Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/428d7fba-0a75-39cc-9dd3-5b26a4232dc4.roa
File:                     428d7fba-0a75-39cc-9dd3-5b26a4232dc4.roa (raw, json)
Hash identifier:          IPMgsFFxHkE7La4udLAjvUQyi76ubgWw/220hyIrZXM=
Subject key identifier:   B9:B8:19:F0:85:0E:7A:6A:E1:73:6C:0A:12:15:3D:8B:D3:EA:2B:65
Certificate issuer:       /CN=5410af3b-1667-4dd4-9260-1835889ae3a3
Certificate serial:       010D0C9F4328584AA85BA867AEFE43B373990C80
Authority key identifier: B8:7F:76:B3:F1:DA:95:1F:69:6F:EC:30:F0:FB:FA:25:16:48:C1:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/428d7fba-0a75-39cc-9dd3-5b26a4232dc4.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        162.247.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/5410af3b-1667-4dd4-9260-1835889ae3a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/5410af3b-1667-4dd4-9260-1835889ae3a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:a8:67:ae:fe:43:b3:73:99:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5410af3b-1667-4dd4-9260-1835889ae3a3
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=44a276e1-3773-4504-b821-7031a154b756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:82:52:3f:bb:87:32:02:ac:9d:01:81:dc:96:
                    00:74:29:79:f0:04:65:97:91:2f:b0:5a:1f:70:c5:
                    34:e6:7d:26:43:a6:66:f3:11:63:63:38:26:db:8c:
                    56:c6:ab:fb:ac:8a:a0:77:3b:dc:79:10:4a:77:b4:
                    ef:e1:60:be:25:39:58:eb:bb:49:1f:46:ff:a1:7e:
                    63:f0:29:39:19:18:a8:5e:df:32:39:c2:da:1b:1a:
                    6c:fd:18:dd:48:d4:6f:ec:fa:f0:be:e0:7f:a4:a5:
                    dc:93:40:17:27:83:f2:03:f5:46:d9:1b:3f:51:4b:
                    25:fe:98:f2:0d:16:4a:80:37:53:cf:ed:51:7a:46:
                    b6:ec:d0:6c:e4:72:57:77:96:23:42:59:22:cb:ce:
                    ce:be:6c:10:99:26:08:a9:43:15:98:c9:0a:40:ea:
                    21:ab:a0:3d:30:57:d1:e5:96:bc:d2:cf:41:74:88:
                    59:c4:ea:40:dd:80:50:0a:fa:1e:b3:0d:cf:fe:65:
                    e4:0b:13:b2:d6:9e:88:63:35:8f:08:dc:26:77:86:
                    3f:c4:96:30:ee:a4:fa:70:34:a0:d2:f0:5b:37:81:
                    7f:f2:09:49:41:1f:d1:c4:58:d3:b2:e5:e3:ed:57:
                    02:a2:86:ba:60:4e:99:fe:67:9a:09:61:11:7d:7d:
                    5b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B8:19:F0:85:0E:7A:6A:E1:73:6C:0A:12:15:3D:8B:D3:EA:2B:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/428d7fba-0a75-39cc-9dd3-5b26a4232dc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/5410af3b-1667-4dd4-9260-1835889ae3a3.crl

            X509v3 Authority Key Identifier:
