeVxHVlqXZVUDUL2M7wSFw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:49:35 2025 by rpki-client