Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bb87c9ec-1d9a-3eeb-987c-cfb40413a00d.roa
File:                     bb87c9ec-1d9a-3eeb-987c-cfb40413a00d.roa (raw, json)
Hash identifier:          C3H1ezpq4f3OWTI98P/ZRbKv6n3OkwTDBN5DNrR/778=
Subject key identifier:   DD:68:02:40:65:82:3A:71:A4:CD:A1:01:CC:46:CD:89:63:F2:54:77
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B9B3CFB2FB38CFA9D6EF51680
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bb87c9ec-1d9a-3eeb-987c-cfb40413a00d.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     62044
IP address blocks:        165.225.198.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3c:fb:2f:b3:8c:fa:9d:6e:f5:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=892e4e50-2b97-4e12-a4ec-e77cf78e6f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:20:88:ad:a5:86:dd:f6:5c:6c:ac:45:1f:46:
                    90:2b:e2:da:4e:e1:94:52:8c:3a:f7:04:4d:59:a0:
                    22:25:bc:07:ee:d9:73:9d:b5:e8:21:8d:5b:2d:b2:
                    54:05:d3:3e:99:b1:46:5f:e5:61:75:2f:80:c0:82:
                    0a:d1:dc:9a:a4:07:be:0d:a8:ed:a5:5a:83:13:d8:
                    27:76:b1:9b:11:75:10:ca:17:2a:45:c1:1e:a3:a3:
                    d1:23:15:f1:96:51:21:c6:37:27:20:42:f8:de:86:
                    51:44:1e:d2:25:32:74:2d:09:f0:c8:83:98:2f:a2:
                    e4:08:a4:99:a8:4a:0c:fe:8c:80:d2:61:32:0c:66:
                    54:93:cd:80:12:cc:b5:58:30:d9:d7:84:e5:11:a3:
                    e2:c4:87:34:8d:f7:60:c6:c5:dd:b2:a5:37:d0:49:
                    a2:05:37:0c:24:db:48:e4:5e:b5:bb:b4:37:47:cd:
                    e6:e3:59:a2:fd:91:7b:73:f0:6e:4d:af:71:2c:ae:
                    a4:a7:67:c4:22:48:35:b3:b6:de:f3:72:9c:c9:fe:
                    79:b8:ec:fd:ef:ca:b1:a9:90:bf:6b:51:00:5b:de:
                    45:da:ee:d4:63:29:79:3d:97:1c:63:64:56:38:18:
                    e3:85:58:ce:5c:23:0a:67:62:fb:ab:dc:ef:a2:e8:
                    e2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:68:02:40:65:82:3A:71:A4:CD:A1:01:CC:46:CD:89:63:F2:54:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bb87c9ec-1d9a-3eeb-987c-cfb40413a00d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:91:23:a1:f9:d9:fb:94:ac:51:e1:3a:5c:56:37:c2:e3:c6:
         cb:cd:f3:47:79:cf:79:00:2d:b6:99:9f:ab:1c:19:57:05:78:
         30:19:32:f6:e8:92:50:da:63:7a:7c:81:a6:63:5b:7a:e1:20:
         c3:01:ed:5f:cc:14:5a:18:e5:da:a8:b2:0c:ff:05:b5:d1:39:
         50:36:19:09:79:f6:0a:4b:72:d8:e2:18:2e:da:f3:30:09:1e:
         30:e7:57:84:5d:f5:31:94:e5:a8:1a:4d:7d:bf:9e:15:c7:4e:
         df:0f:38:f9:2c:07:3e:1b:85:10:5c:b0:a7:4f:60:0f:19:e8:
         0e:1b:ef:3e:e9:ed:bc:77:b4:14:4e:35:41:02:8c:03:81:57:
         98:64:1c:b8:eb:7e:70:c7:fb:d6:f5:76:34:e8:25:46:4e:10:
         84:35:e2:42:4e:d4:12:5a:e5:1a:b2:08:8b:09:c2:f2:eb:33:
         2c:8f:3b:73:11:a2:8f:df:e5:5a:58:8d:c6:a4:e4:09:ad:a5:
         3f:0d:8b:9f:df:b1:bf:71:dc:9d:0f:1a:f3:dc:03:27:b4:ca:
         9b:01:67:7d:3e:c0:dd:66:0b:7d:bd:20:e6:db:ee:b1:29:2c:
         8e:9d:55:09:6c:1f:1d:37:35:bf:b6:d3:3b:af:e2:00:e9:e9:
         77:aa:ef:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPPsvs4z6nW71FoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk
ODkyZTRlNTAtMmI5Ny00ZTEyLWE0ZWMtZTc3Y2Y3OGU2ZjQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSCIraWG3fZcbKxFH0aQK+LaTuGUUow69wRN
WaAiJbwH7tlznbXoIY1bLbJUBdM+mbFGX+VhdS+AwIIK0dyapAe+DajtpVqDE9gn
drGbEXUQyhcqRcEeo6PRIxXxllEhxjcnIEL43oZRRB7SJTJ0LQnwyIOYL6LkCKSZ
qEoM/oyA0mEyDGZUk82AEsy1WDDZ14TlEaPixIc0jfdgxsXdsqU30EmiBTcMJNtI
5F61u7Q3R83m41mi/ZF7c/BuTa9xLK6kp2fEIkg1s7be83Kcyf55uOz978qxqZC/
a1EAW95F2u7UYyl5PZccY2RWOBjjhVjOXCMKZ2L7q9zvoujitQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN1oAkBlgjpxpM2hAcxGzYlj8lR3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYmI4N2M5ZWMtMWQ5YS0z
ZWViLTk4N2MtY2ZiNDA0MTNhMDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpeHGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJmRI6H52fuUrFHhOlxWN8LjxsvN80d5z3kALbaZn6scGVcFeDAZMvbo
klDaY3p8gaZjW3rhIMMB7V/MFFoY5dqosgz/BbXROVA2GQl59gpLctjiGC7a8zAJ
HjDnV4Rd9TGU5agaTX2/nhXHTt8POPksBz4bhRBcsKdPYA8Z6A4b7z7p7bx3tBRO
NUECjAOBV5hkHLjrfnDH+9b1djToJUZOEIQ14kJO1BJa5RqyCIsJwvLrMyyPO3MR
oo/f5VpYjcak5AmtpT8Ni5/fsb9x3J0PGvPcAye0ypsBZ30+wN1mC329IObb7rEp
LI6dVQlsHx03Nb+20zuv4gDp6Xeq76g=
-----END CERTIFICATE-----
Generated at Thu Oct 23 08:15:52 2025 by rpki-client