Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/22e80fef-aa22-33fa-9aae-34b2bbac1d8b.roa
File:                     22e80fef-aa22-33fa-9aae-34b2bbac1d8b.roa (raw, json)
Hash identifier:          OJM3RsMTSWCZaqsV7p2T/yqs1kmUGv/aS3iflrW/SEI=
Subject key identifier:   BD:48:6D:9B:0C:FE:31:E5:C7:65:46:59:9B:01:62:E0:9F:84:89:A7
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BA9327979E0347ADD8B6883C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/22e80fef-aa22-33fa-9aae-34b2bbac1d8b.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     13335
IP address blocks:        162.158.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:79:79:e0:34:7a:dd:8b:68:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=dbc8464e-3a8c-44a6-b52c-45159ef5d56d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b2:a1:77:27:8f:b6:e0:15:28:98:cf:2b:dc:
                    71:06:63:cb:e0:75:8a:a6:55:cd:99:dd:73:25:0e:
                    f9:dc:76:86:d6:73:2f:c5:b4:15:06:26:a7:9a:95:
                    0f:6e:a9:d7:2c:86:c0:d9:c1:ab:b6:fa:66:bd:c6:
                    be:24:9c:0c:56:29:df:81:ab:5f:e9:24:df:c5:eb:
                    f6:13:eb:a2:c2:99:be:d4:28:6b:c8:67:9b:d1:a8:
                    8b:2f:8e:58:b0:f1:85:cc:1d:56:88:cc:9b:4f:66:
                    09:c9:47:07:4b:e7:8d:d9:61:9c:b0:44:4b:07:28:
                    70:01:5a:a5:0e:46:22:8c:3c:67:73:d5:d9:99:a6:
                    ac:32:4c:6c:45:c1:82:c8:78:fb:3a:f9:73:c5:78:
                    92:fd:d2:b5:41:81:57:31:d9:22:3f:6d:f9:db:69:
                    f2:aa:58:50:16:6a:47:d5:df:87:0b:f3:4b:31:58:
                    47:13:17:bf:4c:88:ce:f8:ae:84:7a:14:9e:be:c9:
                    49:14:2b:e1:66:fd:b4:7f:6f:5b:a4:e6:eb:7f:d7:
                    65:2a:23:28:d5:69:65:b2:20:e0:d5:5e:c7:13:9e:
                    54:88:db:42:1b:e9:2c:29:41:6c:25:d3:e7:eb:5a:
                    36:93:66:ed:d1:cf:9d:7b:65:df:3d:e5:34:c0:92:
                    50:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:48:6D:9B:0C:FE:31:E5:C7:65:46:59:9B:01:62:E0:9F:84:89:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/22e80fef-aa22-33fa-9aae-34b2bbac1d8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:e3:b0:24:c8:c8:dd:06:07:f3:08:62:b8:6e:1f:1d:05:14:
         f8:be:4c:81:83:3c:6c:d6:0b:db:12:68:a8:39:c6:c2:5a:62:
         bd:1f:7a:14:bf:76:ab:ed:2e:ce:2f:a7:86:8c:d0:0a:f4:e5:
         ba:8e:9a:60:34:85:d2:b2:bf:09:0f:14:37:3a:f2:19:02:57:
         b4:84:55:a7:c5:7a:96:4a:30:61:c5:7a:48:11:f3:c9:07:79:
         1c:ee:80:c4:c7:bd:33:a8:6f:24:8a:73:4f:27:dd:5b:a2:c1:
         45:a2:25:54:a9:e9:6e:84:73:1b:00:33:bb:40:ce:af:c6:9d:
         4c:25:9e:41:5c:d0:e9:e5:aa:88:ee:e8:bf:b9:ae:90:e5:00:
         1a:41:a6:da:b4:bd:ca:a7:d8:da:40:8d:6c:1c:aa:11:f5:92:
         0b:96:df:8e:c0:de:ef:02:51:0e:86:5d:d3:fd:56:c3:e7:ab:
         91:8e:18:13:c1:5e:49:5d:58:d6:85:d6:27:f4:19:05:40:ca:
         22:e0:c6:84:55:5d:09:10:fb:b8:e9:4e:54:7c:69:d1:43:64:
         9a:35:4a:b0:6a:b1:3c:26:38:65:fb:74:71:08:02:37:43:f3:
         16:bc:79:dd:95:02:d7:e0:82:72:dc:e1:04:eb:79:33:6c:42:
         8e:0e:c8:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMnl54DR63Ytog8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk
ZGJjODQ2NGUtM2E4Yy00NGE2LWI1MmMtNDUxNTllZjVkNTZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbKhdyePtuAVKJjPK9xxBmPL4HWKplXNmd1z
JQ753HaG1nMvxbQVBianmpUPbqnXLIbA2cGrtvpmvca+JJwMVinfgatf6STfxev2
E+uiwpm+1ChryGeb0aiLL45YsPGFzB1WiMybT2YJyUcHS+eN2WGcsERLByhwAVql
DkYijDxnc9XZmaasMkxsRcGCyHj7OvlzxXiS/dK1QYFXMdkiP23522nyqlhQFmpH
1d+HC/NLMVhHExe/TIjO+K6EehSevslJFCvhZv20f29bpObrf9dlKiMo1WllsiDg
1V7HE55UiNtCG+ksKUFsJdPn61o2k2bt0c+de2XfPeU0wJJQzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL1IbZsM/jHlx2VGWZsBYuCfhImnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjJlODBmZWYtYWEyMi0z
M2ZhLTlhYWUtMzRiMmJiYWMxZDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCop6cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAPjsCTIyN0GB/MIYrhuHx0FFPi+TIGDPGzWC9sSaKg5xsJaYr0fehS/
dqvtLs4vp4aM0Ar05bqOmmA0hdKyvwkPFDc68hkCV7SEVafFepZKMGHFekgR88kH
eRzugMTHvTOobySKc08n3VuiwUWiJVSp6W6EcxsAM7tAzq/GnUwlnkFc0Onlqoju
6L+5rpDlABpBptq0vcqn2NpAjWwcqhH1kguW347A3u8CUQ6GXdP9VsPnq5GOGBPB
XkldWNaF1if0GQVAyiLgxoRVXQkQ+7jpTlR8adFDZJo1SrBqsTwmOGX7dHEIAjdD
8xa8ed2VAtfggnLc4QTreTNsQo4OyK4=
-----END CERTIFICATE-----
Generated at Sat Nov 1 10:03:19 2025 by rpki-client