Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/de5de0e7-d6b0-3bdb-8fba-598d34c2a6e4.roa
File:                     de5de0e7-d6b0-3bdb-8fba-598d34c2a6e4.roa (raw, json)
Hash identifier:          JCvWUgZdKqmSmsnfwtmMzofA0xOUD7KAg5SIg/bw6pY=
Subject key identifier:   A3:C5:2F:DB:A8:1F:20:85:41:CA:02:E8:03:BD:CA:78:49:9A:DC:E8
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328584B33F1A5C335D5571B118760C0
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/de5de0e7-d6b0-3bdb-8fba-598d34c2a6e4.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     237
IP address blocks:        35.16.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:a5:c3:35:d5:57:1b:11:87:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=d996d4ea-690b-4f03-990f-b019b5c0d79a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:54:56:95:df:3a:65:8f:6a:42:a8:5d:7d:eb:
                    0e:ce:2a:e3:02:6c:e7:f4:6a:3f:9e:5e:dc:de:5d:
                    1c:fb:86:4e:3f:92:ff:e6:08:5b:6e:ea:d2:f9:27:
                    d3:e9:4a:cb:c4:c9:2b:6d:f4:6f:91:dc:54:2a:93:
                    db:43:27:73:7c:58:f4:14:cb:d9:e3:eb:c1:e1:87:
                    fa:fb:c0:75:c3:5f:51:e1:86:6f:9e:50:21:86:61:
                    35:b8:0a:2c:fa:f2:6f:c7:e2:38:ca:ec:9e:e0:17:
                    da:64:23:64:30:7a:fe:7f:42:03:7d:a8:22:a9:a5:
                    27:c0:39:37:54:8f:d2:55:76:3d:b7:76:0d:77:bb:
                    87:3b:7d:4e:63:32:4a:2d:88:a1:11:ce:88:fc:23:
                    8c:02:dd:e9:c2:ce:c5:ad:87:f3:2f:07:9a:0a:6a:
                    39:64:c2:7a:6f:44:6b:a3:44:2d:5f:63:35:7b:c8:
                    66:f3:1b:17:ab:73:5e:93:a6:9e:0d:67:de:52:81:
                    db:d0:66:7f:81:ac:f4:35:a8:ea:e7:12:76:96:ca:
                    c5:72:30:29:4b:63:7a:3d:18:88:6f:67:c4:75:06:
                    a5:d8:05:b9:41:3f:d1:b8:0c:c3:5a:6c:0a:a3:17:
                    32:79:aa:40:13:0c:21:f8:d0:88:c1:ca:85:ec:cb:
                    71:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C5:2F:DB:A8:1F:20:85:41:CA:02:E8:03:BD:CA:78:49:9A:DC:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/de5de0e7-d6b0-3bdb-8fba-598d34c2a6e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.16.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:26:6e:bd:18:32:d5:e7:03:03:b8:ce:2f:8e:b3:9b:08:bb:
         42:42:0d:f5:97:00:3b:b9:c8:c4:aa:82:a4:34:ae:f2:4b:9c:
         48:45:9c:45:08:59:cc:f2:5c:93:26:45:11:a6:07:96:73:1b:
         d9:f1:fc:6a:9e:a2:a1:db:5a:d2:c0:f3:ef:de:05:f8:d1:82:
         6e:e1:10:a2:15:75:98:f9:ef:d5:8b:27:29:6f:c7:d5:66:79:
         87:a2:bc:b2:6c:42:48:8f:b7:4a:02:d4:e2:f1:69:74:24:f1:
         15:09:e6:4e:0d:e3:5a:1f:91:71:9a:83:98:5a:d8:3f:af:68:
         06:69:9f:e4:81:f8:4b:be:ce:9c:5c:d2:8c:37:cb:0c:09:b3:
         4d:dc:20:ff:3e:a5:81:f2:09:f2:1f:78:f8:3c:d1:ed:e8:52:
         20:2a:49:ee:49:9d:a0:40:41:b9:0e:e3:52:3b:93:30:43:d3:
         57:4e:3e:fd:7b:9a:dc:7e:3d:8c:9b:dc:92:88:30:03:3b:4d:
         b8:50:e8:15:3b:68:86:ec:c8:a0:49:e7:9e:5a:24:31:a4:1d:
         46:ef:06:86:fc:60:9c:d6:7c:4f:28:b0:09:ce:5f:bc:33:b6:
         dd:bf:31:04:fe:67:cc:5b:a7:53:0f:d1:41:4b:ce:00:1e:54:
         57:9a:96:f1
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEsz8aXDNdVXGxGHYMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGVkMzA1MGEtNDYwNS00MDk0LWIzMzEtYmIwZjg3NThk
ZWZlMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk
ZDk5NmQ0ZWEtNjkwYi00ZjAzLTk5MGYtYjAxOWI1YzBkNzlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1RWld86ZY9qQqhdfesOzirjAmzn9Go/nl7c
3l0c+4ZOP5L/5ghbburS+SfT6UrLxMkrbfRvkdxUKpPbQydzfFj0FMvZ4+vB4Yf6
+8B1w19R4YZvnlAhhmE1uAos+vJvx+I4yuye4BfaZCNkMHr+f0IDfagiqaUnwDk3
VI/SVXY9t3YNd7uHO31OYzJKLYihEc6I/COMAt3pws7FrYfzLweaCmo5ZMJ6b0Rr
o0QtX2M1e8hm8xsXq3Nek6aeDWfeUoHb0GZ/gaz0Najq5xJ2lsrFcjApS2N6PRiI
b2fEdQal2AW5QT/RuAzDWmwKoxcyeapAEwwh+NCIwcqF7MtxzwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKPFL9uoHyCFQcoC6AO9ynhJmtzoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQz
MDUwYS00NjA1LTQwOTQtYjMzMS1iYjBmODc1OGRlZmUvZGU1ZGUwZTctZDZiMC0z
YmRiLThmYmEtNTk4ZDM0YzJhNmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkMzA1MGEtNDYwNS00MDk0LWIz
MzEtYmIwZjg3NThkZWZlLzhlZDMwNTBhLTQ2MDUtNDA5NC1iMzMxLWJiMGY4NzU4
ZGVmZS5jcmwwHwYDVR0jBBgwFoAUcZ91nrny/TeyT/mL72NxjsBOTA8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWQzMDUwYS00NjA1LTQwOTQtYjMzMS1iYjBm
ODc1OGRlZmUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAIxAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAlSZuvRgy1ecDA7jOL46zmwi7QkIN9ZcAO7nIxKqCpDSu8kucSEWcRQhZ
zPJckyZFEaYHlnMb2fH8ap6iodta0sDz794F+NGCbuEQohV1mPnv1YsnKW/H1WZ5
h6K8smxCSI+3SgLU4vFpdCTxFQnmTg3jWh+RcZqDmFrYP69oBmmf5IH4S77OnFzS
jDfLDAmzTdwg/z6lgfIJ8h94+DzR7ehSICpJ7kmdoEBBuQ7jUjuTMEPTV04+/Xua
3H49jJvckogwAztNuFDoFTtohuzIoEnnnlokMaQdRu8GhvxgnNZ8TyiwCc5fvDO2
3b8xBP5nzFunUw/RQUvOAB5UV5qW8Q==
-----END CERTIFICATE-----
Generated at Thu Oct 9 20:10:49 2025 by rpki-client