Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/43dec2fc-ae4f-380f-84ae-6aac08229b24.roa
File:                     43dec2fc-ae4f-380f-84ae-6aac08229b24.roa (raw, json)
Hash identifier:          zLYsOQzPZ0KPcgr1RcnG8DhSzt24YL+Q9L1V91cuGUM=
Subject key identifier:   7C:D7:82:AF:00:29:24:56:5C:92:E3:AE:1D:CA:4A:D0:F6:73:AB:BD
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B9B3CF2130F05F77F36026B80
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/43dec2fc-ae4f-380f-84ae-6aac08229b24.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     62044
IP address blocks:        137.83.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3c:f2:13:0f:05:f7:7f:36:02:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=cee4406c-5ef2-47c6-a31b-fbbe1d0fefb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e9:1a:09:fe:0e:ca:99:59:e3:72:95:61:73:
                    ad:a5:02:57:6d:0f:5a:dc:9f:84:9f:8d:a5:10:ec:
                    0e:98:64:a4:8b:29:be:e1:46:0a:67:67:8c:16:84:
                    f7:32:cd:0e:6f:fc:ca:ad:27:f6:07:97:ab:28:1c:
                    98:ac:29:c4:10:40:1f:48:20:6f:b9:e0:08:b9:ed:
                    b3:6f:59:c0:b0:f8:e2:44:35:13:3c:b2:b5:fa:ca:
                    ae:2e:f7:59:de:49:82:48:f7:af:48:55:d8:c2:97:
                    cb:0c:00:9a:48:94:4b:d4:c2:87:c2:57:47:87:4a:
                    2e:da:6b:05:3b:a0:8e:5c:39:80:99:0a:b6:6e:bd:
                    be:85:ae:52:96:58:97:43:ff:a2:07:60:f4:d1:84:
                    aa:8b:f8:4c:4e:3c:7f:c8:af:7f:26:ac:8a:cf:bd:
                    b5:7d:96:6a:5e:6b:2e:d9:13:41:7e:f0:ae:fe:7c:
                    df:01:51:8b:ed:6f:7c:c1:21:3a:33:e6:19:ce:fb:
                    35:24:59:61:b2:21:76:69:c6:6a:03:5c:58:89:5d:
                    54:ca:35:ae:6e:21:4b:b2:31:98:89:6a:07:bb:e0:
                    16:97:67:68:d0:f3:87:0c:cd:19:cb:df:ce:90:35:
                    1b:93:21:08:b9:e2:f9:c5:61:bf:a4:f7:da:f3:c9:
                    6b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D7:82:AF:00:29:24:56:5C:92:E3:AE:1D:CA:4A:D0:F6:73:AB:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/43dec2fc-ae4f-380f-84ae-6aac08229b24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:dc:9f:cb:3b:0a:94:a9:97:e6:f6:5d:71:e4:f4:5e:cd:75:
         7e:26:08:c9:23:41:c6:ac:6f:4f:07:d7:15:69:27:82:39:dd:
         eb:65:36:83:da:11:7b:c8:f2:47:e5:cd:34:f7:09:ac:50:23:
         bc:7d:33:d2:98:32:d8:9a:fa:b1:e0:64:e7:a7:19:35:4a:1f:
         0b:39:07:a6:13:15:b9:c4:7e:85:73:f7:37:7f:fb:c5:f9:fb:
         23:63:bb:ef:cf:80:7d:f7:f4:de:df:28:08:9d:e7:89:e7:40:
         c9:b6:39:e9:04:4b:b6:78:03:52:33:e9:b3:93:30:76:d0:97:
         0e:68:64:c9:8b:7a:6d:58:4b:4a:2d:e6:7a:3c:52:80:cd:dd:
         3b:f1:7c:35:59:ca:79:61:48:eb:1f:90:d0:8d:25:1b:3b:d6:
         7e:7a:e2:d3:10:b6:b8:a8:5c:90:8e:2e:a4:20:98:79:5a:6f:
         b0:2f:06:c9:fe:e9:67:c6:c5:6a:17:be:10:92:86:0f:f3:31:
         85:3f:ed:72:93:31:57:12:0d:01:b1:2e:ef:05:c5:59:48:c8:
         71:c0:2f:9a:9d:54:16:b8:85:82:6d:31:4c:56:29:23:01:91:
         18:a7:36:7d:35:36:c5:70:7b:b8:13:41:45:09:5f:aa:30:65:
         e4:d0:24:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPPITDwX3fzYCa4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk
Y2VlNDQwNmMtNWVmMi00N2M2LWEzMWItZmJiZTFkMGZlZmI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+kaCf4OyplZ43KVYXOtpQJXbQ9a3J+En42l
EOwOmGSkiym+4UYKZ2eMFoT3Ms0Ob/zKrSf2B5erKByYrCnEEEAfSCBvueAIue2z
b1nAsPjiRDUTPLK1+squLvdZ3kmCSPevSFXYwpfLDACaSJRL1MKHwldHh0ou2msF
O6COXDmAmQq2br2+ha5SlliXQ/+iB2D00YSqi/hMTjx/yK9/JqyKz721fZZqXmsu
2RNBfvCu/nzfAVGL7W98wSE6M+YZzvs1JFlhsiF2acZqA1xYiV1UyjWubiFLsjGY
iWoHu+AWl2do0POHDM0Zy9/OkDUbkyEIueL5xWG/pPfa88lrjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHzXgq8AKSRWXJLjrh3KStD2c6u9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNDNkZWMyZmMtYWU0Zi0z
ODBmLTg0YWUtNmFhYzA4MjI5YjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiVOGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIvcn8s7CpSpl+b2XXHk9F7NdX4mCMkjQcasb08H1xVpJ4I53etlNoPa
EXvI8kflzTT3CaxQI7x9M9KYMtia+rHgZOenGTVKHws5B6YTFbnEfoVz9zd/+8X5
+yNju+/PgH339N7fKAid54nnQMm2OekES7Z4A1Iz6bOTMHbQlw5oZMmLem1YS0ot
5no8UoDN3TvxfDVZynlhSOsfkNCNJRs71n564tMQtrioXJCOLqQgmHlab7AvBsn+
6WfGxWoXvhCShg/zMYU/7XKTMVcSDQGxLu8FxVlIyHHAL5qdVBa4hYJtMUxWKSMB
kRinNn01NsVwe7gTQUUJX6owZeTQJP8=
-----END CERTIFICATE-----
Generated at Thu Oct 23 08:20:22 2025 by rpki-client