Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4/b1ea09db-6881-386b-a227-66ff08df673c.roa
File:                     b1ea09db-6881-386b-a227-66ff08df673c.roa (raw, json)
Hash identifier:          wMAMHd4md6wp8vaTxkkS7xtwi1+TdINmq7/QoQNPL7A=
Subject key identifier:   21:C8:FD:DB:5F:63:21:0E:D3:95:ED:B7:35:EC:2E:CB:33:48:25:A2
Certificate issuer:       /CN=a327a78b-38c6-4e70-927c-f4959d89c6b4
Certificate serial:       010D0C9F4328584B4E43E6D06F9848DC2ACE46C0
Authority key identifier: 75:F8:DA:CF:71:F3:EE:F4:B2:0A:29:85:5F:D3:F7:CA:62:ED:5A:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4/b1ea09db-6881-386b-a227-66ff08df673c.roa
Signing time:             Wed 24 Sep 2025 23:17:34 +0000
ROA not before:           Wed 24 Sep 2025 23:17:34 +0000
ROA not after:            Wed 24 Dec 2025 00:17:34 +0000
asID:                     16509
IP address blocks:        167.150.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4/a327a78b-38c6-4e70-927c-f4959d89c6b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4/a327a78b-38c6-4e70-927c-f4959d89c6b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:43:e6:d0:6f:98:48:dc:2a:ce:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a327a78b-38c6-4e70-927c-f4959d89c6b4
        Validity
            Not Before: Sep 24 23:17:34 2025 GMT
            Not After : Dec 24 00:17:34 2025 GMT
        Subject: CN=96fafa0c-0f37-44fe-bb27-d34a0a863434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cf:d4:ca:21:4b:f6:67:bb:c9:5b:79:a9:13:
                    82:16:db:a0:ce:04:6a:57:a1:e2:4a:be:f4:2b:79:
                    c1:54:f1:09:d4:d7:61:00:3e:05:51:aa:4d:ad:e5:
                    f2:c1:e2:c4:35:31:e1:38:2a:39:55:96:c9:bc:f1:
                    20:f7:fd:db:6c:fc:55:1e:60:ca:f5:45:c5:8d:0f:
                    b4:bf:41:52:0e:ae:08:b8:d9:70:11:af:74:0b:a2:
                    3a:e5:d2:2d:68:1d:07:1d:01:41:40:8c:60:cc:35:
                    4d:28:03:c7:cb:2a:1d:b2:66:77:37:9b:03:6c:3a:
                    c1:3b:1a:96:a8:d7:36:cd:bf:1c:10:e0:10:b3:5b:
                    4b:21:31:b2:8c:49:89:1d:dc:e3:ab:42:5e:a5:a2:
                    2d:f5:e2:60:16:68:b9:91:27:68:66:b3:ca:db:8c:
                    45:96:67:51:d0:ca:13:ec:d6:f5:6a:56:69:e1:de:
                    f4:50:22:cd:88:47:19:90:4e:01:3b:2c:c1:3e:d5:
                    77:52:95:89:5a:b9:cb:eb:e4:44:dc:a5:d4:64:fa:
                    7f:37:10:8b:2e:10:1a:97:98:8b:5a:a8:f9:28:b7:
                    c5:6e:b3:f0:d6:34:24:d9:5c:d3:ad:2a:07:35:5f:
                    27:d3:7a:f7:51:65:1f:d2:09:e9:eb:89:31:0a:a5:
                    cd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C8:FD:DB:5F:63:21:0E:D3:95:ED:B7:35:EC:2E:CB:33:48:25:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4/b1ea09db-6881-386b-a227-66ff08df673c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4/a327a78b-38c6-4e70-927c-f4959d89c6b4.crl

