Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ba12a1b-cc2a-3f46-80e1-fb4e03708cff.roa
File:                     8ba12a1b-cc2a-3f46-80e1-fb4e03708cff.roa (raw, json)
Hash identifier:          1bgVIO5poFuicQ0Dsays2YU/keDZ7GRR1UYVfNehOT8=
Subject key identifier:   C0:E7:1E:C1:D7:DE:AF:D4:74:66:F5:D2:D8:0D:5F:07:6A:17:0D:18
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B5141C3E4C06EF3FFFBD8AC20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ba12a1b-cc2a-3f46-80e1-fb4e03708cff.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     7922
IP address blocks:        162.151.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:c3:e4:c0:6e:f3:ff:fb:d8:ac:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=327db8d9-ff22-450d-b036-1d5d1d187071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:73:90:19:d3:09:3b:a7:62:ba:9b:aa:b0:fa:
                    87:14:a9:a0:68:fd:9a:0e:d9:96:25:3c:21:2c:d2:
                    cf:82:57:02:98:6f:69:70:47:f5:87:52:fe:1c:43:
                    97:1a:24:6e:c4:14:1c:de:22:4f:a7:ca:ef:b0:50:
                    11:30:71:ad:ba:14:bf:84:e6:4d:01:2c:3a:ea:c1:
                    95:21:da:30:67:aa:60:92:41:56:3c:2d:fd:b5:19:
                    b7:fd:3f:33:1b:67:59:18:7d:1b:b9:ed:b1:93:96:
                    57:98:32:84:47:52:5d:f1:4d:b3:f6:10:b4:8c:ad:
                    0e:6a:16:79:01:aa:de:f2:46:d5:18:68:86:43:43:
                    f9:b9:62:5c:49:cd:38:45:8c:59:6c:5c:12:96:63:
                    7e:70:e8:e4:f1:27:bd:97:29:f9:67:58:9a:cc:fe:
                    dd:b0:52:cf:4d:3a:cb:dc:d9:c1:02:5b:c3:45:e1:
                    d7:57:30:d2:8e:da:21:69:fb:4e:b5:01:d2:80:a0:
                    f6:65:f5:36:17:01:ec:80:4c:2d:3c:ce:6a:c8:9e:
                    2c:81:26:8b:f8:4e:e4:ef:01:1e:90:63:5d:24:99:
                    3d:40:52:63:da:60:e2:34:3d:48:1d:48:b4:09:73:
                    08:df:8f:a7:23:49:ab:7d:34:0e:ac:8b:7e:52:ef:
                    ee:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E7:1E:C1:D7:DE:AF:D4:74:66:F5:D2:D8:0D:5F:07:6A:17:0D:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ba12a1b-cc2a-3f46-80e1-fb4e03708cff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.151.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:3e:6e:38:de:9e:f7:e4:72:8f:7d:2f:63:68:fa:0a:3b:40:
         39:8e:06:d5:00:d2:69:87:cc:88:7b:db:63:25:ad:e3:3f:a6:
         aa:9e:e4:ce:f7:84:f6:6c:df:9c:2e:41:9a:47:7d:b4:93:6b:
         37:bd:06:15:82:64:74:58:3d:89:0c:e3:34:1b:84:c5:d1:0a:
         23:71:2b:3a:7f:ff:a3:e0:2f:58:b4:16:2d:d9:9f:31:4b:f7:
         f5:28:ac:4c:20:3b:c7:eb:15:a8:8b:de:45:d2:85:b4:e6:35:
         0a:1a:9d:3a:15:64:74:de:46:c4:5b:65:df:12:4f:91:ce:79:
         04:de:b8:e7:e8:d0:83:41:ba:c6:b2:e3:6e:b9:cf:b2:14:d1:
         3c:b0:91:35:5e:9b:38:42:2c:7a:4c:53:9b:06:db:b7:3e:b0:
         0f:d9:f7:a8:01:69:cf:26:ee:78:e1:4a:f9:00:ed:f0:7a:b9:
         d0:56:dd:af:39:17:25:25:d8:71:19:15:c6:7d:2b:07:99:a8:
         15:26:31:7e:57:4e:54:27:5a:17:dd:5a:09:68:eb:bd:cc:f0:
         9f:17:b7:17:76:8d:24:f1:ca:90:6e:dc:db:b2:db:7f:dd:fc:
         0f:cd:8c:1b:85:d9:5a:26:78:4f:e5:c6:3f:34:14:21:f7:09:
         9b:3c:0b:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQcPkwG7z//vYrCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk
MzI3ZGI4ZDktZmYyMi00NTBkLWIwMzYtMWQ1ZDFkMTg3MDcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHOQGdMJO6diupuqsPqHFKmgaP2aDtmWJTwh
LNLPglcCmG9pcEf1h1L+HEOXGiRuxBQc3iJPp8rvsFARMHGtuhS/hOZNASw66sGV
IdowZ6pgkkFWPC39tRm3/T8zG2dZGH0bue2xk5ZXmDKER1Jd8U2z9hC0jK0OahZ5
Aare8kbVGGiGQ0P5uWJcSc04RYxZbFwSlmN+cOjk8Se9lyn5Z1iazP7dsFLPTTrL
3NnBAlvDReHXVzDSjtohaftOtQHSgKD2ZfU2FwHsgEwtPM5qyJ4sgSaL+E7k7wEe
kGNdJJk9QFJj2mDiND1IHUi0CXMI34+nI0mrfTQOrIt+Uu/uGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMDnHsHX3q/UdGb10tgNXwdqFw0YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGJhMTJhMWItY2MyYS0z
ZjQ2LTgwZTEtZmI0ZTAzNzA4Y2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAopfTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANQ+bjjenvfkco99L2No+go7QDmOBtUA0mmHzIh722MlreM/pqqe5M73
hPZs35wuQZpHfbSTaze9BhWCZHRYPYkM4zQbhMXRCiNxKzp//6PgL1i0Fi3ZnzFL
9/UorEwgO8frFaiL3kXShbTmNQoanToVZHTeRsRbZd8ST5HOeQTeuOfo0INBusay
4265z7IU0TywkTVemzhCLHpMU5sG27c+sA/Z96gBac8m7njhSvkA7fB6udBW3a85
FyUl2HEZFcZ9KweZqBUmMX5XTlQnWhfdWglo673M8J8Xtxd2jSTxypBu3Nuy23/d
/A/NjBuF2VomeE/lxj80FCH3CZs8C4A=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:15:53 2025 by rpki-client