Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8c4cefc6-9eea-3ed5-811f-627142c3ed88.roa
File:                     8c4cefc6-9eea-3ed5-811f-627142c3ed88.roa (raw, json)
Hash identifier:          y82KakHaRkkJR+8xZBs0nvPMeVHeXvK08h253lWFBts=
Subject key identifier:   0F:F8:AF:DB:CB:70:97:B1:B2:2F:75:74:C8:4F:D3:00:F6:1A:6E:8F
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B7DECB3AE9503B8A78AA1BD80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8c4cefc6-9eea-3ed5-811f-627142c3ed88.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     15169
IP address blocks:        142.250.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:b3:ae:95:03:b8:a7:8a:a1:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=97df8efd-fba5-4333-9430-cf7706c5df8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:86:b5:68:0d:2c:fc:1d:90:b9:43:a9:a3:0e:
                    c2:2d:fc:04:a0:73:9e:7c:e4:2a:e7:75:f7:89:0f:
                    d6:d5:6a:5c:6b:7b:cc:83:42:25:c7:42:87:1e:37:
                    f8:7e:65:c7:ab:25:5e:35:23:61:ff:76:92:7a:43:
                    5e:fc:d1:e2:33:5b:64:8f:c5:c9:46:5a:dc:ba:cc:
                    f0:5b:cb:62:17:dc:96:d8:28:bd:db:62:b6:a1:fd:
                    3a:85:ac:ed:e5:34:99:ea:f6:cf:3c:87:fe:dc:d1:
                    62:18:b1:49:10:5f:ec:77:eb:28:ab:6c:e4:e3:91:
                    2b:f1:df:4d:06:51:bb:cf:c2:0f:11:a6:44:0d:16:
                    7b:69:3a:26:02:57:0c:98:d8:05:c2:2f:80:e3:a5:
                    b1:ed:b6:d3:e4:f5:62:ac:02:ce:94:37:87:a9:cc:
                    15:da:c3:ac:86:7c:fe:36:3a:85:a9:74:4f:5d:20:
                    77:2b:0c:2b:e6:77:8b:55:ef:47:b3:f2:c9:cf:1d:
                    c9:5a:65:36:6d:82:a6:d0:16:d0:3d:cc:1b:46:7c:
                    5f:3b:99:98:3c:e1:9b:9b:ff:63:c9:d1:72:3f:3a:
                    d5:39:94:b9:3a:ff:a2:1d:48:55:86:fe:28:ad:d4:
                    cd:c9:56:d3:a4:1f:b3:53:03:4f:4f:7c:48:19:10:
                    9c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F8:AF:DB:CB:70:97:B1:B2:2F:75:74:C8:4F:D3:00:F6:1A:6E:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8c4cefc6-9eea-3ed5-811f-627142c3ed88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:e6:78:fc:99:eb:34:a3:b1:1f:90:8a:ed:37:69:d5:42:fd:
         92:99:32:c5:bd:a0:00:2c:3e:2f:aa:fb:95:33:53:b3:36:de:
         5f:a1:e0:73:9d:0e:f6:4b:fd:ed:70:dd:3f:35:c1:f9:85:ff:
         0f:35:19:fe:92:ec:d2:0d:0b:de:42:72:e7:c7:4d:19:07:35:
         15:e0:d9:3f:8f:fd:7a:25:88:c2:e7:9f:70:59:a0:4f:03:df:
         fa:80:14:db:4e:68:bb:27:9e:3c:03:77:07:51:fc:57:b5:3a:
         30:08:36:ba:bb:bd:65:10:43:ba:6a:55:8f:58:82:bf:cd:c6:
         53:42:bd:cf:fd:81:e2:95:b1:96:3c:12:9b:89:16:60:c6:8b:
         86:20:f2:97:05:b2:a1:1f:09:a8:a4:f2:ff:4e:c9:ff:e9:21:
         46:53:d3:a0:2e:cb:db:0f:0d:5d:27:cf:4d:31:fe:de:7b:11:
         8b:9d:70:d8:03:a2:e0:33:10:06:38:90:5d:00:a1:dc:86:0f:
         99:e5:05:1d:65:83:a9:b2:e5:9d:8c:d6:cc:31:9a:99:72:ba:
         b7:e9:74:9b:d0:70:12:7f:2c:0a:d1:f9:20:91:43:3f:0a:fa:
         d2:2f:d6:e5:36:f1:42:a5:d2:29:59:a7:0f:4c:ef:30:2a:68:
         f7:f4:c8:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97LOulQO4p4qhvYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk
OTdkZjhlZmQtZmJhNS00MzMzLTk0MzAtY2Y3NzA2YzVkZjhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoa1aA0s/B2QuUOpow7CLfwEoHOefOQq53X3
iQ/W1Wpca3vMg0Ilx0KHHjf4fmXHqyVeNSNh/3aSekNe/NHiM1tkj8XJRlrcuszw
W8tiF9yW2Ci922K2of06hazt5TSZ6vbPPIf+3NFiGLFJEF/sd+soq2zk45Er8d9N
BlG7z8IPEaZEDRZ7aTomAlcMmNgFwi+A46Wx7bbT5PVirALOlDeHqcwV2sOshnz+
NjqFqXRPXSB3Kwwr5neLVe9Hs/LJzx3JWmU2bYKm0BbQPcwbRnxfO5mYPOGbm/9j
ydFyPzrVOZS5Ov+iHUhVhv4ordTNyVbTpB+zUwNPT3xIGRCcPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA/4r9vLcJexsi91dMhP0wD2Gm6PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGM0Y2VmYzYtOWVlYS0z
ZWQ1LTgxMWYtNjI3MTQyYzNlZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvoWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKbmePyZ6zSjsR+Qiu03adVC/ZKZMsW9oAAsPi+q+5UzU7M23l+h4HOd
DvZL/e1w3T81wfmF/w81Gf6S7NINC95CcufHTRkHNRXg2T+P/XoliMLnn3BZoE8D
3/qAFNtOaLsnnjwDdwdR/Fe1OjAINrq7vWUQQ7pqVY9Ygr/NxlNCvc/9geKVsZY8
EpuJFmDGi4Yg8pcFsqEfCaik8v9Oyf/pIUZT06Auy9sPDV0nz00x/t57EYudcNgD
ouAzEAY4kF0AodyGD5nlBR1lg6my5Z2M1swxmplyurfpdJvQcBJ/LArR+SCRQz8K
+tIv1uU28UKl0ilZpw9M7zAqaPf0yJg=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:43:45 2025 by rpki-client