Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/529b29f6-454a-3116-a0c5-2b5d209db581.roa
File:                     529b29f6-454a-3116-a0c5-2b5d209db581.roa (raw, json)
Hash identifier:          +ZpW4uJ5BuswxSx5mKzmY9fEJ8IomDUC2hNWz5mgfm4=
Subject key identifier:   9E:23:44:6B:7B:F0:A8:82:35:27:5D:4B:C6:65:22:41:FC:52:29:5C
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B64CE627F8203B2FC8136CF80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/529b29f6-454a-3116-a0c5-2b5d209db581.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     30036
IP address blocks:        150.195.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:62:7f:82:03:b2:fc:81:36:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=a5f67df0-ff28-48d7-befd-b9d346bdb9f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5c:43:ae:2f:e2:61:36:8a:77:f8:78:af:75:
                    09:e1:22:d6:48:46:1b:be:91:bb:b7:a2:74:61:d1:
                    94:f2:f5:8d:5b:b8:f3:b6:10:7b:db:48:fc:b5:03:
                    78:b3:e0:47:f7:29:bd:9c:f2:61:3c:21:1e:54:c8:
                    85:d2:19:b0:57:bc:b7:d7:73:1a:ec:47:be:4e:36:
                    8b:ed:5c:13:0f:b3:25:ce:de:54:ef:6d:ba:92:f2:
                    d4:62:bd:48:f5:6a:59:22:7b:0a:c8:61:54:37:94:
                    10:5a:9e:76:41:45:e9:42:7e:68:71:9d:b6:4f:a1:
                    86:c3:36:16:24:15:a0:e3:3c:07:bd:30:6c:2b:93:
                    8c:68:22:1f:c7:5e:e5:5a:8a:fc:79:4b:f5:85:66:
                    f9:6b:7b:74:01:f5:41:10:94:ba:69:dd:bf:26:b6:
                    29:69:35:5c:00:a7:c6:3b:3d:0b:7f:55:ce:86:38:
                    ac:b6:da:b2:e4:35:0e:23:1b:b1:c3:11:64:00:34:
                    9f:1d:75:72:cd:9a:2d:44:69:58:c7:61:55:78:72:
                    39:15:b8:8d:15:f2:76:81:39:20:46:a3:39:29:3d:
                    8e:5f:8e:41:27:8c:7d:26:85:45:53:3e:84:e5:c1:
                    b5:a2:af:9f:c7:7c:7e:13:f3:9b:6b:1e:f4:2a:fd:
                    5c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:23:44:6B:7B:F0:A8:82:35:27:5D:4B:C6:65:22:41:FC:52:29:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/529b29f6-454a-3116-a0c5-2b5d209db581.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.195.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:ae:9d:39:fd:af:22:a8:17:57:40:ce:5e:b0:1c:36:c3:ec:
         f9:1b:42:9a:3e:38:62:5d:23:96:de:28:e1:9c:2e:3e:5a:da:
         6c:5b:ce:5a:07:5b:e0:5f:2f:04:13:56:c8:f6:74:b0:e0:63:
         4b:dd:5b:8b:2f:1b:ef:d4:5d:bc:36:97:e0:56:ab:31:2d:70:
         56:fd:6c:c9:c3:92:99:cd:68:31:79:49:24:1a:53:92:26:1f:
         85:da:50:43:d9:1a:ef:ec:8a:0a:93:f6:5b:9c:04:73:45:44:
         cf:07:23:18:3f:93:96:93:ca:92:4d:9a:94:67:39:68:96:12:
         fc:40:c0:c7:eb:1c:f7:bc:53:c2:04:a6:41:28:e1:8e:03:2a:
         23:13:fd:f3:79:7d:f2:d6:d6:86:d6:bb:0d:84:5e:d1:98:35:
         07:32:98:c8:47:2e:84:7d:46:ff:a7:16:ef:53:09:f4:ae:3c:
         e8:2e:07:bb:45:67:7d:45:e0:de:1e:4f:9e:de:6b:cb:62:c0:
         5a:9c:98:36:2f:21:01:39:07:29:a6:e7:35:e1:e3:bf:a3:24:
         be:11:29:72:a3:e9:66:d9:b0:6d:24:3d:c2:05:46:a6:8a:ec:
         0e:ac:b3:e7:da:a3:b0:9c:47:04:b6:6b:04:de:6f:e7:ac:00:
         cc:ca:dc:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzmJ/ggOy/IE2z4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
YTVmNjdkZjAtZmYyOC00OGQ3LWJlZmQtYjlkMzQ2YmRiOWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1xDri/iYTaKd/h4r3UJ4SLWSEYbvpG7t6J0
YdGU8vWNW7jzthB720j8tQN4s+BH9ym9nPJhPCEeVMiF0hmwV7y313Ma7Ee+TjaL
7VwTD7Mlzt5U7226kvLUYr1I9WpZInsKyGFUN5QQWp52QUXpQn5ocZ22T6GGwzYW
JBWg4zwHvTBsK5OMaCIfx17lWor8eUv1hWb5a3t0AfVBEJS6ad2/JrYpaTVcAKfG
Oz0Lf1XOhjisttqy5DUOIxuxwxFkADSfHXVyzZotRGlYx2FVeHI5FbiNFfJ2gTkg
RqM5KT2OX45BJ4x9JoVFUz6E5cG1oq+fx3x+E/Obax70Kv1cwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ4jRGt78KiCNSddS8ZlIkH8UilcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTI5YjI5ZjYtNDU0YS0z
MTE2LWEwYzUtMmI1ZDIwOWRiNTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlsMaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAASunTn9ryKoF1dAzl6wHDbD7PkbQpo+OGJdI5beKOGcLj5a2mxbzloH
W+BfLwQTVsj2dLDgY0vdW4svG+/UXbw2l+BWqzEtcFb9bMnDkpnNaDF5SSQaU5Im
H4XaUEPZGu/sigqT9lucBHNFRM8HIxg/k5aTypJNmpRnOWiWEvxAwMfrHPe8U8IE
pkEo4Y4DKiMT/fN5ffLW1obWuw2EXtGYNQcymMhHLoR9Rv+nFu9TCfSuPOguB7tF
Z31F4N4eT57ea8tiwFqcmDYvIQE5Bymm5zXh47+jJL4RKXKj6WbZsG0kPcIFRqaK
7A6ss+fao7CcRwS2awTeb+esAMzK3OE=
-----END CERTIFICATE-----
Generated at Sat Oct 11 02:52:05 2025 by rpki-client