Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/dc804f16-e6f1-35b9-97e0-3b11476058a3.roa
File:                     dc804f16-e6f1-35b9-97e0-3b11476058a3.roa (raw, json)
Hash identifier:          JgzojCtoyEoqYAWYc95VqfyT6nc4i2O/9TuqwbG5338=
Subject key identifier:   C4:87:5D:03:67:AA:3B:6C:57:AF:A0:A4:44:48:77:20:3A:A5:2D:91
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B9B3CF709BD8DAA713E20E100
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/dc804f16-e6f1-35b9-97e0-3b11476058a3.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     62044
IP address blocks:        165.225.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3c:f7:09:bd:8d:aa:71:3e:20:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=b3927910-5ac1-412c-84a7-26d7a54a4d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1c:f3:59:10:b5:16:db:94:c7:83:c2:ad:4f:
                    74:b6:8d:35:b0:15:c5:ac:60:1e:a3:b9:d7:c3:e8:
                    d9:b7:1b:87:a6:5f:5f:fe:5c:26:2a:2c:58:93:30:
                    ba:18:fd:4d:fb:ae:45:8e:61:6d:ff:31:d0:b7:0c:
                    d4:f0:3a:b3:04:20:45:c9:f3:a8:3f:2c:12:a7:ac:
                    9a:23:7c:8d:86:6a:8d:9c:f9:b3:98:5e:09:5d:1c:
                    ca:76:90:fd:67:4c:65:1c:30:f4:9a:8a:a9:0a:03:
                    e3:c1:c7:3f:01:1e:c0:0a:3a:26:ed:5b:1c:5e:f6:
                    22:da:ad:35:92:e0:6e:0b:c8:02:be:3e:76:d9:7c:
                    97:a6:4a:3a:ed:0a:86:53:4f:c4:bd:3b:3f:3a:d7:
                    bf:08:23:37:a0:90:cf:b8:1e:df:ba:b6:e2:ed:69:
                    3d:46:7e:ac:23:c0:48:11:0d:27:f2:fd:b0:b3:5c:
                    b7:c3:40:5c:12:f9:81:c7:d1:cc:11:4f:13:34:56:
                    51:33:2d:10:e5:0f:e0:57:94:36:c5:7e:a8:d0:00:
                    af:5a:36:31:49:f3:f9:6f:49:6b:a5:12:74:9b:28:
                    55:e5:ad:93:a9:aa:56:a4:c4:72:bd:6e:82:0e:70:
                    94:93:8e:ce:dc:0a:d1:7c:bf:64:dc:61:e1:f7:d4:
                    9e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:87:5D:03:67:AA:3B:6C:57:AF:A0:A4:44:48:77:20:3A:A5:2D:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/dc804f16-e6f1-35b9-97e0-3b11476058a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.28.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:6f:5e:7a:c0:b2:da:ed:13:55:af:f3:4a:fa:2c:fe:6f:f0:
         14:49:6a:03:eb:8c:ae:25:26:2c:6b:d5:99:07:ba:5f:36:75:
         18:93:a7:bc:9e:e3:68:96:a2:19:3b:3a:c1:a3:01:c9:f3:4a:
         3d:05:aa:c1:27:a8:cd:69:4e:30:c0:78:ce:a5:54:25:3c:05:
         2e:16:09:77:b3:8b:ab:ab:26:7f:22:24:cc:43:14:46:cc:3d:
         4c:db:44:b6:33:55:54:1b:1e:31:d2:72:c5:09:f7:a6:58:47:
         88:0f:ca:44:c4:57:a2:ed:45:b6:bf:b9:76:ef:95:31:71:47:
         4e:97:84:7d:9c:22:98:4e:67:ba:5b:75:0f:9c:4d:cc:60:71:
         48:4a:23:c8:08:ee:00:da:27:43:16:e3:30:b7:dc:53:9f:0a:
         ed:ca:7d:36:69:8b:5e:7b:6f:dd:13:5a:c9:c0:c1:32:f3:02:
         b3:f2:aa:04:fb:11:e2:21:ab:64:8f:bc:69:a1:1b:54:02:93:
         3b:0c:61:f6:fa:89:21:92:a0:15:de:c3:04:68:f6:98:8d:fc:
         14:68:f6:d6:2e:e0:ee:ae:a8:e8:27:08:90:f6:6b:16:72:21:
         b2:90:4e:b6:13:f0:c3:16:de:fd:51:57:ab:76:df:bb:61:5f:
         23:9a:02:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPPcJvY2qcT4g4QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk
YjM5Mjc5MTAtNWFjMS00MTJjLTg0YTctMjZkN2E1NGE0ZDgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRzzWRC1FtuUx4PCrU90to01sBXFrGAeo7nX
w+jZtxuHpl9f/lwmKixYkzC6GP1N+65FjmFt/zHQtwzU8DqzBCBFyfOoPywSp6ya
I3yNhmqNnPmzmF4JXRzKdpD9Z0xlHDD0moqpCgPjwcc/AR7ACjom7VscXvYi2q01
kuBuC8gCvj522XyXpko67QqGU0/EvTs/Ote/CCM3oJDPuB7furbi7Wk9Rn6sI8BI
EQ0n8v2ws1y3w0BcEvmBx9HMEU8TNFZRMy0Q5Q/gV5Q2xX6o0ACvWjYxSfP5b0lr
pRJ0myhV5a2TqapWpMRyvW6CDnCUk47O3ArRfL9k3GHh99Se4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMSHXQNnqjtsV6+gpERIdyA6pS2RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZGM4MDRmMTYtZTZmMS0z
NWI5LTk3ZTAtM2IxMTQ3NjA1OGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpeEcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFtvXnrAstrtE1Wv80r6LP5v8BRJagPrjK4lJixr1ZkHul82dRiTp7ye
42iWohk7OsGjAcnzSj0FqsEnqM1pTjDAeM6lVCU8BS4WCXezi6urJn8iJMxDFEbM
PUzbRLYzVVQbHjHScsUJ96ZYR4gPykTEV6LtRba/uXbvlTFxR06XhH2cIphOZ7pb
dQ+cTcxgcUhKI8gI7gDaJ0MW4zC33FOfCu3KfTZpi157b90TWsnAwTLzArPyqgT7
EeIhq2SPvGmhG1QCkzsMYfb6iSGSoBXewwRo9piN/BRo9tYu4O6uqOgnCJD2axZy
IbKQTrYT8MMW3v1RV6t237thXyOaAmU=
-----END CERTIFICATE-----
Generated at Thu Oct 23 08:25:41 2025 by rpki-client