                keyid:B8:7F:76:B3:F1:DA:95:1F:69:6F:EC:30:F0:FB:FA:25:16:48:C1:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:a5:8f:1d:c3:db:d9:c7:91:12:7e:09:65:ec:20:d2:ce:2c:
         f1:28:49:17:89:ee:a2:ab:65:88:c6:1d:0a:13:ad:6f:97:ad:
         c6:51:d0:1c:c4:01:25:f2:09:bc:34:a1:68:b9:27:97:5a:9d:
         91:e3:30:06:4c:85:3e:13:56:88:a1:a2:b0:54:31:25:39:2e:
         53:06:4b:17:fd:fb:6c:51:05:77:52:e0:f4:33:2e:2b:5d:58:
         b9:3d:6c:a9:7c:7b:6f:d0:f6:0f:1d:d5:ed:8d:18:e8:8d:c9:
         02:0b:01:4c:72:1d:d6:4c:6b:4e:cb:be:15:d7:6a:9e:93:89:
         9c:13:09:02:83:58:7e:8d:d4:9c:bd:3a:a9:8e:bf:e0:fd:a4:
         56:52:f1:3f:aa:7e:d6:99:83:3d:4b:fc:fc:9d:ca:3e:a9:3d:
         36:ac:95:17:d0:2e:47:fb:38:97:1e:46:7b:58:d2:1c:f9:8e:
         78:f2:7e:ac:ac:2e:31:f2:1b:b2:fb:db:b0:a4:95:13:69:aa:
         9a:8c:c2:d6:8c:9f:ed:c1:fe:a1:1f:42:bc:64:a8:9c:08:86:
         5b:12:72:58:e3:ab:15:7d:53:99:66:fa:04:68:f4:30:61:b0:
         3f:c2:d2:13:30:1f:5d:5d:00:32:44:ac:7c:c9:bd:b9:e6:bc:
         d2:90:7b:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW6hnrv5Ds3OZDIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTQxMGFmM2ItMTY2Ny00ZGQ0LTkyNjAtMTgzNTg4OWFl
M2EzMB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk
NDRhMjc2ZTEtMzc3My00NTA0LWI4MjEtNzAzMWExNTRiNzU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4JSP7uHMgKsnQGB3JYAdCl58ARll5EvsFof
cMU05n0mQ6Zm8xFjYzgm24xWxqv7rIqgdzvceRBKd7Tv4WC+JTlY67tJH0b/oX5j
8Ck5GRioXt8yOcLaGxps/RjdSNRv7PrwvuB/pKXck0AXJ4PyA/VG2Rs/UUsl/pjy
DRZKgDdTz+1Reka27NBs5HJXd5YjQlkiy87OvmwQmSYIqUMVmMkKQOohq6A9MFfR
5Za80s9BdIhZxOpA3YBQCvoesw3P/mXkCxOy1p6IYzWPCNwmd4Y/xJYw7qT6cDSg
0vBbN4F/8glJQR/RxFjTsuXj7VcCooa6YE6Z/meaCWERfX1bzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLm4GfCFDnpq4XNsChIVPYvT6itlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81NDEw
YWYzYi0xNjY3LTRkZDQtOTI2MC0xODM1ODg5YWUzYTMvNDI4ZDdmYmEtMGE3NS0z
OWNjLTlkZDMtNWIyNmE0MjMyZGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTQxMGFmM2ItMTY2Ny00ZGQ0LTky
NjAtMTgzNTg4OWFlM2EzLzU0MTBhZjNiLTE2NjctNGRkNC05MjYwLTE4MzU4ODlh
ZTNhMy5jcmwwHwYDVR0jBBgwFoAUuH92s/HalR9pb+ww8Pv6JRZIwWYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81NDEwYWYzYi0xNjY3LTRkZDQtOTI2MC0xODM1
ODg5YWUzYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovelMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJOljx3D29nHkRJ+CWXsINLOLPEoSReJ7qKrZYjGHQoTrW+XrcZR0BzE
ASXyCbw0oWi5J5danZHjMAZMhT4TVoihorBUMSU5LlMGSxf9+2xRBXdS4PQzLitd
WLk9bKl8e2/Q9g8d1e2NGOiNyQILAUxyHdZMa07LvhXXap6TiZwTCQKDWH6N1Jy9
OqmOv+D9pFZS8T+qftaZgz1L/Pydyj6pPTaslRfQLkf7OJceRntY0hz5jnjyfqys
LjHyG7L727CklRNpqpqMwtaMn+3B/qEfQrxkqJwIhlsScljjqxV9U5lm+gRo9DBh
sD/C0hMwH11dADJErHzJvbnmvNKQe3g=
-----END CERTIFICATE-----
Generated at Sat Aug 23 06:55:34 2025 by rpki-client