Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c50e8dd8-ad1c-330e-a95f-3ecca8f3ed94.roa
File:                     c50e8dd8-ad1c-330e-a95f-3ecca8f3ed94.roa (raw, json)
Hash identifier:          z2Rox5NqzbTqTQW6W/f5NGbuw3L6RHPa8MTkLSYhFRY=
Subject key identifier:   8B:57:C9:3C:7B:2B:64:75:C9:93:C7:61:C1:93:D6:7C:13:89:BE:52
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D83E779C433A6F2B49C80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c50e8dd8-ad1c-330e-a95f-3ecca8f3ed94.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     3456
IP address blocks:        165.237.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:83:e7:79:c4:33:a6:f2:b4:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=afd4b923-fa73-4b7a-ab38-bbd7bfcae9e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ae:ce:38:fd:5e:36:7f:24:52:a8:d4:62:30:
                    50:c0:5a:b9:8e:04:e7:57:ea:23:d6:68:dd:5a:7d:
                    17:b6:f5:b6:13:68:0a:4b:ff:5e:2f:31:01:e7:d4:
                    5b:f8:fc:99:fe:a1:e6:6f:a2:e5:cb:b1:f7:fe:2c:
                    ad:9e:e9:bd:9c:0f:c1:47:97:e6:ed:4b:a4:11:42:
                    9f:eb:86:7a:4d:33:ee:f4:e7:d9:22:84:cc:69:fb:
                    91:c1:58:6b:d5:3a:d3:c0:6a:2f:9d:f8:7c:a8:dd:
                    86:e4:5e:8b:02:a5:f8:24:ee:5a:0b:19:52:4d:b9:
                    ec:3b:13:f9:8f:31:13:9e:f4:2e:5b:c6:9d:55:50:
                    a3:51:cd:15:27:e9:ba:36:8d:69:0c:a3:81:16:40:
                    70:70:f7:dd:55:21:91:77:c3:f1:32:75:c4:cb:7e:
                    f7:ac:2a:6c:cc:b8:b4:8a:83:4f:18:60:f3:7a:47:
                    1d:e1:75:0b:d2:84:61:35:16:7a:cb:cc:1e:63:11:
                    7c:1a:58:28:21:7c:e6:a6:66:1a:18:82:e3:13:60:
                    3c:20:bf:f8:4e:6b:e8:e4:4d:77:8d:9e:b7:ca:99:
                    6a:d8:f5:f4:77:0c:c1:b8:d2:7a:d7:b8:bd:68:9b:
                    ed:03:da:6f:50:fc:52:0b:a5:c2:37:ae:45:65:ba:
                    f4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:57:C9:3C:7B:2B:64:75:C9:93:C7:61:C1:93:D6:7C:13:89:BE:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c50e8dd8-ad1c-330e-a95f-3ecca8f3ed94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.237.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:3a:42:0f:a0:44:b0:78:d5:07:d0:3a:41:5a:1d:da:ab:b9:
         c3:38:7c:84:40:27:5d:3e:84:bc:87:cb:5b:b0:ed:02:16:ce:
         b5:e6:dc:b2:01:34:de:17:33:f9:33:75:a1:1f:e5:bc:a6:c9:
         58:ca:36:d1:5f:67:3f:25:81:46:c5:b1:b8:3f:c5:34:b6:c6:
         6b:28:00:15:44:ea:0f:54:69:18:72:97:ef:c0:29:2c:dd:b2:
         01:9a:7b:8f:6c:f2:f0:0f:0a:8d:cf:6d:2a:3e:d8:c0:95:f8:
         f0:1d:4e:b9:81:d0:25:a0:f6:8f:e6:26:18:f2:29:ed:4a:13:
         ee:e4:e9:a8:e9:7f:a8:a9:4f:0c:2e:97:61:23:1c:75:d8:20:
         0d:64:97:a4:07:45:c7:e3:e7:3f:76:ae:3f:67:72:09:1c:ff:
         8e:9a:4c:ab:db:ac:a5:b6:1f:a0:ba:40:6f:b6:9d:ce:0b:07:
         ea:ea:bb:ad:94:36:56:bd:a6:5b:c7:6f:3f:02:d4:ee:10:80:
         70:e7:1c:9c:55:4c:2e:d5:50:5c:c6:7d:58:ab:06:0c:62:40:
         04:c9:11:0b:e4:e3:2f:d6:2f:12:01:4c:e9:3a:1d:5e:54:0e:
         1f:6a:13:46:02:be:7a:40:2a:41:6c:84:4f:8a:91:12:a6:60:
         76:a8:3c:16
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuCHYPnecQzpvK0nIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
YWZkNGI5MjMtZmE3My00YjdhLWFiMzgtYmJkN2JmY2FlOWU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr67OOP1eNn8kUqjUYjBQwFq5jgTnV+oj1mjd
Wn0XtvW2E2gKS/9eLzEB59Rb+PyZ/qHmb6Lly7H3/iytnum9nA/BR5fm7UukEUKf
64Z6TTPu9OfZIoTMafuRwVhr1TrTwGovnfh8qN2G5F6LAqX4JO5aCxlSTbnsOxP5
jzETnvQuW8adVVCjUc0VJ+m6No1pDKOBFkBwcPfdVSGRd8PxMnXEy373rCpszLi0
ioNPGGDzekcd4XUL0oRhNRZ6y8weYxF8GlgoIXzmpmYaGILjE2A8IL/4Tmvo5E13
jZ63yplq2PX0dwzBuNJ617i9aJvtA9pvUPxSC6XCN65FZbr0oQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFItXyTx7K2R1yZPHYcGT1nwTib5SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYzUwZThkZDgtYWQxYy0z
MzBlLWE5NWYtM2VjY2E4ZjNlZDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApe0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAWTpCD6BEsHjVB9A6QVod2qu5wzh8hEAnXT6EvIfLW7DtAhbOtebcsgE0
3hcz+TN1oR/lvKbJWMo20V9nPyWBRsWxuD/FNLbGaygAFUTqD1RpGHKX78ApLN2y
AZp7j2zy8A8Kjc9tKj7YwJX48B1OuYHQJaD2j+YmGPIp7UoT7uTpqOl/qKlPDC6X
YSMcddggDWSXpAdFx+PnP3auP2dyCRz/jppMq9uspbYfoLpAb7adzgsH6uq7rZQ2
Vr2mW8dvPwLU7hCAcOccnFVMLtVQXMZ9WKsGDGJABMkRC+TjL9YvEgFM6TodXlQO
H2oTRgK+ekAqQWyET4qREqZgdqg8Fg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:22:29 2025 by rpki-client