Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3bddc926-c799-3650-a87f-27401696bc40.roa
File:                     3bddc926-c799-3650-a87f-27401696bc40.roa (raw, json)
Hash identifier:          uyIMWRkoPPGFHa7oV/gyGC9oYZGkEchFD4/dae74woI=
Subject key identifier:   35:73:30:E1:EE:40:98:C3:3B:55:03:1A:78:0D:F3:ED:06:47:C5:57
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC7110BF72DDF30CC09435328
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3bddc926-c799-3650-a87f-27401696bc40.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     13335
IP address blocks:        162.158.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:11:0b:f7:2d:df:30:cc:09:43:53:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=50106361-ad44-4825-866e-0b16e4ae046a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7d:6c:0e:ce:e4:22:cc:36:c3:4a:1b:77:7d:
                    3b:ba:9e:25:09:c6:1c:34:8e:be:87:6a:00:44:d7:
                    fc:93:a0:8a:29:be:89:9b:a7:f4:4f:f6:3c:60:43:
                    13:45:c5:1f:59:3f:e1:f3:33:b1:dd:4d:45:0e:4b:
                    1e:22:59:e0:3d:35:dd:f3:5e:6b:bf:c9:51:67:d8:
                    a9:01:99:c4:8a:bd:89:2e:e3:e0:1c:17:39:55:e1:
                    63:34:43:c2:10:fe:88:10:46:70:4d:ea:14:ec:82:
                    16:4e:b3:a6:4a:26:d9:d6:85:25:56:f7:c6:9c:58:
                    a1:8b:59:0c:ba:fe:09:d9:81:88:22:eb:a5:15:0e:
                    6d:af:08:66:1a:9d:58:b4:dc:22:ef:95:f9:28:65:
                    e8:cd:f1:ed:1f:22:b9:9b:51:55:e3:49:39:33:ad:
                    95:98:65:72:75:79:8c:ee:4b:00:70:b6:2a:7e:b2:
                    5c:87:51:a0:c0:66:47:cd:7d:fa:82:76:fb:d4:d3:
                    7f:4d:8c:79:53:2a:c2:02:98:f9:6b:3a:ca:17:f7:
                    02:4d:fc:aa:c3:ab:31:f4:10:8e:24:dc:4e:9a:e6:
                    28:a0:11:ab:b9:59:49:c9:01:90:f5:a3:66:96:5f:
                    be:d7:f5:d8:92:79:31:83:ca:44:fc:be:10:f3:a2:
                    df:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:73:30:E1:EE:40:98:C3:3B:55:03:1A:78:0D:F3:ED:06:47:C5:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3bddc926-c799-3650-a87f-27401696bc40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:c8:06:de:7f:b4:7d:60:d9:df:86:c2:11:5c:01:a5:83:d4:
         f4:45:a0:9e:15:35:f4:bb:e1:04:51:a7:27:10:44:05:02:45:
         c3:44:0b:15:02:13:73:f4:18:7f:b6:4b:03:f0:68:5a:1e:8e:
         9c:a4:6f:0d:32:63:55:82:2e:43:00:16:06:34:29:80:b7:4b:
         1e:58:7f:ba:bf:d9:bb:c1:4d:9a:a4:62:b7:cb:e6:eb:d4:cb:
         2a:68:c2:d9:9b:c0:25:bd:be:d8:c4:a8:2f:98:bf:4e:0c:0d:
         a8:34:cb:09:aa:0c:38:2c:f1:50:00:eb:df:73:84:73:95:68:
         45:a4:98:4e:80:80:b1:b4:d4:2b:be:52:dc:26:ab:30:f2:4a:
         75:b2:0d:ad:25:a8:1c:3e:22:36:aa:9f:05:e0:51:9c:16:00:
         e4:93:cb:7d:d7:27:50:5d:72:b0:56:7c:cb:7b:73:89:85:ec:
         ad:75:9d:be:8b:a0:d8:fd:08:33:64:b3:12:61:3f:31:97:d0:
         64:dd:c9:2b:d3:17:c2:e6:5b:55:3f:af:fb:a4:ee:33:11:8d:
         9b:fa:95:5d:0a:7e:79:50:56:2d:a1:02:d8:20:7d:1f:83:06:
         d1:ba:99:9e:24:55:73:f8:9b:2d:b1:f5:98:65:e3:ac:7f:70:
         1b:bc:12:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHEQv3Ld8wzAlDUygwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk
NTAxMDYzNjEtYWQ0NC00ODI1LTg2NmUtMGIxNmU0YWUwNDZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm31sDs7kIsw2w0obd307up4lCcYcNI6+h2oA
RNf8k6CKKb6Jm6f0T/Y8YEMTRcUfWT/h8zOx3U1FDkseIlngPTXd815rv8lRZ9ip
AZnEir2JLuPgHBc5VeFjNEPCEP6IEEZwTeoU7IIWTrOmSibZ1oUlVvfGnFihi1kM
uv4J2YGIIuulFQ5trwhmGp1YtNwi75X5KGXozfHtHyK5m1FV40k5M62VmGVydXmM
7ksAcLYqfrJch1GgwGZHzX36gnb71NN/TYx5UyrCApj5azrKF/cCTfyqw6sx9BCO
JNxOmuYooBGruVlJyQGQ9aNmll++1/XYknkxg8pE/L4Q86Lf/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDVzMOHuQJjDO1UDGngN8+0GR8VXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2JkZGM5MjYtYzc5OS0z
NjUwLWE4N2YtMjc0MDE2OTZiYzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop4vMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJvIBt5/tH1g2d+GwhFcAaWD1PRFoJ4VNfS74QRRpycQRAUCRcNECxUC
E3P0GH+2SwPwaFoejpykbw0yY1WCLkMAFgY0KYC3Sx5Yf7q/2bvBTZqkYrfL5uvU
yypowtmbwCW9vtjEqC+Yv04MDag0ywmqDDgs8VAA699zhHOVaEWkmE6AgLG01Cu+
UtwmqzDySnWyDa0lqBw+IjaqnwXgUZwWAOSTy33XJ1BdcrBWfMt7c4mF7K11nb6L
oNj9CDNksxJhPzGX0GTdySvTF8LmW1U/r/uk7jMRjZv6lV0KfnlQVi2hAtggfR+D
BtG6mZ4kVXP4my2x9Zhl46x/cBu8Ess=
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:20:11 2025 by rpki-client