            X509v3 Authority Key Identifier:
                keyid:75:F8:DA:CF:71:F3:EE:F4:B2:0A:29:85:5F:D3:F7:CA:62:ED:5A:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.150.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:4a:47:ac:80:1e:30:e4:12:db:92:7a:77:2c:0b:eb:04:63:
         4a:e1:b4:5a:e2:b5:e9:d0:19:98:39:56:81:eb:67:e6:9d:3f:
         5b:42:dc:07:97:ac:7d:b0:c5:94:ef:e5:65:d9:f0:d9:db:05:
         91:e4:22:50:d4:b2:c9:30:9b:47:33:1d:54:8e:8c:2a:81:f6:
         83:d4:d8:98:b9:52:fe:99:90:99:2a:db:8e:24:6b:b5:16:10:
         f8:ca:b3:90:a8:94:89:d6:fc:f8:c4:bb:cc:b6:ad:58:19:9c:
         33:57:c5:eb:28:00:b6:89:be:30:38:0d:51:86:4b:2a:d3:3a:
         ab:c0:48:87:61:a9:ed:9e:2b:18:fd:66:a8:8b:36:56:2c:45:
         65:ac:b1:41:c0:51:23:40:ce:30:d5:17:75:a8:c8:1b:55:2d:
         37:33:b4:72:e8:15:36:39:ea:63:12:d8:12:a7:2b:e8:71:2f:
         3c:3f:5a:05:72:4b:95:e1:81:ec:3e:99:5c:84:99:24:42:30:
         bd:63:e1:a2:ab:b3:7e:e0:cd:ca:ad:08:f2:4a:1e:3e:16:16:
         4e:88:fc:2b:b6:6b:e1:62:cb:c1:05:3f:ee:4c:28:04:ce:ee:
         82:a9:fe:5f:58:33:ae:78:54:d5:48:e4:2f:22:ea:64:82:4b:
         a3:d6:c4:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOQ+bQb5hI3CrORsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTMyN2E3OGItMzhjNi00ZTcwLTkyN2MtZjQ5NTlkODlj
NmI0MB4XDTI1MDkyNDIzMTczNFoXDTI1MTIyNDAwMTczNFowLzEtMCsGA1UEAxMk
OTZmYWZhMGMtMGYzNy00NGZlLWJiMjctZDM0YTBhODYzNDM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8/UyiFL9me7yVt5qROCFtugzgRqV6HiSr70
K3nBVPEJ1NdhAD4FUapNreXyweLENTHhOCo5VZbJvPEg9/3bbPxVHmDK9UXFjQ+0
v0FSDq4IuNlwEa90C6I65dItaB0HHQFBQIxgzDVNKAPHyyodsmZ3N5sDbDrBOxqW
qNc2zb8cEOAQs1tLITGyjEmJHdzjq0JepaIt9eJgFmi5kSdoZrPK24xFlmdR0MoT
7Nb1alZp4d70UCLNiEcZkE4BOyzBPtV3UpWJWrnL6+RE3KXUZPp/NxCLLhAal5iL
Wqj5KLfFbrPw1jQk2VzTrSoHNV8n03r3UWUf0gnp64kxCqXNvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCHI/dtfYyEO05XttzXsLsszSCWiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hMzI3
YTc4Yi0zOGM2LTRlNzAtOTI3Yy1mNDk1OWQ4OWM2YjQvYjFlYTA5ZGItNjg4MS0z
ODZiLWEyMjctNjZmZjA4ZGY2NzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYTMyN2E3OGItMzhjNi00ZTcwLTky
N2MtZjQ5NTlkODljNmI0L2EzMjdhNzhiLTM4YzYtNGU3MC05MjdjLWY0OTU5ZDg5
YzZiNC5jcmwwHwYDVR0jBBgwFoAUdfjaz3Hz7vSyCimFX9P3ymLtWv8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9hMzI3YTc4Yi0zOGM2LTRlNzAtOTI3Yy1mNDk1
OWQ4OWM2YjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp5bhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABlKR6yAHjDkEtuSencsC+sEY0rhtFritenQGZg5VoHrZ+adP1tC3AeX
rH2wxZTv5WXZ8NnbBZHkIlDUsskwm0czHVSOjCqB9oPU2Ji5Uv6ZkJkq244ka7UW
EPjKs5ColInW/PjEu8y2rVgZnDNXxesoALaJvjA4DVGGSyrTOqvASIdhqe2eKxj9
ZqiLNlYsRWWssUHAUSNAzjDVF3WoyBtVLTcztHLoFTY56mMS2BKnK+hxLzw/WgVy
S5Xhgew+mVyEmSRCML1j4aKrs37gzcqtCPJKHj4WFk6I/Cu2a+Fiy8EFP+5MKATO
7oKp/l9YM654VNVI5C8i6mSCS6PWxKQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:33:35 2025 by rpki-client