Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/10e86cf9-f8b5-3b6b-aa25-cdc526774664.roa
File:                     10e86cf9-f8b5-3b6b-aa25-cdc526774664.roa (raw, json)
Hash identifier:          yz8LbowMVLfHElqnTkU5mCCkiPVNOTNwODu8tVSQo1U=
Subject key identifier:   B6:4C:8B:6F:9B:CF:98:05:B4:D7:EA:EB:2A:62:1C:1E:69:4B:3F:03
Certificate issuer:       /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
Certificate serial:       010D0C9F4328584B4D11D9FFAA703917C89B6B10
Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/10e86cf9-f8b5-3b6b-aa25-cdc526774664.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     399575
IP address blocks:        206.204.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:d9:ff:aa:70:39:17:c8:9b:6b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=d1664952-f029-4a26-a1eb-5078c5065dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:04:41:47:b7:55:85:c6:88:d0:ba:df:d8:f1:
                    6c:95:6b:df:8d:40:2a:e0:ef:2f:fd:f9:b7:2b:77:
                    0a:c5:0c:1e:94:d9:a0:5a:b3:49:b2:92:fc:a0:68:
                    d1:95:b6:6a:a3:44:65:98:63:1a:a6:46:b3:92:70:
                    f6:d1:23:3b:3a:af:29:9d:66:ca:8f:03:fd:3d:0f:
                    e2:00:41:d1:30:88:28:de:c0:29:22:2a:5e:d4:bd:
                    27:e0:a7:25:5f:ee:a7:12:e9:01:f7:ab:6d:45:5c:
                    11:6a:87:24:a9:59:e1:41:28:19:b7:96:be:69:33:
                    59:61:0f:38:89:9c:8b:7e:1a:03:f0:94:ad:3a:be:
                    c8:82:38:c5:5b:d7:9a:8b:a7:b1:6e:5d:11:1d:96:
                    54:e8:7b:49:5d:48:26:f0:d3:e8:d0:23:9f:7a:d0:
                    85:4d:47:13:43:34:05:9d:b6:88:61:e6:25:fb:d8:
                    92:0f:0b:c7:cb:32:99:01:1c:97:52:55:6f:1b:d9:
                    40:35:02:0b:6b:f9:39:39:f9:3f:d9:16:49:26:ea:
                    3e:40:5f:f6:e8:ba:99:18:70:c9:7d:1d:e0:b4:90:
                    9f:39:6a:50:12:fd:8d:4a:3e:2f:35:1d:51:2b:52:
                    0d:57:74:0d:a0:99:87:f8:6c:7f:f2:eb:ff:98:3d:
                    85:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:4C:8B:6F:9B:CF:98:05:B4:D7:EA:EB:2A:62:1C:1E:69:4B:3F:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/10e86cf9-f8b5-3b6b-aa25-cdc526774664.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl

            X509v3 Authority Key Identifier:
                keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.204.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:58:95:82:34:58:9f:5e:a7:c0:76:5e:f2:e2:52:08:8f:df:
         11:60:4c:ab:ad:ab:14:67:33:eb:8c:e7:3b:34:6a:b8:ad:d0:
         eb:ac:0b:5e:39:ff:45:22:9b:89:cb:4e:2e:1a:c2:dc:60:8e:
         ed:5b:5d:81:bb:69:47:42:0d:50:2f:8e:0e:ae:5a:8b:97:ce:
         7f:df:60:ca:cf:ae:fa:51:6b:05:0d:ce:42:aa:a0:b3:35:54:
         4f:dc:4d:87:b1:42:76:ca:a0:7a:e5:90:95:c2:f9:c5:5c:24:
         3f:cd:6b:be:01:5f:da:26:af:8f:42:45:fc:8e:cf:97:dd:26:
         ea:7d:01:fc:77:79:63:dd:3b:f9:bf:69:3e:6c:82:84:1d:3a:
         cf:97:47:f4:bc:c0:e9:85:b5:d1:b2:8e:43:73:7b:40:8f:88:
         1b:74:e5:46:69:69:10:f7:fe:54:09:d5:f0:fc:94:43:4a:84:
         bd:ec:c0:b4:8c:c2:72:d8:f9:f6:92:ac:2a:42:f5:8b:1d:d6:
         f8:60:a6:1b:30:42:75:3e:46:a5:8a:09:00:2c:6a:70:6c:5e:
         d5:93:89:68:8f:e6:a1:57:ac:ba:d5:c5:80:da:68:98:d9:3a:
         7d:11:9b:a7:f3:fb:16:b7:5c:e0:cf:ae:4d:bf:b5:5b:b4:38:
         79:2f:f8:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEdn/qnA5F8ibaxAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjVmODdmYzMtZmM3OS00ZGI5LTk1YmMtYjJkODRjNGNm
OGNhMB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk
ZDE2NjQ5NTItZjAyOS00YTI2LWExZWItNTA3OGM1MDY1ZGQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApARBR7dVhcaI0Lrf2PFslWvfjUAq4O8v/fm3
K3cKxQwelNmgWrNJspL8oGjRlbZqo0RlmGMapkazknD20SM7Oq8pnWbKjwP9PQ/i
AEHRMIgo3sApIipe1L0n4KclX+6nEukB96ttRVwRaockqVnhQSgZt5a+aTNZYQ84
iZyLfhoD8JStOr7IgjjFW9eai6exbl0RHZZU6HtJXUgm8NPo0COfetCFTUcTQzQF
nbaIYeYl+9iSDwvHyzKZARyXUlVvG9lANQILa/k5Ofk/2RZJJuo+QF/26LqZGHDJ
fR3gtJCfOWpQEv2NSj4vNR1RK1INV3QNoJmH+Gx/8uv/mD2FlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLZMi2+bz5gFtNfq6ypiHB5pSz8DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82NWY4
N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4NGM0Y2Y4Y2EvMTBlODZjZjktZjhiNS0z
YjZiLWFhMjUtY2RjNTI2Nzc0NjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjVmODdmYzMtZmM3OS00ZGI5LTk1
YmMtYjJkODRjNGNmOGNhLzY1Zjg3ZmMzLWZjNzktNGRiOS05NWJjLWIyZDg0YzRj
ZjhjYS5jcmwwHwYDVR0jBBgwFoAUu9W7tLEyrQwY0eYBEwMMwU00uMIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS82NWY4N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4
NGM0Y2Y4Y2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzszqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF1YlYI0WJ9ep8B2XvLiUgiP3xFgTKutqxRnM+uM5zs0arit0OusC145
/0Uim4nLTi4awtxgju1bXYG7aUdCDVAvjg6uWouXzn/fYMrPrvpRawUNzkKqoLM1
VE/cTYexQnbKoHrlkJXC+cVcJD/Na74BX9omr49CRfyOz5fdJup9Afx3eWPdO/m/
aT5sgoQdOs+XR/S8wOmFtdGyjkNze0CPiBt05UZpaRD3/lQJ1fD8lENKhL3swLSM
wnLY+faSrCpC9Ysd1vhgphswQnU+RqWKCQAsanBsXtWTiWiP5qFXrLrVxYDaaJjZ
On0Rm6fz+xa3XODPrk2/tVu0OHkv+Pc=
-----END CERTIFICATE-----
Generated at Fri Oct 10 21:06:13 2025 by rpki-client