Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a30f35a4-f047-3945-8f27-396b540ece12.roa
File:                     a30f35a4-f047-3945-8f27-396b540ece12.roa (raw, json)
Hash identifier:          I1Ctz7QXPPyY+JdRlXofUjawh0vX/QmIU7ZudazvkFw=
Subject key identifier:   35:1A:57:C9:6B:5A:29:78:49:A0:87:D8:D9:A4:DE:E9:16:D2:46:E6
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B7DECBB538E91E62C1030ED60
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a30f35a4-f047-3945-8f27-396b540ece12.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     15169
IP address blocks:        142.250.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:bb:53:8e:91:e6:2c:10:30:ed:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=8d4e6fb5-533b-4e17-8d8b-ad16b7c3b063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:43:c5:6a:34:9f:26:93:08:28:3c:1e:34:cf:
                    a2:a3:82:96:3d:08:75:14:bd:25:9e:11:53:bd:75:
                    14:3d:41:24:0e:9a:d4:af:db:af:86:b2:de:2f:e1:
                    23:f8:19:33:f6:5c:32:0b:93:18:57:7b:a4:1e:67:
                    28:34:31:65:dd:f2:99:1b:50:55:09:1f:0a:d8:5c:
                    d1:13:42:a9:41:49:17:04:af:30:ea:ee:f5:79:c6:
                    23:91:40:16:e5:e6:c8:ff:59:e3:81:8d:74:69:81:
                    13:0f:e1:4a:72:fa:0e:47:0c:4d:f5:a2:fb:18:10:
                    28:79:26:04:af:fa:e5:73:e9:8e:60:f7:ad:8d:a9:
                    fe:e3:66:8d:15:b6:e8:38:82:fb:56:3e:33:52:64:
                    c4:7d:c9:5d:c2:98:27:39:52:e6:eb:17:e5:3b:cc:
                    11:b6:f4:23:6c:98:5b:d8:df:4b:41:9a:9e:1a:f0:
                    9d:94:42:56:e9:d4:26:29:5b:e3:4f:af:60:f0:be:
                    63:96:ab:6b:d7:6e:11:ec:ee:30:04:14:d3:fc:a4:
                    db:43:60:3d:4d:6f:2e:73:91:4d:3b:88:93:47:76:
                    b5:77:52:5c:ee:14:5e:ba:eb:bc:f0:d1:0e:b6:9a:
                    56:64:6e:62:2b:ab:bd:dc:80:4e:61:55:de:00:a1:
                    81:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:1A:57:C9:6B:5A:29:78:49:A0:87:D8:D9:A4:DE:E9:16:D2:46:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a30f35a4-f047-3945-8f27-396b540ece12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:73:0f:26:59:18:29:67:14:66:f3:30:a5:90:df:4d:28:e9:
         3d:b7:c8:1f:0a:a7:d9:4b:e6:21:e4:61:13:27:3a:23:90:7a:
         5f:a4:26:b9:0c:42:aa:0a:74:f6:5c:2d:5c:2a:33:a6:6f:b0:
         79:53:9d:33:d2:a2:62:20:db:aa:c0:60:8a:8b:7a:22:9b:ad:
         f9:ff:11:aa:19:97:43:e5:d1:0c:5a:f9:71:d5:44:ad:7e:80:
         45:4c:4a:56:6c:74:90:43:e3:ee:b3:40:c0:3a:1c:f4:36:60:
         47:72:55:22:a9:72:8a:9f:b4:ee:b0:25:36:2b:4d:c7:51:0f:
         fc:93:49:a7:12:9a:f0:ba:e4:f4:9e:ad:c5:dd:06:3a:a1:6e:
         53:96:2b:f0:b0:18:f6:58:41:57:72:15:93:49:e2:1e:12:28:
         12:a1:0e:5d:53:22:75:39:b8:41:3e:ac:23:59:9e:c0:b9:38:
         2a:eb:4d:99:e8:15:62:39:5f:a4:30:99:be:99:04:ac:ed:43:
         da:09:e9:ae:ff:02:e8:bb:13:3b:51:75:2f:8d:0b:4e:7d:1f:
         d1:dc:28:c8:b3:16:d8:cc:0c:05:79:89:9a:25:db:71:b6:ff:
         32:2a:00:b1:1d:7c:d6:a3:87:58:d2:2e:06:6d:de:ca:c0:e0:
         3b:f6:2b:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97LtTjpHmLBAw7WAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk
OGQ0ZTZmYjUtNTMzYi00ZTE3LThkOGItYWQxNmI3YzNiMDYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEPFajSfJpMIKDweNM+io4KWPQh1FL0lnhFT
vXUUPUEkDprUr9uvhrLeL+Ej+Bkz9lwyC5MYV3ukHmcoNDFl3fKZG1BVCR8K2FzR
E0KpQUkXBK8w6u71ecYjkUAW5ebI/1njgY10aYETD+FKcvoORwxN9aL7GBAoeSYE
r/rlc+mOYPetjan+42aNFbboOIL7Vj4zUmTEfcldwpgnOVLm6xflO8wRtvQjbJhb
2N9LQZqeGvCdlEJW6dQmKVvjT69g8L5jlqtr124R7O4wBBTT/KTbQ2A9TW8uc5FN
O4iTR3a1d1Jc7hReuuu88NEOtppWZG5iK6u93IBOYVXeAKGB1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDUaV8lrWil4SaCH2Nmk3ukW0kbmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTMwZjM1YTQtZjA0Ny0z
OTQ1LThmMjctMzk2YjU0MGVjZTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvqbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJRzDyZZGClnFGbzMKWQ300o6T23yB8Kp9lL5iHkYRMnOiOQel+kJrkM
QqoKdPZcLVwqM6ZvsHlTnTPSomIg26rAYIqLeiKbrfn/EaoZl0Pl0Qxa+XHVRK1+
gEVMSlZsdJBD4+6zQMA6HPQ2YEdyVSKpcoqftO6wJTYrTcdRD/yTSacSmvC65PSe
rcXdBjqhblOWK/CwGPZYQVdyFZNJ4h4SKBKhDl1TInU5uEE+rCNZnsC5OCrrTZno
FWI5X6Qwmb6ZBKztQ9oJ6a7/Aui7EztRdS+NC059H9HcKMizFtjMDAV5iZol23G2
/zIqALEdfNajh1jSLgZt3srA4Dv2Kzg=
-----END CERTIFICATE-----
Generated at Fri Oct 17 08:42:10 2025 by rpki-client