Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/fc927540-428b-37cb-903f-ca1e8fb6454c.roa
File:                     fc927540-428b-37cb-903f-ca1e8fb6454c.roa (raw, json)
Hash identifier:          ALBuxMFy3lVLScpnfBMZsc67ubNcsSA87Bo6OQNvL0c=
Subject key identifier:   A8:97:1E:6D:B9:72:91:71:C9:1E:04:66:93:14:00:F5:69:4B:92:A7
Certificate issuer:       /CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1
Certificate serial:       010D0C9F4328584B6E91FB7E2D73F170252A9380
Authority key identifier: 5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/fc927540-428b-37cb-903f-ca1e8fb6454c.roa
Signing time:             Mon 06 Oct 2025 13:00:41 +0000
ROA not before:           Mon 06 Oct 2025 13:00:41 +0000
ROA not after:            Sun 04 Jan 2026 14:00:41 +0000
asID:                     160
IP address blocks:        198.177.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6e:91:fb:7e:2d:73:f1:70:25:2a:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1
        Validity
            Not Before: Oct  6 13:00:41 2025 GMT
            Not After : Jan  4 14:00:41 2026 GMT
        Subject: CN=290fedb3-ed82-4e1b-aaee-58e30392b4d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:46:91:d0:83:97:0e:7c:07:26:b4:1a:ca:97:
                    d4:1f:50:fb:70:ce:72:79:04:f3:2c:30:d6:f5:00:
                    36:3a:0b:28:43:00:34:83:52:fc:5b:28:ee:18:fe:
                    7f:27:d9:c8:a3:32:88:dd:9f:4d:16:64:fb:18:fd:
                    79:15:ef:f2:3d:01:29:95:d7:ed:00:d9:df:91:7d:
                    6a:4c:ca:e3:82:02:80:44:59:c4:8b:2b:a4:e2:8f:
                    59:95:a1:cf:dc:62:e1:b6:d9:ec:e6:7c:9d:ed:24:
                    07:e6:1e:6c:d3:d4:a4:4d:6a:40:6d:89:8a:b7:c4:
                    a4:51:8b:15:3f:88:e5:13:f9:d0:45:ed:99:f2:3e:
                    dc:c0:c6:ae:77:d0:b1:ea:68:a5:ad:1f:a1:a9:f2:
                    2d:97:33:d8:eb:d3:cf:b3:46:6b:31:a6:95:0f:4b:
                    51:0b:c6:a1:7b:f3:c7:87:a7:1e:3c:88:4e:46:65:
                    32:ea:60:3a:c7:ce:91:b9:03:cf:12:2f:6b:8c:00:
                    c0:04:50:f6:76:53:1a:d3:b4:78:81:6b:ef:07:6a:
                    4d:19:7b:4c:51:3f:c6:88:0d:41:76:45:0f:e6:03:
                    08:cc:28:7d:3e:5b:98:ce:85:4b:4b:2c:76:7e:b6:
                    7f:0b:d1:08:73:e9:b9:5c:f9:93:ec:9e:52:ed:dc:
                    0a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:97:1E:6D:B9:72:91:71:C9:1E:04:66:93:14:00:F5:69:4B:92:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/fc927540-428b-37cb-903f-ca1e8fb6454c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.crl

            X509v3 Authority Key Identifier:
