Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b8e04097-9cf9-319f-b848-5e2a18e47e51.roa
File:                     b8e04097-9cf9-319f-b848-5e2a18e47e51.roa (raw, json)
Hash identifier:          aAPecxsNxb+mqBkVnc87EskS3dl8joTcSgI4EK162dg=
Subject key identifier:   4B:F1:5F:1E:7E:BB:82:DB:7D:3F:56:3E:97:50:35:0E:E5:70:58:03
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584B76F25A2FFF1990B48F0D0680
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b8e04097-9cf9-319f-b848-5e2a18e47e51.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     7018
IP address blocks:        158.62.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:5a:2f:ff:19:90:b4:8f:0d:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=2a44c52c-778c-4401-95e6-e4b991b7a881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4d:b0:41:d9:ff:47:cc:ee:0e:54:9c:15:9a:
                    56:c2:19:53:4c:7f:c7:e7:75:90:70:dd:d0:dc:12:
                    12:80:dc:19:be:36:07:c3:fe:b3:ce:a9:52:6a:30:
                    b0:45:c2:9d:30:d3:cc:12:b6:ad:e2:68:19:c9:ac:
                    18:4e:91:5b:f3:77:2a:78:0f:09:53:43:4b:3e:42:
                    fc:20:2e:aa:f0:82:28:19:d1:6a:65:74:8b:1e:7e:
                    81:e4:64:10:d4:9b:2d:42:c7:24:20:d3:dd:00:8f:
                    d0:1a:92:37:e6:9c:9c:b2:24:c0:c9:5f:c0:64:63:
                    b7:91:11:de:b5:ce:b6:70:e8:7f:8a:b4:a6:61:6b:
                    b1:7a:04:7c:d3:33:54:a9:60:2b:b8:38:df:9a:1d:
                    45:44:0b:83:7e:3e:03:48:f9:e8:82:2e:4d:8d:55:
                    a3:09:f8:57:10:29:d8:57:e3:4c:13:9e:18:9e:d6:
                    30:0f:3f:a0:a3:90:9a:65:8b:1c:d8:51:4b:2e:45:
                    47:4d:22:05:d8:fa:1a:73:7c:9c:35:1b:ce:4b:b8:
                    38:f0:b8:d0:09:56:81:11:44:da:83:41:8a:89:48:
                    cc:b5:12:a3:f1:d5:71:00:e2:0e:55:fb:b2:c0:b7:
                    2f:c5:e2:5e:81:a6:7e:e2:af:d0:6f:f8:13:a8:ed:
                    40:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F1:5F:1E:7E:BB:82:DB:7D:3F:56:3E:97:50:35:0E:E5:70:58:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b8e04097-9cf9-319f-b848-5e2a18e47e51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.62.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:04:b8:94:85:d7:56:00:03:db:b9:7d:42:c4:39:23:e0:38:
         63:29:56:ae:f4:92:d7:4b:cc:4f:e3:0d:d2:ab:76:a5:52:82:
         ac:38:57:eb:40:93:6d:48:9f:5c:34:9c:33:cd:28:99:b5:82:
         cf:44:d1:15:1d:58:ce:d4:27:a5:63:87:34:dd:a0:6c:42:40:
         8a:d9:a1:49:e8:a2:83:d1:9d:4e:3d:c2:f8:75:66:8c:99:4e:
         ca:a7:16:c6:53:0d:20:7c:40:ad:35:87:28:96:f5:d8:31:81:
         b5:81:d0:b4:9f:fa:65:b7:8d:85:85:5a:7e:59:2b:b0:c3:2a:
         c1:2f:36:71:83:39:eb:94:9f:17:98:aa:d2:93:02:93:2b:21:
         3e:41:8c:68:66:85:25:49:e0:6e:9d:45:1d:fc:df:64:15:7c:
         96:87:9e:08:5d:17:74:aa:16:ad:da:bd:21:b4:05:7b:ca:97:
         ce:c1:3d:eb:f6:d0:d8:ef:dd:79:e5:6d:06:16:4b:c9:1e:f0:
         45:5b:65:59:7b:b3:40:61:a5:c7:d7:9d:06:1b:80:df:cb:86:
         59:88:41:92:3e:a5:68:77:09:04:55:92:d0:19:3f:45:14:2f:
         52:b1:13:8e:69:04:97:14:c3:8f:56:c1:a7:db:db:62:6d:b1:
         d4:28:92:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28lov/xmQtI8NBoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk
MmE0NGM1MmMtNzc4Yy00NDAxLTk1ZTYtZTRiOTkxYjdhODgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE2wQdn/R8zuDlScFZpWwhlTTH/H53WQcN3Q
3BISgNwZvjYHw/6zzqlSajCwRcKdMNPMErat4mgZyawYTpFb83cqeA8JU0NLPkL8
IC6q8IIoGdFqZXSLHn6B5GQQ1JstQsckINPdAI/QGpI35pycsiTAyV/AZGO3kRHe
tc62cOh/irSmYWuxegR80zNUqWAruDjfmh1FRAuDfj4DSPnogi5NjVWjCfhXECnY
V+NME54YntYwDz+go5CaZYsc2FFLLkVHTSIF2Poac3ycNRvOS7g48LjQCVaBEUTa
g0GKiUjMtRKj8dVxAOIOVfuywLcvxeJegaZ+4q/Qb/gTqO1AFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEvxXx5+u4LbfT9WPpdQNQ7lcFgDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYjhlMDQwOTctOWNmOS0z
MTlmLWI4NDgtNWUyYTE4ZTQ3ZTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnj7TMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANcEuJSF11YAA9u5fULEOSPgOGMpVq70ktdLzE/jDdKrdqVSgqw4V+tA
k21In1w0nDPNKJm1gs9E0RUdWM7UJ6VjhzTdoGxCQIrZoUnoooPRnU49wvh1ZoyZ
TsqnFsZTDSB8QK01hyiW9dgxgbWB0LSf+mW3jYWFWn5ZK7DDKsEvNnGDOeuUnxeY
qtKTApMrIT5BjGhmhSVJ4G6dRR3832QVfJaHnghdF3SqFq3avSG0BXvKl87BPev2
0Njv3XnlbQYWS8ke8EVbZVl7s0BhpcfXnQYbgN/LhlmIQZI+pWh3CQRVktAZP0UU
L1KxE45pBJcUw49Wwafb22JtsdQokqY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:54:57 2025 by rpki-client