Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4/cb26024d-0398-3c64-9131-807614c5aa15.roa
File:                     cb26024d-0398-3c64-9131-807614c5aa15.roa (raw, json)
Hash identifier:          9IMmBllrupCY7QW+n1UEgFkZq3X7LINVRBdd798YkBc=
Subject key identifier:   B9:1B:1B:B7:40:62:2E:D5:3A:19:EB:26:40:86:9B:43:AC:D2:5C:F8
Certificate issuer:       /CN=a327a78b-38c6-4e70-927c-f4959d89c6b4
Certificate serial:       010D0C9F4328584B4E43C04A0107366B42EC3000
Authority key identifier: 75:F8:DA:CF:71:F3:EE:F4:B2:0A:29:85:5F:D3:F7:CA:62:ED:5A:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4/cb26024d-0398-3c64-9131-807614c5aa15.roa
Signing time:             Wed 24 Sep 2025 23:17:16 +0000
ROA not before:           Wed 24 Sep 2025 23:17:16 +0000
ROA not after:            Wed 24 Dec 2025 00:17:16 +0000
asID:                     14618
IP address blocks:        167.150.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4/a327a78b-38c6-4e70-927c-f4959d89c6b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4/a327a78b-38c6-4e70-927c-f4959d89c6b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:43:c0:4a:01:07:36:6b:42:ec:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a327a78b-38c6-4e70-927c-f4959d89c6b4
        Validity
            Not Before: Sep 24 23:17:16 2025 GMT
            Not After : Dec 24 00:17:16 2025 GMT
        Subject: CN=897fd4aa-c0c1-458f-be64-3388bca46e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:16:aa:65:66:a7:7d:d7:f4:30:ee:a8:53:f0:
                    b4:19:27:35:33:4d:91:f3:9a:97:a8:f5:1f:c3:76:
                    9a:fd:56:6b:96:a6:8d:24:42:f6:00:80:ed:c4:c0:
                    c0:b5:73:d5:a7:35:8a:27:2b:fa:93:4a:cf:c5:4b:
                    91:77:c7:a4:f3:f3:82:2d:87:bf:74:be:f9:64:50:
                    9a:b2:90:f7:84:4b:55:9c:3f:03:ba:81:80:6f:de:
                    49:41:99:da:5c:d6:bb:85:7e:a6:a7:b0:0e:e8:e9:
                    1b:b6:9a:73:ed:6c:08:70:64:e0:a2:53:5c:19:e4:
                    1a:70:91:b0:cd:50:5e:52:b5:ee:74:29:bb:53:ae:
                    0d:b5:c1:ca:e7:a0:2d:42:2f:fd:e2:d5:62:4a:bf:
                    28:c6:da:98:0c:cb:5c:19:2d:a2:03:72:be:a6:90:
                    55:f4:56:5b:ef:76:2a:f4:05:98:63:35:64:54:a9:
                    7a:9e:67:e1:46:a9:d4:c2:1d:db:77:1f:f7:b0:19:
                    dc:bd:3b:2e:8a:22:e8:50:f6:85:5c:b8:35:78:4e:
                    2c:ad:99:02:8b:79:94:38:4f:07:55:dc:92:00:6b:
                    d8:cc:fa:73:d3:08:b4:0c:d6:f1:21:f5:e6:06:7a:
                    d4:8f:68:4c:d1:47:48:08:08:05:54:2b:a0:d4:99:
                    d9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:1B:1B:B7:40:62:2E:D5:3A:19:EB:26:40:86:9B:43:AC:D2:5C:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4/cb26024d-0398-3c64-9131-807614c5aa15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4/a327a78b-38c6-4e70-927c-f4959d89c6b4.crl

            X509v3 Authority Key Identifier:
