Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb5678a9-924a-4464-90ce-3a9ac84c49b2/95eda6b1-8a1c-36f7-931c-121e6e455a33.roa
File:                     95eda6b1-8a1c-36f7-931c-121e6e455a33.roa (raw, json)
Hash identifier:          6mZtpUEH9guqCE1Mwj4Ru0+o8dGj9xQn/lxlflza+1A=
Subject key identifier:   0B:BE:C7:C2:A5:E7:7B:81:3C:41:A4:65:BE:9B:57:7B:00:28:B9:B2
Certificate issuer:       /CN=eb5678a9-924a-4464-90ce-3a9ac84c49b2
Certificate serial:       010D0C9F4328584B4BD5465E84082C25B85E8180
Authority key identifier: 8B:85:BF:40:09:BF:59:EB:0B:7B:0E:60:C0:46:31:1B:F4:6A:99:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb5678a9-924a-4464-90ce-3a9ac84c49b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb5678a9-924a-4464-90ce-3a9ac84c49b2/95eda6b1-8a1c-36f7-931c-121e6e455a33.roa
Signing time:             Wed 24 Sep 2025 02:23:03 +0000
ROA not before:           Wed 24 Sep 2025 02:23:03 +0000
ROA not after:            Tue 23 Dec 2025 03:23:03 +0000
asID:                     17384
IP address blocks:        162.254.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb5678a9-924a-4464-90ce-3a9ac84c49b2/eb5678a9-924a-4464-90ce-3a9ac84c49b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb5678a9-924a-4464-90ce-3a9ac84c49b2/eb5678a9-924a-4464-90ce-3a9ac84c49b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb5678a9-924a-4464-90ce-3a9ac84c49b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:d5:46:5e:84:08:2c:25:b8:5e:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5678a9-924a-4464-90ce-3a9ac84c49b2
        Validity
            Not Before: Sep 24 02:23:03 2025 GMT
            Not After : Dec 23 03:23:03 2025 GMT
        Subject: CN=a333458b-fc3a-4583-b90e-e1e8c4a705d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:07:12:f8:97:f5:4f:b5:89:43:8f:9a:e7:a2:
                    5d:be:c6:c8:ab:49:f6:35:89:6f:8c:db:3b:95:db:
                    74:23:ca:0f:69:f9:28:af:da:21:29:54:a7:90:0c:
                    5f:f6:da:66:3e:0d:a0:e2:84:73:c4:32:ae:b9:24:
                    bf:c7:81:e4:6a:4b:36:ee:d5:4b:f1:00:71:db:91:
                    87:e8:88:c4:e1:14:56:7f:d9:50:ff:6d:69:70:e4:
                    3c:da:9a:0d:ac:b1:03:0c:d8:4d:fa:34:02:b9:f8:
                    67:8a:1e:b8:29:87:70:6f:9f:64:f8:eb:a1:6e:b6:
                    e1:de:be:9b:5e:48:b8:15:6a:c3:a3:05:14:a8:fb:
                    ab:27:77:8f:e8:c5:66:3f:c4:b7:02:b6:49:62:9f:
                    a7:22:01:12:68:cd:ee:53:18:a3:6c:19:e6:2a:e2:
                    55:e9:46:1e:61:46:b5:1d:c9:2b:78:4e:7e:15:9c:
                    cc:96:d4:6c:53:95:83:a3:50:f4:b3:f4:56:ac:5b:
                    87:94:1a:c6:ec:bb:92:d3:56:7a:ab:dd:53:fe:53:
                    2d:ae:89:ef:ce:20:c2:dd:f9:58:b3:73:d5:f9:5a:
                    24:d9:6a:c5:1e:fb:c3:03:32:e6:ce:19:89:76:6d:
                    ad:cc:01:a3:a3:ff:0a:44:29:ca:97:b5:98:09:66:
                    30:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BE:C7:C2:A5:E7:7B:81:3C:41:A4:65:BE:9B:57:7B:00:28:B9:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb5678a9-924a-4464-90ce-3a9ac84c49b2/95eda6b1-8a1c-36f7-931c-121e6e455a33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb5678a9-924a-4464-90ce-3a9ac84c49b2/eb5678a9-924a-4464-90ce-3a9ac84c49b2.crl

