Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6bdfbe51-4015-3081-b63b-0236f1d2e402.roa
File:                     6bdfbe51-4015-3081-b63b-0236f1d2e402.roa (raw, json)
Hash identifier:          Q/NW3xONBvTwFL5ZOlerxgxFMdn8ZUd7yFlAJVF2LbM=
Subject key identifier:   7F:14:36:9F:FE:8D:72:7E:01:C8:DA:C6:29:2A:72:18:FB:8E:F7:6D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BA7CD143E1066D103DAF53680
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6bdfbe51-4015-3081-b63b-0236f1d2e402.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     13335
IP address blocks:        162.158.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cd:14:3e:10:66:d1:03:da:f5:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=23895ebc-de1b-44bc-99b0-51069b5b6f3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:17:df:52:f9:2d:70:d6:fa:36:46:92:b6:5a:
                    60:a9:8f:b7:4e:fd:5d:59:0e:6d:9f:45:ae:ba:ad:
                    c4:fc:a7:43:5d:a6:d0:e0:4d:a2:d5:ee:2d:56:cf:
                    ab:0b:22:5c:d5:02:7c:45:75:74:e8:b6:4b:9f:65:
                    13:4e:12:45:cd:f3:0c:5c:22:37:71:ae:65:18:54:
                    9a:52:ca:cd:d5:84:7e:21:2a:26:e5:00:e8:6d:34:
                    47:ca:98:3a:99:c6:c1:1e:9b:fa:ec:d3:7a:43:62:
                    58:50:2a:ad:98:96:79:33:88:3f:88:7c:72:e1:51:
                    71:e1:0c:3b:38:49:d6:e4:0f:55:ca:18:d9:e4:09:
                    8f:84:79:83:46:43:87:14:a6:69:1d:95:91:e9:c4:
                    de:12:98:d4:03:8d:7f:35:e0:83:6d:8a:c7:99:ad:
                    20:58:ba:25:78:fc:3c:39:97:99:8e:39:51:c1:fe:
                    ab:1d:d6:8c:b0:98:59:55:9a:1e:91:ba:6f:5f:39:
                    24:d0:c5:aa:44:d6:ee:a2:78:ee:70:a4:33:a0:06:
                    f0:75:cd:3c:06:77:1f:76:34:64:63:5c:c3:fb:d2:
                    f9:4b:55:2b:ed:45:27:c3:9c:df:02:9a:cd:57:19:
                    da:a6:fe:74:16:ea:d8:5c:78:f9:ab:09:fa:50:a6:
                    00:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:14:36:9F:FE:8D:72:7E:01:C8:DA:C6:29:2A:72:18:FB:8E:F7:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6bdfbe51-4015-3081-b63b-0236f1d2e402.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:aa:2c:18:2e:a4:57:0d:43:74:a0:71:82:69:d8:83:ff:8b:
         e9:67:98:28:01:64:b4:2c:21:3d:3a:5c:df:ce:18:e6:9f:af:
         0d:bb:34:28:23:39:9a:6e:07:fe:71:2e:0e:85:78:4b:51:0a:
         e4:86:53:96:36:b8:4f:fc:31:55:32:8f:30:49:e9:4b:33:db:
         5d:c7:6f:7b:9b:dd:d3:a6:a8:43:61:b7:83:8a:83:22:e6:4a:
         ed:bf:45:6b:24:3c:15:c4:5e:08:1b:c2:9a:9f:7d:86:1a:11:
         cf:01:a5:d2:cf:a4:a6:d7:b0:9b:46:7e:5b:3c:dc:2f:75:70:
         ef:6e:03:0d:10:0c:7c:43:68:e2:e2:c3:4a:39:c5:a2:67:d4:
         f7:7e:b3:b9:1a:bd:47:3f:ee:b3:df:d1:69:c5:b4:d3:43:6e:
         59:c6:b4:fa:89:3b:2e:51:34:57:3b:6e:20:f4:da:a5:54:a6:
         e9:73:46:21:1e:70:f6:2b:d8:87:ed:8a:8f:17:69:78:bb:96:
         14:74:57:1e:01:d8:41:18:4d:cb:ab:b7:1c:57:02:4d:9f:82:
         31:df:6f:ce:22:c1:56:1b:29:5a:a1:1c:fe:95:89:05:40:e2:
         bb:d9:bb:60:6b:3b:53:e0:ec:11:20:fa:e0:94:85:ac:70:21:
         eb:16:16:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzRQ+EGbRA9r1NoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk
MjM4OTVlYmMtZGUxYi00NGJjLTk5YjAtNTEwNjliNWI2ZjNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxffUvktcNb6NkaStlpgqY+3Tv1dWQ5tn0Wu
uq3E/KdDXabQ4E2i1e4tVs+rCyJc1QJ8RXV06LZLn2UTThJFzfMMXCI3ca5lGFSa
UsrN1YR+ISom5QDobTRHypg6mcbBHpv67NN6Q2JYUCqtmJZ5M4g/iHxy4VFx4Qw7
OEnW5A9VyhjZ5AmPhHmDRkOHFKZpHZWR6cTeEpjUA41/NeCDbYrHma0gWLolePw8
OZeZjjlRwf6rHdaMsJhZVZoekbpvXzkk0MWqRNbuonjucKQzoAbwdc08BncfdjRk
Y1zD+9L5S1Ur7UUnw5zfAprNVxnapv50FurYXHj5qwn6UKYAeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH8UNp/+jXJ+Acjaxikqchj7jvdtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNmJkZmJlNTEtNDAxNS0z
MDgxLWI2M2ItMDIzNmYxZDJlNDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop4jMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABKqLBgupFcNQ3SgcYJp2IP/i+lnmCgBZLQsIT06XN/OGOafrw27NCgj
OZpuB/5xLg6FeEtRCuSGU5Y2uE/8MVUyjzBJ6Usz213Hb3ub3dOmqENht4OKgyLm
Su2/RWskPBXEXggbwpqffYYaEc8BpdLPpKbXsJtGfls83C91cO9uAw0QDHxDaOLi
w0o5xaJn1Pd+s7kavUc/7rPf0WnFtNNDblnGtPqJOy5RNFc7biD02qVUpulzRiEe
cPYr2Iftio8XaXi7lhR0Vx4B2EEYTcurtxxXAk2fgjHfb84iwVYbKVqhHP6ViQVA
4rvZu2BrO1Pg7BEg+uCUhaxwIesWFio=
-----END CERTIFICATE-----
Generated at Sat Nov 1 12:34:45 2025 by rpki-client