                keyid:5A:15:4B:45:E3:B1:02:C5:CE:B2:56:2D:B9:0F:CE:3B:E5:C5:75:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d4b3263a-4ccc-4c0f-a20c-2f59bbc7fac1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:18:42:af:67:9f:d1:08:dc:05:4c:80:ba:10:56:e3:00:d4:
         0c:db:cd:01:68:f0:bf:68:ce:ea:86:f0:55:95:11:57:c0:08:
         11:ca:72:54:97:f8:fe:18:d4:da:99:7c:e4:af:75:cd:25:12:
         4e:ce:80:75:e8:6f:0a:70:0c:bb:dd:a8:aa:b0:24:25:a1:23:
         60:1c:98:30:a4:5a:c4:4f:6f:93:94:15:17:b0:ba:cd:da:79:
         f8:b4:3b:c1:69:f4:38:01:8b:2a:d4:9f:e4:53:98:50:b8:4b:
         7a:c9:27:36:11:5c:1e:a3:0a:fd:97:6e:94:48:71:03:b1:02:
         b6:4a:ef:18:3a:3b:5f:80:15:a2:42:b4:8a:ac:77:e6:b5:71:
         1c:bf:81:80:7f:5b:03:4c:07:1c:ce:4d:20:10:4d:3d:7f:57:
         4b:ad:53:0e:41:20:47:26:ca:f4:ad:6d:95:ad:ff:f9:a0:49:
         d4:44:da:8e:6e:ae:35:d8:19:31:ce:58:46:08:5a:84:74:ef:
         25:2a:50:37:b3:c4:13:a5:6c:35:c9:aa:86:7f:3b:5a:e8:ed:
         c7:2d:91:42:81:bc:7f:84:2a:5e:78:c6:89:d5:a4:7a:7a:f0:
         b2:f4:68:30:16:5d:93:c5:f8:b8:8a:d5:44:93:a3:61:e4:c2:
         a7:4f:96:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtukft+LXPxcCUqk4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDRiMzI2M2EtNGNjYy00YzBmLWEyMGMtMmY1OWJiYzdm
YWMxMB4XDTI1MTAwNjEzMDA0MVoXDTI2MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk
MjkwZmVkYjMtZWQ4Mi00ZTFiLWFhZWUtNThlMzAzOTJiNGQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0aR0IOXDnwHJrQaypfUH1D7cM5yeQTzLDDW
9QA2OgsoQwA0g1L8WyjuGP5/J9nIozKI3Z9NFmT7GP15Fe/yPQEpldftANnfkX1q
TMrjggKARFnEiyuk4o9ZlaHP3GLhttns5nyd7SQH5h5s09SkTWpAbYmKt8SkUYsV
P4jlE/nQRe2Z8j7cwMaud9Cx6milrR+hqfItlzPY69PPs0ZrMaaVD0tRC8ahe/PH
h6cePIhORmUy6mA6x86RuQPPEi9rjADABFD2dlMa07R4gWvvB2pNGXtMUT/GiA1B
dkUP5gMIzCh9PluYzoVLSyx2frZ/C9EIc+m5XPmT7J5S7dwKmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKiXHm25cpFxyR4EZpMUAPVpS5KnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kNGIz
MjYzYS00Y2NjLTRjMGYtYTIwYy0yZjU5YmJjN2ZhYzEvZmM5Mjc1NDAtNDI4Yi0z
N2NiLTkwM2YtY2ExZThmYjY0NTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDRiMzI2M2EtNGNjYy00YzBmLWEy
MGMtMmY1OWJiYzdmYWMxL2Q0YjMyNjNhLTRjY2MtNGMwZi1hMjBjLTJmNTliYmM3
ZmFjMS5jcmwwHwYDVR0jBBgwFoAUWhVLReOxAsXOslYtuQ/OO+XFdRMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kNGIzMjYzYS00Y2NjLTRjMGYtYTIwYy0yZjU5
YmJjN2ZhYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrGZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHoYQq9nn9EI3AVMgLoQVuMA1AzbzQFo8L9ozuqG8FWVEVfACBHKclSX
+P4Y1NqZfOSvdc0lEk7OgHXobwpwDLvdqKqwJCWhI2AcmDCkWsRPb5OUFRewus3a
efi0O8Fp9DgBiyrUn+RTmFC4S3rJJzYRXB6jCv2XbpRIcQOxArZK7xg6O1+AFaJC
tIqsd+a1cRy/gYB/WwNMBxzOTSAQTT1/V0utUw5BIEcmyvStbZWt//mgSdRE2o5u
rjXYGTHOWEYIWoR07yUqUDezxBOlbDXJqoZ/O1ro7cctkUKBvH+EKl54xonVpHp6
8LL0aDAWXZPF+LiK1USTo2HkwqdPlkE=
-----END CERTIFICATE-----
Generated at Fri Oct 10 03:52:19 2025 by rpki-client