Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/595f341e-2493-39ac-b9ff-5ebca519d4a2.roa
File:                     595f341e-2493-39ac-b9ff-5ebca519d4a2.roa (raw, json)
Hash identifier:          Bk1CJ7Vb0fvG9BrIEdkkJPlUPoHY04sA41ZHqfZeVCQ=
Subject key identifier:   05:16:69:D7:DF:39:F7:A5:B3:FB:BD:A6:29:2C:2D:91:C5:2D:84:60
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584B41E7198DA6DBA801220C7B40
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/595f341e-2493-39ac-b9ff-5ebca519d4a2.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     13768
IP address blocks:        65.39.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:19:8d:a6:db:a8:01:22:0c:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=2bc82fa7-7648-4f3f-ad8d-3c3ccdad5054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:34:a2:5a:6d:2a:e8:02:57:4f:50:67:09:fc:
                    fd:90:e8:3b:d8:74:18:bf:d8:f4:25:7a:6f:b2:85:
                    9f:83:7b:fc:d5:b5:36:83:2a:11:a2:5a:17:41:28:
                    3d:60:4b:42:8d:c5:6a:b5:dc:44:d5:86:02:de:07:
                    f2:d2:44:76:59:0b:97:c4:05:63:db:24:a4:06:38:
                    8e:83:5f:30:71:2d:19:fa:b1:c3:5f:a5:be:17:e7:
                    d0:d6:78:6a:00:30:bf:a3:22:c5:16:70:7f:48:0d:
                    d7:5b:ee:4f:e4:18:14:40:ce:01:3b:ee:3a:09:44:
                    0c:af:bb:de:58:db:1c:25:3e:dc:19:24:bc:3b:7d:
                    ec:86:45:8f:64:8c:c0:b3:3a:57:dc:4c:d8:1e:74:
                    ee:51:5a:23:7c:7f:89:3f:f5:c2:c7:9a:8d:30:51:
                    b6:7f:ea:7a:c9:c0:fd:d8:1c:91:87:d7:7a:b7:ca:
                    55:5a:35:e2:27:af:60:85:5a:d7:6c:ed:24:95:78:
                    0f:32:af:94:9d:b7:93:3e:20:ff:31:6b:e9:f0:9a:
                    d5:85:d8:1a:9e:36:d6:dd:b5:d9:93:9f:43:eb:60:
                    17:d8:f4:a3:3a:0d:c8:0a:f2:f3:8c:8b:bb:12:0a:
                    70:1a:bb:51:d4:43:93:e0:f2:d1:49:cf:ff:f7:93:
                    80:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:16:69:D7:DF:39:F7:A5:B3:FB:BD:A6:29:2C:2D:91:C5:2D:84:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/595f341e-2493-39ac-b9ff-5ebca519d4a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.39.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:19:65:20:aa:89:4b:1d:84:73:61:74:b6:8f:9e:9e:6e:6d:
         6b:f1:da:e5:ae:01:b8:12:41:dd:01:e2:e5:0a:5a:2c:cd:1c:
         7a:f9:31:75:cd:b1:6d:0d:fb:fd:0b:04:70:7d:42:91:dd:4e:
         6e:0e:42:5e:b6:24:e5:1a:7e:dc:eb:0f:3d:63:d9:e0:87:21:
         e0:f7:85:19:25:a8:a4:ac:ae:07:c7:cc:40:c8:e6:d3:5c:fe:
         16:9a:4c:02:8c:a8:fe:0d:ad:24:7c:8b:07:6f:f3:d6:5c:75:
         c6:8d:16:07:5c:62:6c:be:90:0e:b7:e8:fd:3b:75:5b:9e:a7:
         22:e3:94:f0:ea:84:d6:af:94:40:15:65:b1:22:e2:d1:b0:49:
         98:4a:de:65:76:09:6e:b5:ec:5a:b1:cc:ab:39:6a:0c:88:1d:
         02:0a:07:73:14:cd:10:49:fa:c5:b8:73:e6:28:48:d1:c9:95:
         93:3b:e6:02:b5:20:0d:78:36:72:2c:03:8d:aa:43:0a:d1:91:
         9a:07:0b:ce:f3:8d:08:3b:b9:5d:81:c8:45:32:6c:f8:ee:38:
         09:56:27:fb:b8:2d:b9:a8:c6:d8:61:9a:52:86:2a:30:14:69:
         cb:5f:0b:53:3c:dc:68:91:44:47:fc:73:38:ea:42:7b:7e:30:
         75:9a:fb:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5xmNptuoASIMe0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk
YjEwMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk
MmJjODJmYTctNzY0OC00ZjNmLWFkOGQtM2MzY2NkYWQ1MDU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTSiWm0q6AJXT1BnCfz9kOg72HQYv9j0JXpv
soWfg3v81bU2gyoRoloXQSg9YEtCjcVqtdxE1YYC3gfy0kR2WQuXxAVj2ySkBjiO
g18wcS0Z+rHDX6W+F+fQ1nhqADC/oyLFFnB/SA3XW+5P5BgUQM4BO+46CUQMr7ve
WNscJT7cGSS8O33shkWPZIzAszpX3EzYHnTuUVojfH+JP/XCx5qNMFG2f+p6ycD9
2ByRh9d6t8pVWjXiJ69ghVrXbO0klXgPMq+UnbeTPiD/MWvp8JrVhdganjbW3bXZ
k59D62AX2PSjOg3ICvLzjIu7EgpwGrtR1EOT4PLRSc//95OARwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAUWadffOfels/u9piksLZHFLYRgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3
OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvNTk1ZjM0MWUtMjQ5My0z
OWFjLWI5ZmYtNWViY2E1MTlkNGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0
YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1
ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl
NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQSfEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHAZZSCqiUsdhHNhdLaPnp5ubWvx2uWuAbgSQd0B4uUKWizNHHr5MXXN
sW0N+/0LBHB9QpHdTm4OQl62JOUaftzrDz1j2eCHIeD3hRklqKSsrgfHzEDI5tNc
/haaTAKMqP4NrSR8iwdv89ZcdcaNFgdcYmy+kA636P07dVuepyLjlPDqhNavlEAV
ZbEi4tGwSZhK3mV2CW617FqxzKs5agyIHQIKB3MUzRBJ+sW4c+YoSNHJlZM75gK1
IA14NnIsA42qQwrRkZoHC87zjQg7uV2ByEUybPjuOAlWJ/u4LbmoxthhmlKGKjAU
actfC1M83GiRREf8czjqQnt+MHWa++g=
-----END CERTIFICATE-----
Generated at Sat Oct 11 08:38:07 2025 by rpki-client