Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/69b7445b-2350-36b0-a652-be4c0f4d1206.roa
File:                     69b7445b-2350-36b0-a652-be4c0f4d1206.roa (raw, json)
Hash identifier:          PfZBIJ/UuaffQDF19qSnK0KfpqcXkzW3FHYp6LkQ78c=
Subject key identifier:   11:9B:26:BF:90:D4:73:AA:D5:29:90:40:3C:07:4B:7D:F8:62:BC:89
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584E5BAF52005AAE946B73DF5E80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/69b7445b-2350-36b0-a652-be4c0f4d1206.roa
Signing time:             Wed 01 Jul 2026 21:00:12 +0000
ROA not before:           Wed 01 Jul 2026 21:00:12 +0000
ROA not after:            Tue 29 Sep 2026 21:00:12 +0000
asID:                     20940
IP address blocks:        165.254.203.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:af:52:00:5a:ae:94:6b:73:df:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jul  1 21:00:12 2026 GMT
            Not After : Sep 29 21:00:12 2026 GMT
        Subject: CN=22707108-d21d-4d59-a7ec-ac89bbf1b7f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0b:82:ba:86:16:df:01:05:4c:27:3c:5f:2b:
                    ca:44:68:1c:7d:9f:55:1c:56:5b:ea:21:2b:88:89:
                    a2:d3:00:a4:54:e6:7e:df:d8:78:e4:5e:f4:31:d1:
                    9a:d1:14:f1:b1:61:39:f2:ff:1d:9d:46:2a:a0:9e:
                    54:38:fd:63:09:92:4a:33:ab:1b:81:91:d3:8d:79:
                    a4:84:f7:03:75:45:d4:fa:7e:f8:e5:2e:a4:8c:53:
                    5e:64:34:89:d3:4a:34:cc:45:dc:57:86:f5:de:e3:
                    ec:7e:e6:59:e6:42:96:0d:c0:7f:fc:77:23:46:49:
                    aa:75:61:25:e2:5d:93:ba:ea:9d:3f:c6:6b:bf:2d:
                    38:64:f2:1e:12:8d:5b:1c:2d:2b:ca:f4:4b:0f:84:
                    94:ba:5f:47:77:c2:cd:28:d2:26:25:05:a8:96:34:
                    ac:5f:f7:9a:ee:55:3d:93:ad:fc:69:89:67:9b:2b:
                    91:79:14:4a:26:cb:02:30:8e:73:95:03:af:e4:0b:
                    19:1b:7b:07:74:e0:b3:cc:09:07:a2:65:46:b0:c0:
                    89:6b:fe:11:e2:8a:32:d3:bb:4b:63:32:9b:66:b9:
                    57:b7:54:a1:b5:44:f6:e0:a6:d9:77:65:fd:b6:11:
                    6a:71:69:3b:67:2c:4c:d2:0a:33:75:e5:bb:f4:ef:
                    34:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:9B:26:BF:90:D4:73:AA:D5:29:90:40:3C:07:4B:7D:F8:62:BC:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/69b7445b-2350-36b0-a652-be4c0f4d1206.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.203.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:b6:3d:99:8e:5e:b4:a4:cb:72:da:fc:57:f7:e5:ee:48:30:
         37:a4:3f:aa:7e:e5:b9:e8:9c:8b:82:83:f9:fb:97:94:dc:74:
         d7:7d:49:c7:fe:92:e1:7b:ff:a6:4f:42:ba:4b:40:68:97:c3:
         a9:2e:65:10:1a:e5:e6:b9:3a:5a:48:2b:2b:f1:f2:ac:a1:04:
         07:04:29:43:cb:8d:b5:be:68:55:a5:b1:f3:6c:a9:96:cc:5d:
         32:86:e2:1f:1b:cd:34:37:89:f1:d4:ef:15:39:2c:c5:9d:02:
         d3:35:a3:79:6a:cf:5d:4e:3a:a1:31:2d:91:bd:fe:a0:2f:a8:
         e7:4b:17:67:ef:6e:42:a5:4a:4e:11:df:5d:0d:92:ff:75:e2:
         95:40:ed:4c:1e:8e:46:f9:1c:17:a2:9d:42:49:fc:fa:aa:a0:
         ad:b3:83:3e:ae:77:03:2a:7c:03:4c:29:53:20:a7:bf:6f:3e:
         07:27:ac:d8:83:5f:3b:63:bb:cd:76:6a:6b:b8:e4:3b:85:e7:
         19:15:1e:76:46:6e:5c:47:5b:22:26:98:77:26:fc:d2:7b:57:
         d3:7a:e4:ce:64:b2:a0:79:0a:65:d5:1f:9e:20:4d:6c:12:a1:
         79:d8:4a:62:03:61:12:af:70:42:c3:6f:cb:e5:2a:9c:20:9b:
         89:06:1c:d3
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5br1IAWq6Ua3PfXoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI2MDcwMTIxMDAxMloXDTI2MDkyOTIxMDAxMlowLzEtMCsGA1UEAxMk
MjI3MDcxMDgtZDIxZC00ZDU5LWE3ZWMtYWM4OWJiZjFiN2Y2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAuCuoYW3wEFTCc8XyvKRGgcfZ9VHFZb6iEr
iImi0wCkVOZ+39h45F70MdGa0RTxsWE58v8dnUYqoJ5UOP1jCZJKM6sbgZHTjXmk
hPcDdUXU+n745S6kjFNeZDSJ00o0zEXcV4b13uPsfuZZ5kKWDcB//HcjRkmqdWEl
4l2TuuqdP8Zrvy04ZPIeEo1bHC0ryvRLD4SUul9Hd8LNKNImJQWoljSsX/ea7lU9
k638aYlnmyuReRRKJssCMI5zlQOv5AsZG3sHdOCzzAkHomVGsMCJa/4R4ooy07tL
YzKbZrlXt1ShtUT24KbZd2X9thFqcWk7ZyxM0gozdeW79O80mQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBGbJr+Q1HOq1SmQQDwHS334YryJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNjliNzQ0NWItMjM1MC0z
NmIwLWE2NTItYmU0YzBmNGQxMjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHpf7LADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCQtj2Zjl60pMty2vxX9+XuSDA3pD+qfuW56JyLgoP5+5eU3HTXfUnH
/pLhe/+mT0K6S0Bol8OpLmUQGuXmuTpaSCsr8fKsoQQHBClDy421vmhVpbHzbKmW
zF0yhuIfG800N4nx1O8VOSzFnQLTNaN5as9dTjqhMS2Rvf6gL6jnSxdn725CpUpO
Ed9dDZL/deKVQO1MHo5G+RwXop1CSfz6qqCts4M+rncDKnwDTClTIKe/bz4HJ6zY
g187Y7vNdmpruOQ7hecZFR52Rm5cR1siJph3JvzSe1fTeuTOZLKgeQpl1R+eIE1s
EqF52EpiA2ESr3BCw2/L5SqcIJuJBhzT
-----END CERTIFICATE-----
Generated at Thu Jul 16 03:06:43 2026 by rpki-client