Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d3e143da-c721-3da9-8123-92a7febad310.roa
File:                     d3e143da-c721-3da9-8123-92a7febad310.roa (raw, json)
Hash identifier:          8TzO2s9mWL4sIxgzxmXp5ByrNUhUL3WphNDqSD5MhPw=
Subject key identifier:   BE:48:88:9B:23:59:73:DA:52:14:DF:1B:65:56:CA:46:5D:C4:E0:D2
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584AD9365CC7492A7DB016AD8C00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d3e143da-c721-3da9-8123-92a7febad310.roa
Signing time:             Thu 14 Aug 2025 01:00:33 +0000
ROA not before:           Thu 14 Aug 2025 01:00:33 +0000
ROA not after:            Wed 12 Nov 2025 02:00:33 +0000
asID:                     20940
IP address blocks:        165.254.234.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d9:36:5c:c7:49:2a:7d:b0:16:ad:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 14 01:00:33 2025 GMT
            Not After : Nov 12 02:00:33 2025 GMT
        Subject: CN=61759b91-29bf-4d86-9873-986c000b4db4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d4:cb:a4:d7:92:17:83:8b:d7:cb:4c:37:c9:
                    6c:68:88:72:8c:28:37:40:86:25:d3:40:d3:69:41:
                    ff:92:87:32:22:44:82:3a:24:2e:94:9b:c4:e4:e0:
                    df:de:b8:fe:dd:04:cc:54:c5:18:0e:9c:a7:80:79:
                    f3:3b:1d:b4:97:c1:d0:8b:41:dc:7c:5f:0b:a3:6f:
                    92:20:15:37:ce:5b:c0:b1:c6:da:23:08:27:e8:bd:
                    1f:cf:a0:58:4b:59:ba:1e:cb:66:bc:f9:e9:2a:44:
                    75:c9:3e:b3:0e:be:66:83:f9:08:d9:04:83:8d:e6:
                    0f:85:95:ca:97:c1:da:d6:ac:fa:1e:74:5b:53:9f:
                    ea:35:a9:73:ee:7a:75:db:56:eb:be:51:e2:e4:83:
                    6c:78:28:4e:42:07:10:2d:53:1e:ec:7a:11:89:a4:
                    d7:92:1a:f4:ea:16:bc:83:f3:52:1b:a8:e3:96:c4:
                    dd:b0:7f:91:f7:7b:77:f2:23:95:ef:4e:9a:b1:d0:
                    ac:c3:fe:67:48:58:74:9d:b5:7a:09:cb:22:25:56:
                    1a:92:d5:a1:fb:8e:f8:65:19:f1:9d:ea:0a:89:0d:
                    76:a7:30:03:92:7e:0e:47:ec:ae:96:e0:a7:b1:b6:
                    e5:eb:a7:1d:2e:44:88:ba:72:77:ce:10:d0:b5:39:
                    0a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:48:88:9B:23:59:73:DA:52:14:DF:1B:65:56:CA:46:5D:C4:E0:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d3e143da-c721-3da9-8123-92a7febad310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:21:6f:1b:1b:66:f5:c0:70:b9:76:70:0c:26:f7:6a:4e:61:
         a8:12:a7:66:bc:11:1f:1b:12:90:a1:17:96:5a:cb:9e:2c:40:
         c6:5f:91:2c:d6:f4:6c:cd:b5:eb:65:84:af:ca:a3:10:76:13:
         a0:3d:70:8a:fb:51:38:06:0a:11:03:fc:28:50:85:46:b8:82:
         26:df:0a:5f:d2:3a:6b:9a:c5:48:2b:74:91:fb:d8:3d:0a:65:
         66:c7:bb:15:d9:24:02:f9:3f:aa:ca:a0:b9:14:18:db:4f:6b:
         c8:4e:dc:da:f2:91:6b:2a:c1:46:df:07:88:91:b3:ca:69:5e:
         54:e8:68:82:42:a9:7e:ac:e1:a0:f1:30:e6:01:b5:21:88:fc:
         b1:4f:ad:c1:28:82:3c:a5:c8:1f:2d:16:14:51:e5:b3:c1:c9:
         15:b3:40:d1:d6:89:89:14:f3:ed:5b:b7:90:05:3b:97:26:f7:
         8e:9f:f4:c7:74:62:f0:c7:5c:7b:93:ca:da:a2:f8:f3:60:26:
         65:da:5c:47:c6:80:78:94:e9:78:e7:8c:02:99:54:0e:ac:ea:
         48:2e:87:38:47:73:02:46:bf:a3:33:da:b8:8e:fb:e1:ee:79:
         ee:dc:11:e2:13:b1:e7:d6:b2:a5:76:21:3a:7a:5e:3c:23:a8:
         6e:fa:b5:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZNlzHSSp9sBatjAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk
NjE3NTliOTEtMjliZi00ZDg2LTk4NzMtOTg2YzAwMGI0ZGI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9TLpNeSF4OL18tMN8lsaIhyjCg3QIYl00DT
aUH/kocyIkSCOiQulJvE5ODf3rj+3QTMVMUYDpyngHnzOx20l8HQi0HcfF8Lo2+S
IBU3zlvAscbaIwgn6L0fz6BYS1m6HstmvPnpKkR1yT6zDr5mg/kI2QSDjeYPhZXK
l8Ha1qz6HnRbU5/qNalz7np121brvlHi5INseChOQgcQLVMe7HoRiaTXkhr06ha8
g/NSG6jjlsTdsH+R93t38iOV706asdCsw/5nSFh0nbV6CcsiJVYaktWh+474ZRnx
neoKiQ12pzADkn4OR+yuluCnsbbl66cdLkSIunJ3zhDQtTkKOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL5IiJsjWXPaUhTfG2VWykZdxODSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZDNlMTQzZGEtYzcyMS0z
ZGE5LTgxMjMtOTJhN2ZlYmFkMzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpf7qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB8hbxsbZvXAcLl2cAwm92pOYagSp2a8ER8bEpChF5Zay54sQMZfkSzW
9GzNtetlhK/KoxB2E6A9cIr7UTgGChED/ChQhUa4gibfCl/SOmuaxUgrdJH72D0K
ZWbHuxXZJAL5P6rKoLkUGNtPa8hO3NrykWsqwUbfB4iRs8ppXlToaIJCqX6s4aDx
MOYBtSGI/LFPrcEogjylyB8tFhRR5bPByRWzQNHWiYkU8+1bt5AFO5cm946f9Md0
YvDHXHuTytqi+PNgJmXaXEfGgHiU6XjnjAKZVA6s6kguhzhHcwJGv6Mz2riO++Hu
ee7cEeITsefWsqV2ITp6XjwjqG76tSw=
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:33:32 2025 by rpki-client