Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4630b5c0-ee53-3225-820b-4d9ae7d917cd.roa
File:                     4630b5c0-ee53-3225-820b-4d9ae7d917cd.roa (raw, json)
Hash identifier:          tX5qixuPjCWzLgOAO0thOOEeSxCJ0k0aVX7PqdCvxcQ=
Subject key identifier:   72:3F:F5:DE:47:BF:2D:EB:36:3F:06:5D:EB:B4:4D:59:C9:2E:12:6C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584B46170845A3901E95EF6AF2B0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4630b5c0-ee53-3225-820b-4d9ae7d917cd.roa
Signing time:             Mon 22 Sep 2025 01:00:33 +0000
ROA not before:           Mon 22 Sep 2025 01:00:33 +0000
ROA not after:            Sun 21 Dec 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        162.158.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:46:17:08:45:a3:90:1e:95:ef:6a:f2:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 22 01:00:33 2025 GMT
            Not After : Dec 21 02:00:33 2025 GMT
        Subject: CN=306e2342-44b7-4b4b-a3c5-e5346d17fc97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:98:b4:00:dd:c6:94:98:58:84:ec:f0:a4:ce:
                    8e:eb:0d:e4:3a:f0:d0:94:df:b7:55:e4:bc:ed:0a:
                    43:20:54:9d:d5:f8:ce:83:af:61:f4:73:cc:09:26:
                    93:58:91:fc:2c:c7:9e:27:08:ca:12:df:23:10:60:
                    6a:75:bd:87:01:06:c7:b6:84:c0:f9:80:f1:ca:59:
                    e4:cd:2a:60:76:f2:82:4b:06:17:68:6c:3a:61:fa:
                    b1:06:ea:ea:d5:0e:eb:4d:7f:f4:d2:96:ed:c6:17:
                    0b:6d:b8:8a:9e:96:24:ac:f6:25:6f:97:86:f8:31:
                    a2:e2:4b:a6:58:aa:0b:ff:3b:2c:c4:c3:74:6a:30:
                    ad:87:47:50:f8:82:9c:d0:44:92:a3:77:9e:ba:f2:
                    08:e1:d4:38:90:ce:12:1d:35:cd:a2:3e:8b:ad:23:
                    45:b3:47:9b:25:97:d6:00:3b:21:05:c1:cb:10:53:
                    2d:00:6f:51:d7:46:97:b2:0a:ea:d4:ed:da:74:47:
                    eb:62:87:59:40:4d:2b:0e:d3:c0:65:83:1d:c8:ca:
                    39:5f:1e:10:52:0e:d1:1d:36:31:29:87:8e:ce:48:
                    74:fb:23:09:02:22:b6:f0:dd:64:4c:06:ec:71:88:
                    f9:02:21:d2:fb:ee:55:68:46:fc:eb:d9:a7:00:42:
                    d2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3F:F5:DE:47:BF:2D:EB:36:3F:06:5D:EB:B4:4D:59:C9:2E:12:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4630b5c0-ee53-3225-820b-4d9ae7d917cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:fa:b9:22:4f:cd:13:21:90:db:23:19:67:09:da:50:b0:42:
         f1:12:2e:e1:9b:f0:fb:13:47:cc:8c:d8:2a:f1:6a:45:30:7c:
         bc:c9:77:5c:a6:41:25:42:3c:9e:3e:84:a2:44:9d:af:e4:18:
         72:48:ae:d0:49:f1:80:39:f5:e4:52:39:c5:ee:ec:1d:d9:3b:
         43:98:a3:59:e8:40:aa:d3:c1:ef:1e:63:9f:99:1a:69:30:26:
         eb:8d:4f:7e:f0:17:3f:68:f0:1a:fd:5a:28:6a:d0:34:d7:a9:
         ad:08:d0:24:90:e5:c3:8f:bf:af:e2:85:63:68:51:79:df:b6:
         0d:af:38:0a:12:60:53:e0:85:46:5c:2e:5c:df:a7:df:d4:d5:
         f5:f8:87:97:15:5b:35:11:9f:f5:50:f0:0b:73:80:65:e8:dd:
         67:0a:e5:81:96:1a:25:ca:a0:f3:74:78:5f:53:05:a4:cd:bc:
         fe:f5:e1:30:ba:fb:50:70:da:4d:12:ca:0c:d8:ed:41:ad:bd:
         02:95:9b:f7:99:c1:de:79:b1:42:62:9b:0f:99:99:46:76:30:
         53:7e:12:ae:8f:23:08:bb:a4:95:70:aa:19:37:4a:d9:1a:86:
         c4:54:32:b4:81:82:1d:ea:9d:e9:a7:5d:73:68:57:61:89:b8:
         7d:ce:27:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtGFwhFo5Aele9q8rAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDkyMjAxMDAzM1oXDTI1MTIyMTAyMDAzM1owLzEtMCsGA1UEAxMk
MzA2ZTIzNDItNDRiNy00YjRiLWEzYzUtZTUzNDZkMTdmYzk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Zi0AN3GlJhYhOzwpM6O6w3kOvDQlN+3VeS8
7QpDIFSd1fjOg69h9HPMCSaTWJH8LMeeJwjKEt8jEGBqdb2HAQbHtoTA+YDxylnk
zSpgdvKCSwYXaGw6YfqxBurq1Q7rTX/00pbtxhcLbbiKnpYkrPYlb5eG+DGi4kum
WKoL/zssxMN0ajCth0dQ+IKc0ESSo3eeuvII4dQ4kM4SHTXNoj6LrSNFs0ebJZfW
ADshBcHLEFMtAG9R10aXsgrq1O3adEfrYodZQE0rDtPAZYMdyMo5Xx4QUg7RHTYx
KYeOzkh0+yMJAiK28N1kTAbscYj5AiHS++5VaEb869mnAELSbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHI/9d5Hvy3rNj8GXeu0TVnJLhJsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDYzMGI1YzAtZWU1My0z
MjI1LTgyMGItNGQ5YWU3ZDkxN2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop7oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABP6uSJPzRMhkNsjGWcJ2lCwQvESLuGb8PsTR8yM2CrxakUwfLzJd1ym
QSVCPJ4+hKJEna/kGHJIrtBJ8YA59eRSOcXu7B3ZO0OYo1noQKrTwe8eY5+ZGmkw
JuuNT37wFz9o8Br9Wihq0DTXqa0I0CSQ5cOPv6/ihWNoUXnftg2vOAoSYFPghUZc
Llzfp9/U1fX4h5cVWzURn/VQ8AtzgGXo3WcK5YGWGiXKoPN0eF9TBaTNvP714TC6
+1Bw2k0SygzY7UGtvQKVm/eZwd55sUJimw+ZmUZ2MFN+Eq6PIwi7pJVwqhk3Stka
hsRUMrSBgh3qnemnXXNoV2GJuH3OJwA=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:59:47 2025 by rpki-client