Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fab8cf69-b3be-3eb2-9369-e0096e6e1292.roa
File:                     fab8cf69-b3be-3eb2-9369-e0096e6e1292.roa (raw, json)
Hash identifier:          HIGtEeplIYSC5QNnsqjxWqtM3/Kn9IwjHNSE4FHwLKI=
Subject key identifier:   40:8B:89:24:AC:DB:17:4C:BB:76:92:67:2A:06:F7:28:20:0E:13:75
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A5CFD37895A704B70F9C4DC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fab8cf69-b3be-3eb2-9369-e0096e6e1292.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     33668
IP address blocks:        162.151.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fd:37:89:5a:70:4b:70:f9:c4:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=677145b4-4717-422e-b41b-caa878460e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b1:5b:69:fa:02:f1:02:6d:f9:6c:8c:3e:ad:
                    39:f6:7f:cf:6e:f9:cc:13:f5:89:ab:13:7d:43:2b:
                    05:6f:df:7c:0a:ee:02:73:aa:9d:99:73:da:3d:00:
                    06:57:9a:03:85:74:c6:5c:b4:a5:0e:4f:72:25:8a:
                    c1:09:bb:a2:44:f1:9f:8c:7a:19:92:0f:58:15:32:
                    6a:8d:f1:3a:15:d9:b6:81:3f:41:11:bc:a7:f5:41:
                    98:26:e7:3e:87:de:1d:23:81:51:e1:ef:48:30:bc:
                    16:70:c3:48:f6:be:2d:b5:13:e1:ee:26:36:a3:3e:
                    33:d6:6b:ec:bb:86:27:28:1d:b7:bf:c0:bd:0b:97:
                    31:22:51:09:5a:84:d9:b0:f5:09:cd:34:6f:ba:6d:
                    71:35:a7:53:c9:d7:59:43:ae:c2:e2:bf:0a:dc:11:
                    f2:82:17:bb:95:de:50:90:59:2f:39:0e:81:79:24:
                    01:3d:64:61:4b:e9:42:90:19:33:c1:b7:bb:dd:c8:
                    1c:7c:8e:32:3f:a1:06:d8:d6:08:8d:df:9b:75:96:
                    52:f4:4b:1d:bf:3c:de:ad:43:bf:1b:28:bc:3a:c6:
                    06:5d:4e:0b:31:67:7a:ed:d4:7d:9e:e2:02:20:93:
                    86:c3:56:58:d7:7a:8d:d5:78:1f:7c:5b:88:1f:58:
                    f8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:8B:89:24:AC:DB:17:4C:BB:76:92:67:2A:06:F7:28:20:0E:13:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fab8cf69-b3be-3eb2-9369-e0096e6e1292.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.151.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:b3:43:7d:97:27:2a:a9:56:f1:d6:18:aa:0b:86:33:3e:17:
         98:33:fa:0b:d8:2c:17:71:4b:10:44:54:5f:e0:c2:77:eb:b2:
         9e:43:a1:fd:99:d4:7c:67:5d:44:65:05:5b:df:7e:8c:06:40:
         08:9b:d7:37:6c:53:d7:1b:ab:bc:b3:eb:59:5f:15:35:40:f4:
         49:ac:ae:29:1e:b0:6f:e7:6f:60:f2:af:fa:ad:12:ab:bc:2e:
         21:57:ce:dc:44:8d:b0:d5:a9:97:5f:74:6f:70:ba:27:9e:0e:
         bc:f4:18:72:c3:94:75:d5:f7:5a:99:5e:30:c5:f9:55:16:9e:
         64:e9:f6:e9:27:ba:d0:90:07:d5:3f:a1:58:91:28:e6:ea:49:
         06:a0:23:cb:92:33:31:8a:4b:18:1c:5d:69:94:38:88:57:92:
         a1:1f:f0:c2:6c:33:bd:28:f5:63:2b:59:b6:da:f2:cd:3a:d6:
         94:7a:14:70:74:16:49:d9:48:1c:1a:c3:16:f8:8d:d3:dd:76:
         20:62:db:ac:13:fb:b2:7d:9c:fe:8e:0d:40:b3:f5:0e:d0:41:
         28:ca:f9:bc:03:de:3d:9a:1b:a4:01:66:81:5f:9d:52:06:22:
         40:95:4f:32:9b:45:67:a4:2d:8a:c3:58:fd:38:c0:07:02:55:
         62:a5:90:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/TeJWnBLcPnE3AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
Njc3MTQ1YjQtNDcxNy00MjJlLWI0MWItY2FhODc4NDYwZTdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLFbafoC8QJt+WyMPq059n/PbvnME/WJqxN9
QysFb998Cu4Cc6qdmXPaPQAGV5oDhXTGXLSlDk9yJYrBCbuiRPGfjHoZkg9YFTJq
jfE6Fdm2gT9BEbyn9UGYJuc+h94dI4FR4e9IMLwWcMNI9r4ttRPh7iY2oz4z1mvs
u4YnKB23v8C9C5cxIlEJWoTZsPUJzTRvum1xNadTyddZQ67C4r8K3BHyghe7ld5Q
kFkvOQ6BeSQBPWRhS+lCkBkzwbe73cgcfI4yP6EG2NYIjd+bdZZS9EsdvzzerUO/
Gyi8OsYGXU4LMWd67dR9nuICIJOGw1ZY13qN1XgffFuIH1j4pwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFECLiSSs2xdMu3aSZyoG9yggDhN1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmFiOGNmNjktYjNiZS0z
ZWIyLTkzNjktZTAwOTZlNmUxMjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAopdnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEuzQ32XJyqpVvHWGKoLhjM+F5gz+gvYLBdxSxBEVF/gwnfrsp5Dof2Z
1HxnXURlBVvffowGQAib1zdsU9cbq7yz61lfFTVA9EmsrikesG/nb2Dyr/qtEqu8
LiFXztxEjbDVqZdfdG9wuieeDrz0GHLDlHXV91qZXjDF+VUWnmTp9uknutCQB9U/
oViRKObqSQagI8uSMzGKSxgcXWmUOIhXkqEf8MJsM70o9WMrWbba8s061pR6FHB0
FknZSBwawxb4jdPddiBi26wT+7J9nP6ODUCz9Q7QQSjK+bwD3j2aG6QBZoFfnVIG
IkCVTzKbRWekLYrDWP04wAcCVWKlkNM=
-----END CERTIFICATE-----
Generated at Sun Jul 20 17:15:52 2025 by rpki-client