Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ca317456-25af-3fdb-a49a-8f45c170696c.roa
File:                     ca317456-25af-3fdb-a49a-8f45c170696c.roa (raw, json)
Hash identifier:          ohtoBuqEr79N0f1eK6bjpeVgRV5WgUaCR0dXUdUyh8A=
Subject key identifier:   DD:86:30:3D:B4:EB:C1:06:A5:77:BC:25:CD:77:8C:65:BD:18:34:A3
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A7A4B3CD7E4FB5833D84DE980
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ca317456-25af-3fdb-a49a-8f45c170696c.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     852
IP address blocks:        162.156.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:3c:d7:e4:fb:58:33:d8:4d:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=9c8bc1b0-3c82-438b-9e80-23395b8cce2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:86:a3:91:21:a4:d4:46:42:ab:70:5d:ad:f0:
                    29:24:52:5f:09:2d:e5:26:4b:37:4f:34:09:23:3a:
                    02:16:63:59:9b:9b:b5:35:94:de:84:31:a8:11:3d:
                    2c:76:02:3d:b2:7b:12:3f:99:62:aa:20:67:f9:52:
                    5f:fc:17:bc:c0:65:21:c2:6e:be:7b:e2:2c:60:ea:
                    f8:0c:b5:ec:1e:ae:7a:45:9a:a6:1d:b8:d1:08:72:
                    79:1d:9e:32:dd:46:cf:35:9f:8d:9b:e9:1f:e5:5b:
                    2b:43:ac:8a:0e:fe:80:1a:ac:e3:98:82:7d:58:35:
                    b9:0a:4d:9e:77:37:24:ac:fe:c9:ba:07:31:83:24:
                    e4:99:34:0f:3d:d5:44:7e:39:5a:ae:4b:3b:33:90:
                    a0:98:43:f1:49:03:47:73:e6:d3:e6:b7:eb:f7:fa:
                    8d:4f:b5:f2:49:b9:eb:17:2c:2e:4c:43:39:f8:21:
                    07:b3:5f:80:1e:e4:27:1f:6e:22:ea:b5:f4:9e:ff:
                    64:29:b2:53:4f:b7:ff:39:ef:7b:51:43:c6:ec:2b:
                    82:d1:e4:90:fd:ef:53:b9:75:5a:fa:1f:e9:ea:a3:
                    86:e4:e0:dd:05:8b:83:f5:dd:c5:53:24:98:7a:83:
                    c7:d2:d1:d9:16:f7:94:c6:42:c2:08:cd:86:c8:bf:
                    53:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:86:30:3D:B4:EB:C1:06:A5:77:BC:25:CD:77:8C:65:BD:18:34:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ca317456-25af-3fdb-a49a-8f45c170696c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.156.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:39:fe:20:77:3c:32:2f:81:99:09:0d:3b:63:ee:04:1c:f1:
         7b:04:e1:c1:ce:a4:d9:4f:30:f1:67:af:30:aa:4e:7f:b3:d1:
         06:f5:e1:fc:26:91:39:f4:55:2a:f4:93:da:32:10:22:d8:73:
         2e:39:2b:eb:29:06:44:0a:48:b0:00:71:f4:2a:df:54:2e:01:
         5e:10:c0:2f:ce:12:3f:dc:67:54:9d:c8:34:da:6a:34:66:a8:
         3f:a4:16:3d:29:32:ff:05:85:e2:10:ff:0c:f4:45:37:39:c4:
         ec:d1:cb:e3:6e:54:98:06:54:18:62:3a:53:16:b2:75:57:11:
         ae:f1:19:9b:00:4a:48:bc:f7:1f:d7:55:33:e0:13:d7:9c:bd:
         ed:c8:a1:50:bb:d1:67:86:8c:74:eb:db:df:b5:eb:68:3e:04:
         be:cc:ed:0e:2b:f8:ff:9d:4f:2f:b4:be:61:cd:21:a4:76:aa:
         a5:2a:5c:56:14:18:2d:e3:77:5d:4f:14:b4:69:e8:dd:0f:9c:
         8e:51:a8:60:2c:18:55:35:9a:2f:f0:62:ed:9e:8f:eb:f0:46:
         be:e7:66:ec:0e:e3:fb:93:50:bc:2f:c9:1c:a7:a4:05:9c:6e:
         d7:5b:28:e7:98:1b:ef:48:4c:4b:9e:72:5e:19:a4:d8:40:be:
         03:46:82:2a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEp6SzzX5PtYM9hN6YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk
OWM4YmMxYjAtM2M4Mi00MzhiLTllODAtMjMzOTViOGNjZTJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIajkSGk1EZCq3BdrfApJFJfCS3lJks3TzQJ
IzoCFmNZm5u1NZTehDGoET0sdgI9snsSP5liqiBn+VJf/Be8wGUhwm6+e+IsYOr4
DLXsHq56RZqmHbjRCHJ5HZ4y3UbPNZ+Nm+kf5VsrQ6yKDv6AGqzjmIJ9WDW5Ck2e
dzckrP7JugcxgyTkmTQPPdVEfjlarks7M5CgmEPxSQNHc+bT5rfr9/qNT7XySbnr
FywuTEM5+CEHs1+AHuQnH24i6rX0nv9kKbJTT7f/Oe97UUPG7CuC0eSQ/e9TuXVa
+h/p6qOG5ODdBYuD9d3FUySYeoPH0tHZFveUxkLCCM2GyL9TnwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFN2GMD2068EGpXe8Jc13jGW9GDSjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvY2EzMTc0NTYtMjVhZi0z
ZmRiLWE0OWEtOGY0NWMxNzA2OTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAopwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAjTn+IHc8Mi+BmQkNO2PuBBzxewThwc6k2U8w8WevMKpOf7PRBvXh/CaR
OfRVKvST2jIQIthzLjkr6ykGRApIsABx9CrfVC4BXhDAL84SP9xnVJ3INNpqNGao
P6QWPSky/wWF4hD/DPRFNznE7NHL425UmAZUGGI6UxaydVcRrvEZmwBKSLz3H9dV
M+AT15y97cihULvRZ4aMdOvb37XraD4EvsztDiv4/51PL7S+Yc0hpHaqpSpcVhQY
LeN3XU8UtGno3Q+cjlGoYCwYVTWaL/Bi7Z6P6/BGvudm7A7j+5NQvC/JHKekBZxu
11so55gb70hMS55yXhmk2EC+A0aCKg==
-----END CERTIFICATE-----
Generated at Fri Jul 25 19:22:10 2025 by rpki-client