Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/da629bdb-c64c-3cbe-ae9c-2824ba58bbb9.roa
File:                     da629bdb-c64c-3cbe-ae9c-2824ba58bbb9.roa (raw, json)
Hash identifier:          EULYhMJjva/V47sYxES1d4BgJi3g5BEgw2T9vTcZ8N8=
Subject key identifier:   88:C3:75:E5:06:C7:C1:F7:25:76:E4:EA:E1:78:DB:3E:CC:87:3F:19
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F4328584B72C1EB7F35E53DB861AE7D00
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/da629bdb-c64c-3cbe-ae9c-2824ba58bbb9.roa
Signing time:             Wed 08 Oct 2025 01:00:29 +0000
ROA not before:           Wed 08 Oct 2025 01:00:29 +0000
ROA not after:            Tue 06 Jan 2026 02:00:29 +0000
asID:                     63199
IP address blocks:        148.153.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:72:c1:eb:7f:35:e5:3d:b8:61:ae:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: Oct  8 01:00:29 2025 GMT
            Not After : Jan  6 02:00:29 2026 GMT
        Subject: CN=df33005a-4cc4-41f4-85a9-726d82ff9c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1f:0a:ee:d7:3d:5c:3e:bd:36:6b:d4:7c:a1:
                    11:2b:ec:f8:47:53:ef:5c:9d:e0:ee:35:5d:89:d6:
                    59:03:c7:3a:e9:ac:64:80:16:6f:44:75:fd:93:9a:
                    31:c7:dd:e0:bb:7f:19:9d:e6:0d:ed:f1:f9:51:7a:
                    5b:f3:2d:0d:59:84:62:a7:68:05:d3:79:50:7a:81:
                    a1:e9:33:f0:74:65:90:d1:da:7e:0a:f0:f4:b9:75:
                    d2:a1:bc:36:82:e1:6f:fb:b5:ac:14:3c:d7:c2:9b:
                    27:fe:d6:a8:af:5d:2d:8e:94:2e:be:ca:3f:3d:a1:
                    5c:1b:f7:65:0e:bb:ff:bf:d9:c7:bc:4a:eb:03:4c:
                    bd:9d:a8:5c:48:a0:a7:b3:f9:2f:74:b6:77:7a:7a:
                    e5:e0:9d:ec:0e:01:82:0d:78:49:40:d7:64:51:83:
                    5c:47:9e:12:d1:32:42:e3:7d:e0:81:df:9e:02:df:
                    f4:57:79:95:a1:2e:70:1f:1e:f0:27:56:de:cc:9c:
                    31:f9:87:4e:af:01:ef:39:a5:40:24:1d:04:ed:7a:
                    27:a0:d1:34:da:48:e8:89:f4:93:2c:03:da:93:df:
                    c5:8f:ef:d0:9a:16:98:37:df:68:d3:0f:3e:bc:e8:
                    c2:a3:ca:3a:20:87:20:b1:38:93:60:ed:16:5f:ec:
                    6c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C3:75:E5:06:C7:C1:F7:25:76:E4:EA:E1:78:DB:3E:CC:87:3F:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/da629bdb-c64c-3cbe-ae9c-2824ba58bbb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:22:b4:69:95:c2:ff:f5:91:91:77:a0:d7:d6:7a:d3:93:b0:
         f9:b8:bf:02:99:da:c3:e1:ac:70:46:54:6e:8a:7a:e7:ad:36:
         d1:ab:f8:a4:8f:de:56:31:3d:39:7e:b0:af:9f:11:4c:a6:01:
         1a:30:79:f8:9a:d0:8c:d5:6e:44:10:0b:fe:0b:52:00:33:da:
         17:70:a8:2b:75:8e:1a:9b:7c:df:33:d7:2b:0b:2d:ad:36:9e:
         da:7c:4a:2b:ab:1b:d9:b1:fd:61:08:e8:e5:e2:2b:60:99:f6:
         f4:d1:8f:bf:4b:2e:83:02:85:c5:94:85:12:f0:55:4c:de:bf:
         5d:db:a6:0c:5d:28:e5:08:e0:aa:e8:cd:ee:c1:36:20:e3:85:
         18:60:14:23:6b:23:8f:16:c8:01:66:bd:74:11:f0:5b:b4:5d:
         9b:cd:c1:07:6a:f3:91:25:2f:a0:a2:dc:86:35:1c:b4:4a:68:
         2c:19:9a:db:37:4a:ce:03:bd:34:87:92:da:ed:6e:ad:23:a4:
         97:0e:4c:41:10:90:1c:cd:c4:32:f3:77:5e:db:d0:f9:3d:17:
         80:76:c7:b6:6f:4c:ac:70:97:7b:a5:e8:4c:f8:22:46:1c:bb:
         5a:08:14:26:34:6d:b0:9f:ec:55:1f:16:73:4b:fd:02:a1:ef:
         16:58:a0:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtywet/NeU9uGGufQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx
YWE3MB4XDTI1MTAwODAxMDAyOVoXDTI2MDEwNjAyMDAyOVowLzEtMCsGA1UEAxMk
ZGYzMzAwNWEtNGNjNC00MWY0LTg1YTktNzI2ZDgyZmY5Yzg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB8K7tc9XD69NmvUfKERK+z4R1PvXJ3g7jVd
idZZA8c66axkgBZvRHX9k5oxx93gu38ZneYN7fH5UXpb8y0NWYRip2gF03lQeoGh
6TPwdGWQ0dp+CvD0uXXSobw2guFv+7WsFDzXwpsn/taor10tjpQuvso/PaFcG/dl
Drv/v9nHvErrA0y9nahcSKCns/kvdLZ3enrl4J3sDgGCDXhJQNdkUYNcR54S0TJC
433ggd+eAt/0V3mVoS5wHx7wJ1bezJwx+YdOrwHvOaVAJB0E7XonoNE02kjoifST
LAPak9/Fj+/QmhaYN99o0w8+vOjCo8o6IIcgsTiTYO0WX+xs9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIjDdeUGx8H3JXbk6uF42z7Mhz8ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1
ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvZGE2MjliZGItYzY0Yy0z
Y2JlLWFlOWMtMjgyNGJhNThiYmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky
YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh
MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz
YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJmVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB0itGmVwv/1kZF3oNfWetOTsPm4vwKZ2sPhrHBGVG6KeuetNtGr+KSP
3lYxPTl+sK+fEUymARowefia0IzVbkQQC/4LUgAz2hdwqCt1jhqbfN8z1ysLLa02
ntp8SiurG9mx/WEI6OXiK2CZ9vTRj79LLoMChcWUhRLwVUzev13bpgxdKOUI4Kro
ze7BNiDjhRhgFCNrI48WyAFmvXQR8Fu0XZvNwQdq85ElL6Ci3IY1HLRKaCwZmts3
Ss4DvTSHktrtbq0jpJcOTEEQkBzNxDLzd17b0Pk9F4B2x7ZvTKxwl3ul6Ez4IkYc
u1oIFCY0bbCf7FUfFnNL/QKh7xZYoFU=
-----END CERTIFICATE-----
Generated at Sat Oct 11 07:24:25 2025 by rpki-client