            X509v3 Authority Key Identifier:
                keyid:8B:85:BF:40:09:BF:59:EB:0B:7B:0E:60:C0:46:31:1B:F4:6A:99:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/eb5678a9-924a-4464-90ce-3a9ac84c49b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.254.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:92:37:72:5b:99:44:ea:ef:df:e8:c0:2f:9a:90:31:38:35:
         89:33:e5:2d:65:8f:7b:2a:b8:db:a0:bd:a9:5b:68:0f:fa:24:
         72:c9:4b:94:34:f8:d5:60:97:f4:5f:d0:e8:e5:de:f3:9d:c0:
         57:d0:49:85:08:5d:f9:7a:2a:56:0b:df:20:46:61:90:1e:01:
         13:f2:d6:93:b6:60:90:23:3c:59:9a:9c:69:a2:a2:55:b4:09:
         ec:14:57:bd:9c:18:f2:d0:5a:52:0a:97:25:c1:5d:a2:d3:e3:
         15:29:b1:bb:e1:78:41:e4:e9:25:f0:cf:54:98:d4:12:fd:5e:
         92:b2:89:64:8a:03:cb:c9:6f:0c:7e:55:e4:c9:cc:40:25:79:
         3e:00:85:fe:46:b0:a6:5e:0c:92:23:3b:80:15:21:b6:0b:9e:
         1d:c9:89:1f:b5:cb:82:ee:ce:02:c2:ea:f0:98:df:8b:16:58:
         8a:df:cd:b5:95:eb:06:61:19:e1:ac:c6:93:76:d3:12:0b:36:
         cb:0c:c1:e4:4a:16:bf:73:ab:fc:cf:80:db:61:a6:17:05:32:
         c6:ae:1f:e9:33:47:f1:6a:d1:3e:ae:26:d5:9a:92:96:f6:35:
         88:4b:17:c5:5f:95:c7:89:f1:64:36:73:55:12:8e:5e:59:f5:
         1f:51:59:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtL1UZehAgsJbhegYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWI1Njc4YTktOTI0YS00NDY0LTkwY2UtM2E5YWM4NGM0
OWIyMB4XDTI1MDkyNDAyMjMwM1oXDTI1MTIyMzAzMjMwM1owLzEtMCsGA1UEAxMk
YTMzMzQ1OGItZmMzYS00NTgzLWI5MGUtZTFlOGM0YTcwNWQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgcS+Jf1T7WJQ4+a56JdvsbIq0n2NYlvjNs7
ldt0I8oPafkor9ohKVSnkAxf9tpmPg2g4oRzxDKuuSS/x4Hkaks27tVL8QBx25GH
6IjE4RRWf9lQ/21pcOQ82poNrLEDDNhN+jQCufhnih64KYdwb59k+Ouhbrbh3r6b
Xki4FWrDowUUqPurJ3eP6MVmP8S3ArZJYp+nIgESaM3uUxijbBnmKuJV6UYeYUa1
HckreE5+FZzMltRsU5WDo1D0s/RWrFuHlBrG7LuS01Z6q91T/lMtronvziDC3flY
s3PV+Vok2WrFHvvDAzLmzhmJdm2tzAGjo/8KRCnKl7WYCWYwYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAu+x8Kl53uBPEGkZb6bV3sAKLmyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lYjU2
NzhhOS05MjRhLTQ0NjQtOTBjZS0zYTlhYzg0YzQ5YjIvOTVlZGE2YjEtOGExYy0z
NmY3LTkzMWMtMTIxZTZlNDU1YTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZWI1Njc4YTktOTI0YS00NDY0LTkw
Y2UtM2E5YWM4NGM0OWIyL2ViNTY3OGE5LTkyNGEtNDQ2NC05MGNlLTNhOWFjODRj
NDliMi5jcmwwHwYDVR0jBBgwFoAUi4W/QAm/WesLew5gwEYxG/Rqmb4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9lYjU2NzhhOS05MjRhLTQ0NjQtOTBjZS0zYTlh
Yzg0YzQ5YjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAov7zMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGSSN3JbmUTq79/owC+akDE4NYkz5S1lj3squNugvalbaA/6JHLJS5Q0
+NVgl/Rf0Ojl3vOdwFfQSYUIXfl6KlYL3yBGYZAeARPy1pO2YJAjPFmanGmiolW0
CewUV72cGPLQWlIKlyXBXaLT4xUpsbvheEHk6SXwz1SY1BL9XpKyiWSKA8vJbwx+
VeTJzEAleT4Ahf5GsKZeDJIjO4AVIbYLnh3JiR+1y4LuzgLC6vCY34sWWIrfzbWV
6wZhGeGsxpN20xILNssMweRKFr9zq/zPgNthphcFMsauH+kzR/Fq0T6uJtWakpb2
NYhLF8VflceJ8WQ2c1USjl5Z9R9RWbI=
-----END CERTIFICATE-----
Generated at Fri Oct 10 16:06:44 2025 by rpki-client