Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de1d4553-3188-3d1c-8b8e-987ead59deaa.roa
File:                     de1d4553-3188-3d1c-8b8e-987ead59deaa.roa (raw, json)
Hash identifier:          JI9qYPq20yS15IeV8fPPUFFtiU5HIYu1JgKTUOOfq2Q=
Subject key identifier:   18:6E:6E:9F:D3:64:EA:47:2F:97:21:7A:E6:89:D4:73:D6:B7:91:13
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BA7CD0626ECB428FBEB323100
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de1d4553-3188-3d1c-8b8e-987ead59deaa.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     13335
IP address blocks:        162.158.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cd:06:26:ec:b4:28:fb:eb:32:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=9ffe17a8-742d-4737-9f0b-c7d3d3b9d199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:28:df:0b:dc:dc:3e:ac:d6:1a:87:2e:f2:bd:
                    9c:c3:72:8c:93:b5:ec:00:f9:b6:bb:5b:ba:90:ff:
                    57:03:b5:ba:dc:72:96:f4:8e:19:ec:14:2e:d6:dc:
                    ce:f1:5b:0e:ce:a5:8c:3a:cf:b9:fc:7c:cb:37:27:
                    e9:95:62:9e:ee:15:e0:d8:19:a3:63:3e:c5:0e:45:
                    bf:03:f4:fe:1b:3d:d4:c5:79:f0:47:ae:7f:00:26:
                    ce:10:b6:c5:b1:6d:aa:a9:8f:ee:01:0a:70:76:6f:
                    74:70:8f:a3:d6:75:2a:12:17:28:8a:cb:00:8d:7f:
                    cb:ec:cf:35:56:e9:e3:69:8b:c9:b0:94:c9:1f:ae:
                    19:5e:74:ea:19:97:3a:c2:2c:75:66:70:ff:63:fe:
                    da:37:bf:ab:a5:f6:a9:fa:40:5f:01:cc:8d:b7:f8:
                    de:5e:bf:9b:72:30:00:36:d3:25:23:39:fc:08:f3:
                    07:94:ce:e3:0d:78:3f:df:c2:64:06:45:0f:e9:bb:
                    62:3b:e0:8a:22:62:61:04:26:a6:1d:a2:2c:c3:f9:
                    84:7f:7f:d8:62:2f:67:f5:7c:cf:2d:08:46:52:e9:
                    77:72:be:e5:f7:57:e6:c7:72:fb:0e:cc:a9:7c:db:
                    c9:80:d8:d5:87:fb:67:4e:c1:24:14:b1:ea:38:a0:
                    9f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6E:6E:9F:D3:64:EA:47:2F:97:21:7A:E6:89:D4:73:D6:B7:91:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de1d4553-3188-3d1c-8b8e-987ead59deaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:92:e5:08:29:fd:b8:1e:37:99:67:90:7a:e2:26:c5:9c:a3:
         76:59:ad:05:7a:35:2c:63:9f:fa:a3:de:fb:d8:d6:f3:9b:bf:
         0e:68:e4:1d:58:94:72:69:29:1f:9d:f0:9c:20:6b:b3:ce:9c:
         99:af:ba:d0:31:a3:5e:0c:ed:60:2a:d9:9e:1e:f5:06:6a:f2:
         33:b9:11:77:e4:e7:bc:fd:cd:3b:85:78:0e:fd:ac:f6:6f:9d:
         41:a9:9c:10:d0:f5:15:13:c4:4b:09:57:61:ac:1f:d7:5d:87:
         c1:08:7c:4e:aa:ee:45:65:1e:40:cb:16:69:64:a6:ee:d6:20:
         91:a9:c1:07:9c:2b:3e:80:da:d0:84:4f:f4:3d:dc:10:22:34:
         c6:61:dc:30:c5:c6:07:ad:f8:cb:2d:53:31:c4:b7:6c:7c:2b:
         22:5c:b5:5f:5c:20:8f:34:dd:45:91:d2:aa:f2:72:d6:f0:37:
         75:34:2b:a0:59:8b:7d:34:ee:fe:1d:6b:44:f0:e6:e5:c0:0f:
         7a:d4:ae:a0:2f:da:94:d0:cb:82:b3:2e:ab:74:75:ad:06:07:
         25:5c:b7:f1:52:c9:3b:4d:49:db:41:3e:4e:db:e4:a8:65:63:
         d5:6a:86:66:2f:42:0a:c4:c1:5f:0e:f3:b5:a2:e9:41:b2:0d:
         4e:3b:60:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzQYm7LQo++syMQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk
OWZmZTE3YTgtNzQyZC00NzM3LTlmMGItYzdkM2QzYjlkMTk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlijfC9zcPqzWGocu8r2cw3KMk7XsAPm2u1u6
kP9XA7W63HKW9I4Z7BQu1tzO8VsOzqWMOs+5/HzLNyfplWKe7hXg2BmjYz7FDkW/
A/T+Gz3UxXnwR65/ACbOELbFsW2qqY/uAQpwdm90cI+j1nUqEhcoissAjX/L7M81
VunjaYvJsJTJH64ZXnTqGZc6wix1ZnD/Y/7aN7+rpfap+kBfAcyNt/jeXr+bcjAA
NtMlIzn8CPMHlM7jDXg/38JkBkUP6btiO+CKImJhBCamHaIsw/mEf3/YYi9n9XzP
LQhGUul3cr7l91fmx3L7DsypfNvJgNjVh/tnTsEkFLHqOKCfSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBhubp/TZOpHL5cheuaJ1HPWt5ETMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGUxZDQ1NTMtMzE4OC0z
ZDFjLThiOGUtOTg3ZWFkNTlkZWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCop40MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAImS5Qgp/bgeN5lnkHriJsWco3ZZrQV6NSxjn/qj3vvY1vObvw5o5B1Y
lHJpKR+d8Jwga7POnJmvutAxo14M7WAq2Z4e9QZq8jO5EXfk57z9zTuFeA79rPZv
nUGpnBDQ9RUTxEsJV2GsH9ddh8EIfE6q7kVlHkDLFmlkpu7WIJGpwQecKz6A2tCE
T/Q93BAiNMZh3DDFxget+MstUzHEt2x8KyJctV9cII803UWR0qryctbwN3U0K6BZ
i3007v4da0Tw5uXAD3rUrqAv2pTQy4KzLqt0da0GByVct/FSyTtNSdtBPk7b5Khl
Y9VqhmYvQgrEwV8O87Wi6UGyDU47YBI=
-----END CERTIFICATE-----
Generated at Sat Nov 1 15:25:23 2025 by rpki-client