Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/62543897-22e3-364c-9a8e-1091358155eb.roa
File:                     62543897-22e3-364c-9a8e-1091358155eb.roa (raw, json)
Hash identifier:          jV5vgPtwCEntMZVNNDvGQvXxAseS+MQ9+Qd7iaGLB58=
Subject key identifier:   8F:96:52:AF:B6:93:BC:6B:88:10:D7:FD:F8:CB:4C:DB:A1:5C:BF:F0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFB948260B1E28A24534F40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/62543897-22e3-364c-9a8e-1091358155eb.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     7725
IP address blocks:        162.150.16.80/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:94:82:60:b1:e2:8a:24:53:4f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=9155bdec-a545-40d3-9790-54a1600b2c0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7e:38:3e:06:3a:c2:9b:f9:4e:58:06:11:23:
                    fe:0a:35:ae:9e:22:95:44:2a:b4:62:d7:ce:cd:fc:
                    c7:b2:7d:57:a3:aa:2b:2e:ba:6a:48:84:5c:74:02:
                    3c:1d:f8:6e:29:a3:fd:44:90:f8:f3:c6:e2:5e:bc:
                    e8:cb:83:ec:00:81:f3:a0:6c:97:5c:4a:7a:b1:cc:
                    80:f2:f5:34:ea:91:0a:fc:68:9c:3c:a3:e9:33:03:
                    f7:b2:a4:de:ce:10:3d:32:5b:c4:17:8e:d2:8d:29:
                    bd:33:95:05:b9:39:f9:22:48:89:39:d2:77:52:7b:
                    e6:bf:d9:04:ed:c8:3a:9d:0b:09:63:ae:e3:b8:10:
                    b9:b8:e6:a1:5c:9c:c9:85:d8:34:71:50:ed:fa:32:
                    dd:cc:07:b1:69:c3:8d:a8:aa:86:f4:0b:82:41:a9:
                    a7:5a:30:15:b0:1b:98:3a:d7:0a:03:b8:94:eb:c5:
                    63:f9:62:e3:29:2e:71:04:50:a3:9e:36:d9:4d:c1:
                    04:65:f6:a2:b2:35:11:12:68:e9:19:75:3b:41:2f:
                    56:9c:ee:1b:20:5e:aa:75:4e:d9:f2:28:dd:0a:70:
                    e2:8b:33:16:11:34:99:56:33:ab:23:1d:49:4f:f4:
                    1c:5d:08:0c:bc:e6:ff:22:f7:e6:ac:b9:ed:2e:02:
                    77:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:96:52:AF:B6:93:BC:6B:88:10:D7:FD:F8:CB:4C:DB:A1:5C:BF:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/62543897-22e3-364c-9a8e-1091358155eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.150.16.80/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:c8:48:76:c6:36:51:1b:4a:d9:c2:8a:37:d6:c2:11:ec:de:
         cb:f3:2d:98:22:2d:f2:4e:fd:3c:bd:36:f3:d4:5a:ab:06:08:
         c5:37:f0:f8:00:6d:fc:8a:64:cf:44:f0:05:ea:15:e5:53:56:
         92:a5:11:60:02:2f:cf:df:9f:0b:38:ea:cb:9a:55:e7:b4:ad:
         2f:44:24:fc:97:8e:fb:c2:ec:4e:6a:7a:75:ad:41:1f:6b:7a:
         ab:cf:6f:1a:c1:1a:30:0f:13:c0:c2:69:d4:b6:a0:23:2d:7c:
         d7:2e:4f:69:5a:ee:05:a0:b4:5c:7c:5a:29:e7:e8:fd:4f:5b:
         c5:49:fc:23:68:10:44:0e:f8:e8:e2:dd:d7:3a:bc:7f:52:5e:
         31:73:cd:84:83:12:94:2f:52:42:de:ed:5e:95:f6:5f:97:81:
         62:f6:ec:70:03:8f:1e:7a:c6:35:9f:42:02:f8:1e:59:3e:12:
         a0:1c:ca:10:d7:dc:64:6d:26:bb:1c:80:9f:18:fe:54:0a:bf:
         b9:a7:2f:07:80:28:88:e0:ba:58:70:3c:11:f3:11:cf:c3:4e:
         1a:3b:51:2a:ed:f3:09:20:4b:82:d6:3a:6f:56:29:1e:ce:ca:
         c7:d4:c5:e0:bf:66:34:29:c3:02:b0:72:d3:a3:1e:9b:db:52:
         5b:2b:a5:35
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpc+5SCYLHiiiRTT0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
OTE1NWJkZWMtYTU0NS00MGQzLTk3OTAtNTRhMTYwMGIyYzBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX44PgY6wpv5TlgGESP+CjWuniKVRCq0YtfO
zfzHsn1Xo6orLrpqSIRcdAI8HfhuKaP9RJD488biXrzoy4PsAIHzoGyXXEp6scyA
8vU06pEK/GicPKPpMwP3sqTezhA9MlvEF47SjSm9M5UFuTn5IkiJOdJ3Unvmv9kE
7cg6nQsJY67juBC5uOahXJzJhdg0cVDt+jLdzAexacONqKqG9AuCQamnWjAVsBuY
OtcKA7iU68Vj+WLjKS5xBFCjnjbZTcEEZfaisjUREmjpGXU7QS9WnO4bIF6qdU7Z
8ijdCnDiizMWETSZVjOrIx1JT/QcXQgMvOb/IvfmrLntLgJ3gwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFI+WUq+2k7xriBDX/fjLTNuhXL/wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjI1NDM4OTctMjJlMy0z
NjRjLTlhOGUtMTA5MTM1ODE1NWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEopYQUDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAYyEh2xjZRG0rZwoo31sIR7N7L8y2YIi3yTv08vTbz1FqrBgjFN/D4
AG38imTPRPAF6hXlU1aSpRFgAi/P358LOOrLmlXntK0vRCT8l477wuxOanp1rUEf
a3qrz28awRowDxPAwmnUtqAjLXzXLk9pWu4FoLRcfFop5+j9T1vFSfwjaBBEDvjo
4t3XOrx/Ul4xc82EgxKUL1JC3u1elfZfl4Fi9uxwA48eesY1n0IC+B5ZPhKgHMoQ
19xkbSa7HICfGP5UCr+5py8HgCiI4LpYcDwR8xHPw04aO1Eq7fMJIEuC1jpvVike
zsrH1MXgv2Y0KcMCsHLTox6b21JbK6U1
-----END CERTIFICATE-----
Generated at Mon Jun 30 21:27:38 2025 by rpki-client