Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d90772da-6df7-3215-a60f-5199f1814060.roa
File:                     d90772da-6df7-3215-a60f-5199f1814060.roa (raw, json)
Hash identifier:          H1DKBI3xk3DhXc6n8CEhYP0IEqnIrRagmgezNAqNcrg=
Subject key identifier:   FD:36:07:E4:F0:27:9E:07:88:73:1F:CD:4A:40:1E:51:68:A1:99:8B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC7111C692A7F2A87F8323CC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d90772da-6df7-3215-a60f-5199f1814060.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     13335
IP address blocks:        162.158.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:11:1c:69:2a:7f:2a:87:f8:32:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=6885d19a-7404-481f-b3b8-85950279772d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d5:35:21:cf:fe:65:af:fa:64:7b:61:62:bc:
                    d0:47:b4:53:c2:67:bf:5d:a1:23:bd:b1:93:4b:45:
                    6f:31:de:99:05:1c:6a:ed:d6:2b:8d:11:b7:ab:e6:
                    ff:4a:42:f2:54:96:74:d0:99:c3:93:20:91:46:49:
                    87:31:99:42:6b:21:db:fc:12:d2:58:88:0c:2a:fc:
                    0f:31:fc:7d:9e:df:bf:44:77:df:de:11:ec:11:33:
                    24:4f:cc:40:45:64:a3:b0:0f:9e:93:58:24:cf:cb:
                    84:23:55:c0:ee:74:f6:7a:0d:47:21:dd:8e:30:c3:
                    b9:ec:f7:b8:50:36:bd:5d:cf:fd:ed:3a:98:27:d4:
                    6e:e3:3c:43:8e:1f:01:b3:48:40:5b:36:43:7f:74:
                    37:67:7a:02:8e:71:d5:72:72:56:fc:30:c2:09:d2:
                    ed:ed:72:55:f8:3a:6b:a7:be:30:c7:af:3e:da:36:
                    d7:65:53:a1:9d:0a:30:13:06:5a:fb:57:a4:5d:12:
                    68:f2:9b:f9:f5:f3:11:d9:1d:7a:7f:ba:ec:95:97:
                    dd:59:c8:47:e8:11:e5:5c:43:52:c7:cc:3f:0c:a6:
                    2a:08:5d:bd:c4:62:b5:d1:18:fa:43:32:1a:86:af:
                    25:f7:7f:8c:54:a2:63:42:ce:97:c6:9f:d8:ce:9a:
                    5f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:36:07:E4:F0:27:9E:07:88:73:1F:CD:4A:40:1E:51:68:A1:99:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d90772da-6df7-3215-a60f-5199f1814060.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:f2:04:62:68:ac:2c:55:b8:cc:11:f5:53:3f:71:75:51:e8:
         d3:71:5f:62:1f:30:1c:a7:6d:a2:f6:9d:00:c2:a6:01:6d:e6:
         89:e0:f1:b0:9c:ee:fd:99:5f:89:93:91:fe:78:66:c1:d6:61:
         4e:2d:ef:0f:a7:f1:ce:5a:a7:cd:43:6a:c8:e9:35:77:0e:60:
         cf:c2:c5:d3:b6:55:4e:56:7c:de:d0:ca:40:2f:63:35:53:87:
         fa:c9:57:7d:3f:fc:66:e2:3f:c2:4b:f3:36:f9:da:53:28:7c:
         ac:c9:da:5d:a0:ba:f7:4b:b7:49:29:29:c4:0c:15:4b:74:40:
         35:0a:af:5c:06:20:ce:cf:7b:68:db:35:22:a6:51:72:f0:f4:
         ea:1f:a1:9f:11:9d:34:9f:b6:85:1a:67:3f:a4:94:16:2f:48:
         32:02:1e:97:81:c7:09:dc:88:a6:4a:89:a3:dc:d6:60:df:57:
         bf:5f:08:e6:f8:ce:99:a4:24:42:e9:4d:7a:4b:1b:15:6c:02:
         35:69:89:e3:74:f2:38:5e:6c:9b:ab:df:db:00:6d:e4:4d:e5:
         b2:6c:e2:fb:24:cf:cf:97:5d:49:2c:8e:3d:13:8c:1a:58:6f:
         0d:77:8e:5f:af:fa:e7:00:8a:bf:d1:78:a1:f2:46:91:be:3e:
         56:2a:ec:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHERxpKn8qh/gyPMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk
Njg4NWQxOWEtNzQwNC00ODFmLWIzYjgtODU5NTAyNzk3NzJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9NU1Ic/+Za/6ZHthYrzQR7RTwme/XaEjvbGT
S0VvMd6ZBRxq7dYrjRG3q+b/SkLyVJZ00JnDkyCRRkmHMZlCayHb/BLSWIgMKvwP
Mfx9nt+/RHff3hHsETMkT8xARWSjsA+ek1gkz8uEI1XA7nT2eg1HId2OMMO57Pe4
UDa9Xc/97TqYJ9Ru4zxDjh8Bs0hAWzZDf3Q3Z3oCjnHVcnJW/DDCCdLt7XJV+Dpr
p74wx68+2jbXZVOhnQowEwZa+1ekXRJo8pv59fMR2R16f7rslZfdWchH6BHlXENS
x8w/DKYqCF29xGK10Rj6QzIahq8l93+MVKJjQs6Xxp/YzppfTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP02B+TwJ54HiHMfzUpAHlFooZmLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDkwNzcyZGEtNmRmNy0z
MjE1LWE2MGYtNTE5OWYxODE0MDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop5oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAInyBGJorCxVuMwR9VM/cXVR6NNxX2IfMBynbaL2nQDCpgFt5ong8bCc
7v2ZX4mTkf54ZsHWYU4t7w+n8c5ap81DasjpNXcOYM/CxdO2VU5WfN7QykAvYzVT
h/rJV30//GbiP8JL8zb52lMofKzJ2l2guvdLt0kpKcQMFUt0QDUKr1wGIM7Pe2jb
NSKmUXLw9OofoZ8RnTSftoUaZz+klBYvSDICHpeBxwnciKZKiaPc1mDfV79fCOb4
zpmkJELpTXpLGxVsAjVpieN08jhebJur39sAbeRN5bJs4vskz8+XXUksjj0TjBpY
bw13jl+v+ucAir/ReKHyRpG+PlYq7HM=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:09:21 2025 by rpki-client