Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/4881b69d-ecc8-33b7-bd25-494a524dc547.roa
File:                     4881b69d-ecc8-33b7-bd25-494a524dc547.roa (raw, json)
Hash identifier:          nqrZWZ7ZXjFh4oDe7wRHEMDOOPHkjHIhu56RIJqsLRQ=
Subject key identifier:   41:E0:4F:39:68:69:D1:F0:FC:D8:40:8F:0D:37:33:5D:C6:4C:FE:97
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584B8320C878DE5048B7D7B93680
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/4881b69d-ecc8-33b7-bd25-494a524dc547.roa
Signing time:             Mon 13 Oct 2025 21:44:39 +0000
ROA not before:           Mon 13 Oct 2025 21:44:39 +0000
ROA not after:            Sun 11 Jan 2026 22:44:39 +0000
asID:                     400530
IP address blocks:        63.234.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:83:20:c8:78:de:50:48:b7:d7:b9:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Oct 13 21:44:39 2025 GMT
            Not After : Jan 11 22:44:39 2026 GMT
        Subject: CN=16557352-a36f-4f8e-b587-db3608aaa519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7d:a1:1a:5b:a7:42:01:fe:98:3c:59:00:08:
                    2f:cb:b6:8e:7b:fb:97:ee:71:7b:42:02:fd:1a:d4:
                    bd:80:a9:57:27:28:66:9b:27:57:07:74:bf:ac:43:
                    04:e7:bb:46:2b:fd:9e:8c:9b:bd:32:ea:1a:08:6f:
                    44:00:8d:45:db:01:f7:22:df:1c:28:b9:aa:9e:c8:
                    7b:9f:d7:12:13:71:44:16:41:41:5b:2a:a1:a4:f9:
                    ed:f3:b3:93:23:0c:86:46:48:09:5b:55:92:48:77:
                    6f:1c:14:b9:93:9d:3c:91:cf:b6:72:a6:3b:5f:d9:
                    b7:31:ea:45:99:c4:56:db:cb:01:3e:f5:28:72:81:
                    af:b1:f8:a2:14:49:e5:f0:58:53:64:31:cf:13:fe:
                    ba:d8:1b:a2:d3:5e:c6:cc:7f:5e:25:0b:57:40:f4:
                    9c:c1:a4:3e:6e:06:f6:be:55:c1:c0:68:b0:d0:12:
                    53:b0:e1:36:fe:dc:7d:f5:87:80:1e:3a:7f:0e:11:
                    32:13:5a:1c:39:d4:17:35:4a:4c:86:db:ca:d3:8d:
                    76:94:16:b1:5c:e5:26:e5:1d:60:d3:1b:95:04:76:
                    e1:43:75:8c:37:75:a1:35:f6:65:4a:13:34:75:5c:
                    5a:26:dd:72:af:65:d2:f5:69:65:00:2c:34:0c:d7:
                    a0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E0:4F:39:68:69:D1:F0:FC:D8:40:8F:0D:37:33:5D:C6:4C:FE:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/4881b69d-ecc8-33b7-bd25-494a524dc547.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.234.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:75:d2:ae:27:c1:1d:52:2a:8b:81:80:bd:68:7a:a0:78:bb:
         60:85:15:b0:dc:24:fc:d6:4d:9d:62:91:a8:f3:34:ef:f3:27:
         8c:69:83:73:44:01:6c:c9:20:b3:50:e2:3d:4e:23:a1:8c:bf:
         b7:79:4c:39:1b:95:b1:e9:83:1d:bc:30:54:46:4f:ed:c2:b4:
         cd:50:be:bf:ef:24:d8:69:cf:f4:7b:42:1a:a0:b2:6d:8b:5a:
         a9:82:4d:b5:ca:3b:d8:24:c4:2c:80:2e:fb:81:d9:3a:fc:bd:
         90:0c:33:26:bf:bc:40:7b:8d:2c:1d:0f:20:83:a6:68:4f:a6:
         96:28:c5:3f:03:37:a4:dc:bc:13:5f:00:64:fd:6e:39:f7:07:
         b7:82:d5:42:54:40:b7:99:ed:de:a7:7c:c1:4b:fa:bf:5f:54:
         eb:75:e8:90:e7:00:7f:4d:24:e8:0c:1b:bf:c7:f0:06:48:92:
         61:ac:b2:8b:7d:ad:fe:2e:11:9f:3b:03:8f:64:0c:cc:c7:21:
         ef:8c:5c:f8:05:eb:dd:9b:bb:20:c9:fb:7a:b5:19:97:21:41:
         99:9b:a2:6d:ea:ba:c1:5d:d4:57:a7:26:b9:f1:e0:5f:2c:2d:
         07:38:7e:1b:bb:cc:f0:f1:a2:c7:da:67:12:ac:37:70:b9:c7:
         52:75:fb:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuDIMh43lBIt9e5NoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm
M2VjMB4XDTI1MTAxMzIxNDQzOVoXDTI2MDExMTIyNDQzOVowLzEtMCsGA1UEAxMk
MTY1NTczNTItYTM2Zi00ZjhlLWI1ODctZGIzNjA4YWFhNTE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1H2hGlunQgH+mDxZAAgvy7aOe/uX7nF7QgL9
GtS9gKlXJyhmmydXB3S/rEME57tGK/2ejJu9MuoaCG9EAI1F2wH3It8cKLmqnsh7
n9cSE3FEFkFBWyqhpPnt87OTIwyGRkgJW1WSSHdvHBS5k508kc+2cqY7X9m3MepF
mcRW28sBPvUocoGvsfiiFEnl8FhTZDHPE/662Bui017GzH9eJQtXQPScwaQ+bgb2
vlXBwGiw0BJTsOE2/tx99YeAHjp/DhEyE1ocOdQXNUpMhtvK0412lBaxXOUm5R1g
0xuVBHbhQ3WMN3WhNfZlShM0dVxaJt1yr2XS9WllACw0DNegDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEHgTzloadHw/NhAjw03M13GTP6XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3
YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvNDg4MWI2OWQtZWNjOC0z
M2I3LWJkMjUtNDk0YTUyNGRjNTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5
MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0
ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm
ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP+qWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJV10q4nwR1SKouBgL1oeqB4u2CFFbDcJPzWTZ1ikajzNO/zJ4xpg3NE
AWzJILNQ4j1OI6GMv7d5TDkblbHpgx28MFRGT+3CtM1Qvr/vJNhpz/R7Qhqgsm2L
WqmCTbXKO9gkxCyALvuB2Tr8vZAMMya/vEB7jSwdDyCDpmhPppYoxT8DN6TcvBNf
AGT9bjn3B7eC1UJUQLeZ7d6nfMFL+r9fVOt16JDnAH9NJOgMG7/H8AZIkmGssot9
rf4uEZ87A49kDMzHIe+MXPgF692buyDJ+3q1GZchQZmbom3qusFd1FenJrnx4F8s
LQc4fhu7zPDxosfaZxKsN3C5x1J1+04=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:47:51 2025 by rpki-client