                keyid:75:F8:DA:CF:71:F3:EE:F4:B2:0A:29:85:5F:D3:F7:CA:62:ED:5A:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a327a78b-38c6-4e70-927c-f4959d89c6b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.150.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:fc:4f:10:b7:17:3e:32:e2:7f:53:c8:f5:c3:65:8f:4b:3e:
         6f:6c:35:63:2c:7e:cc:c1:0b:b3:8a:32:da:17:3c:8e:b6:58:
         da:b7:93:d5:cf:5f:14:a1:f1:0e:cc:59:30:dc:f8:11:61:98:
         a5:61:20:ee:69:af:36:38:e5:b4:c3:87:a3:b1:af:a4:56:78:
         3e:82:be:5c:02:30:26:52:e3:be:39:b3:bd:70:b0:f3:46:c3:
         0b:d1:44:f9:06:23:7b:7a:cb:39:f0:0c:5a:fd:e7:fc:6b:e9:
         0c:a0:d1:1f:da:56:0e:09:63:79:06:7b:23:7e:89:91:27:d1:
         52:bf:f2:e3:14:40:4b:56:6b:c1:bc:a9:7c:f0:80:8b:32:88:
         9b:da:b5:9d:30:83:58:6e:14:57:2d:d9:97:82:24:87:a1:30:
         37:91:bd:a1:e3:96:b2:c4:a8:9a:bd:3b:ef:b5:29:43:1a:65:
         55:b6:c6:7c:03:78:40:bd:ad:4f:c3:94:0a:7c:0f:3f:03:4a:
         d0:25:e0:4a:41:53:be:6d:01:21:9a:b2:7d:86:16:04:97:28:
         bf:25:f3:32:ca:ac:90:8d:5b:dd:a9:ee:42:f9:5d:63:78:0a:
         c0:81:ba:01:5d:cc:fd:f5:ed:3b:0c:a9:b6:7d:eb:b4:1c:be:
         16:43:b9:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOQ8BKAQc2a0LsMAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTMyN2E3OGItMzhjNi00ZTcwLTkyN2MtZjQ5NTlkODlj
NmI0MB4XDTI1MDkyNDIzMTcxNloXDTI1MTIyNDAwMTcxNlowLzEtMCsGA1UEAxMk
ODk3ZmQ0YWEtYzBjMS00NThmLWJlNjQtMzM4OGJjYTQ2ZTUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRaqZWanfdf0MO6oU/C0GSc1M02R85qXqPUf
w3aa/VZrlqaNJEL2AIDtxMDAtXPVpzWKJyv6k0rPxUuRd8ek8/OCLYe/dL75ZFCa
spD3hEtVnD8DuoGAb95JQZnaXNa7hX6mp7AO6Okbtppz7WwIcGTgolNcGeQacJGw
zVBeUrXudCm7U64NtcHK56AtQi/94tViSr8oxtqYDMtcGS2iA3K+ppBV9FZb73Yq
9AWYYzVkVKl6nmfhRqnUwh3bdx/3sBncvTsuiiLoUPaFXLg1eE4srZkCi3mUOE8H
VdySAGvYzPpz0wi0DNbxIfXmBnrUj2hM0UdICAgFVCug1JnZkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLkbG7dAYi7VOhnrJkCGm0Os0lz4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hMzI3
YTc4Yi0zOGM2LTRlNzAtOTI3Yy1mNDk1OWQ4OWM2YjQvY2IyNjAyNGQtMDM5OC0z
YzY0LTkxMzEtODA3NjE0YzVhYTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYTMyN2E3OGItMzhjNi00ZTcwLTky
N2MtZjQ5NTlkODljNmI0L2EzMjdhNzhiLTM4YzYtNGU3MC05MjdjLWY0OTU5ZDg5
YzZiNC5jcmwwHwYDVR0jBBgwFoAUdfjaz3Hz7vSyCimFX9P3ymLtWv8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9hMzI3YTc4Yi0zOGM2LTRlNzAtOTI3Yy1mNDk1
OWQ4OWM2YjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp5bhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFX8TxC3Fz4y4n9TyPXDZY9LPm9sNWMsfszBC7OKMtoXPI62WNq3k9XP
XxSh8Q7MWTDc+BFhmKVhIO5przY45bTDh6Oxr6RWeD6CvlwCMCZS4745s71wsPNG
wwvRRPkGI3t6yznwDFr95/xr6Qyg0R/aVg4JY3kGeyN+iZEn0VK/8uMUQEtWa8G8
qXzwgIsyiJvatZ0wg1huFFct2ZeCJIehMDeRvaHjlrLEqJq9O++1KUMaZVW2xnwD
eEC9rU/DlAp8Dz8DStAl4EpBU75tASGasn2GFgSXKL8l8zLKrJCNW92p7kL5XWN4
CsCBugFdzP317TsMqbZ967QcvhZDuUo=
-----END CERTIFICATE-----
Generated at Wed Oct 8 22:51:06 2025 by rpki-client