Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b302ef69-0e9e-318b-9c57-66a0e0ce822b.roa
File:                     b302ef69-0e9e-318b-9c57-66a0e0ce822b.roa (raw, json)
Hash identifier:          pF17yffIwe5aWaojJ2sSS5UU8IeOM1UjobrsG7eXhh0=
Subject key identifier:   22:25:BD:1F:71:FF:02:C2:9E:4C:F4:B1:06:B9:B0:CD:B0:FB:F3:C1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F49788056B95DABE9C235E720
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b302ef69-0e9e-318b-9c57-66a0e0ce822b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33650
IP address blocks:        162.148.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:78:80:56:b9:5d:ab:e9:c2:35:e7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bc50f4ea-d24c-40c0-8c9e-f73216d5e989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:18:67:39:54:80:ec:79:bc:cb:5d:6e:ec:9f:
                    46:66:df:76:8a:88:85:35:9f:4c:5c:71:70:dc:a3:
                    f4:db:03:47:27:49:5a:d2:92:b5:85:49:78:21:d6:
                    0b:dd:da:61:f1:18:b8:41:1e:0c:94:78:cb:4e:6f:
                    60:5c:34:8a:2f:34:64:1b:e6:26:51:a9:cc:98:a9:
                    03:5d:1b:aa:36:2b:ae:f2:d6:72:d1:a0:ab:10:96:
                    00:3a:ff:af:55:a8:4d:b1:9b:a8:1a:89:5a:c8:b7:
                    d1:e3:07:c2:6b:e9:b2:dc:52:6c:2f:54:eb:98:c4:
                    29:b5:71:e3:9e:dd:f7:d5:73:de:72:1a:3d:3b:5d:
                    25:22:1b:fe:f2:6a:53:1a:24:94:75:cf:83:75:84:
                    71:d3:16:f9:82:0d:9c:5b:90:b0:59:f0:bf:0c:1b:
                    e7:83:b3:f7:ed:ce:66:81:97:3c:3d:76:03:cc:a1:
                    14:ad:8b:c0:d6:7c:a6:51:cf:9a:40:d0:9a:78:d9:
                    d5:11:67:52:c8:e6:04:6b:00:53:f9:61:c2:a4:23:
                    ce:9b:5e:15:7d:67:9c:46:25:d8:2d:ab:20:8f:58:
                    b8:8b:84:65:29:89:80:8c:48:0d:c2:11:70:76:3e:
                    c0:05:08:77:cf:86:48:3c:85:fb:ff:48:e6:f3:68:
                    65:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:25:BD:1F:71:FF:02:C2:9E:4C:F4:B1:06:B9:B0:CD:B0:FB:F3:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b302ef69-0e9e-318b-9c57-66a0e0ce822b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.148.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:fa:46:52:a2:6c:31:7f:67:0d:2b:57:02:db:13:ec:33:b4:
         1a:52:da:71:f5:35:ac:46:90:f0:a5:14:31:5e:72:2e:1d:85:
         f7:7a:d7:e8:d2:09:45:3d:5d:ef:8a:77:46:cc:5b:68:da:10:
         54:8b:d7:39:cf:2e:23:46:60:32:c0:ec:4c:dd:7f:ad:e2:8e:
         b8:25:b9:1c:7f:b3:55:a6:4e:94:7e:09:50:9a:9c:99:c5:8c:
         71:16:90:1e:8d:71:cd:85:2c:4c:8f:39:d6:b6:af:23:45:34:
         b9:20:05:bc:5e:56:25:3a:df:6e:d6:47:b1:ff:96:35:f9:53:
         f5:d9:f1:f2:65:58:0c:e3:d6:78:e0:df:dc:76:30:f8:a6:f3:
         8a:6f:c3:f1:b1:cb:76:8c:78:72:55:7f:41:10:3d:40:2c:fb:
         c4:e3:41:66:13:ae:c1:a5:94:e7:45:c0:f0:ff:07:5e:ac:7a:
         68:6d:d7:a3:71:8c:70:36:3a:78:58:1b:cb:04:4f:37:66:ac:
         74:61:57:02:36:69:b2:01:7b:96:c2:6c:03:c5:20:cb:9a:1d:
         5f:f4:b6:33:eb:60:01:e4:4e:b8:12:9b:9c:df:a8:76:0f:d5:
         43:51:38:86:18:dd:58:e3:1f:51:f1:31:3d:a6:18:79:a8:97:
         c5:f5:fc:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JeIBWuV2r6cI15yAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YmM1MGY0ZWEtZDI0Yy00MGMwLThjOWUtZjczMjE2ZDVlOTg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxhnOVSA7Hm8y11u7J9GZt92ioiFNZ9MXHFw
3KP02wNHJ0la0pK1hUl4IdYL3dph8Ri4QR4MlHjLTm9gXDSKLzRkG+YmUanMmKkD
XRuqNiuu8tZy0aCrEJYAOv+vVahNsZuoGolayLfR4wfCa+my3FJsL1TrmMQptXHj
nt331XPecho9O10lIhv+8mpTGiSUdc+DdYRx0xb5gg2cW5CwWfC/DBvng7P37c5m
gZc8PXYDzKEUrYvA1nymUc+aQNCaeNnVEWdSyOYEawBT+WHCpCPOm14VfWecRiXY
Lasgj1i4i4RlKYmAjEgNwhFwdj7ABQh3z4ZIPIX7/0jm82hleQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCIlvR9x/wLCnkz0sQa5sM2w+/PBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjMwMmVmNjktMGU5ZS0z
MThiLTljNTctNjZhMGUwY2U4MjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCopRMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADj6RlKibDF/Zw0rVwLbE+wztBpS2nH1NaxGkPClFDFeci4dhfd61+jS
CUU9Xe+Kd0bMW2jaEFSL1znPLiNGYDLA7Ezdf63ijrgluRx/s1WmTpR+CVCanJnF
jHEWkB6Ncc2FLEyPOda2ryNFNLkgBbxeViU6327WR7H/ljX5U/XZ8fJlWAzj1njg
39x2MPim84pvw/Gxy3aMeHJVf0EQPUAs+8TjQWYTrsGllOdFwPD/B16semht16Nx
jHA2OnhYG8sETzdmrHRhVwI2abIBe5bCbAPFIMuaHV/0tjPrYAHkTrgSm5zfqHYP
1UNROIYY3VjjH1HxMT2mGHmol8X1/Hc=
-----END CERTIFICATE-----
Generated at Sun Sep 27 11:57:15 2026 by rpki-client