Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c25994a-252b-3369-9a84-496fd328e943.roa
File:                     0c25994a-252b-3369-9a84-496fd328e943.roa (raw, json)
Hash identifier:          ToW/Fs2iiwfjaPdINqvs60hVDqkrQXO8s/EUqSvzBCg=
Subject key identifier:   2F:51:C5:D9:9A:CA:F5:2A:CA:B1:30:86:DD:5A:3F:59:2D:3C:B0:79
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F497AB7E0E4E3A9AD34354E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c25994a-252b-3369-9a84-496fd328e943.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7922
IP address blocks:        162.150.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7a:b7:e0:e4:e3:a9:ad:34:35:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b2bcd2c4-d3f4-407c-9db0-03afb8e8738c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:cf:09:42:44:58:4f:62:b7:2a:65:01:90:25:
                    19:71:e0:56:27:d2:75:76:9c:ae:50:73:45:da:ae:
                    f3:8f:16:6f:91:42:06:ed:68:58:f4:cd:ab:35:83:
                    96:bf:7e:f8:4e:6f:87:fc:48:f9:eb:72:4c:6c:9b:
                    16:9d:9c:0b:e8:e4:12:01:d3:ee:4c:7b:f1:b3:0a:
                    3b:af:e5:34:9b:0e:d6:2f:fc:06:43:ee:ad:ed:26:
                    61:3e:7b:0b:90:23:f6:6a:90:78:72:29:eb:fa:00:
                    de:d3:51:b3:8e:ee:99:d4:f3:f0:f6:11:45:44:48:
                    d5:08:d2:32:43:d7:9c:f2:fa:21:0f:f8:3e:de:43:
                    1d:9b:b7:13:d3:00:92:5f:fc:97:5c:74:a5:34:5b:
                    2e:44:e5:5a:44:17:b3:ab:d8:23:83:6b:66:92:e3:
                    71:e8:6b:74:fd:84:53:9f:3a:0a:0f:3d:66:01:21:
                    82:dc:4d:8b:26:a9:6c:12:6e:b5:b3:18:21:83:49:
                    e7:cc:77:e4:33:8d:bd:f0:b5:f7:2e:5a:47:91:56:
                    e7:bc:77:c2:9c:25:cf:4d:6e:d3:c8:c3:9d:b1:07:
                    57:e5:0e:e8:e5:8b:66:e5:ef:fa:e2:88:82:b7:d1:
                    66:56:91:2c:55:9a:26:4a:7e:76:c7:49:f2:04:49:
                    e3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:51:C5:D9:9A:CA:F5:2A:CA:B1:30:86:DD:5A:3F:59:2D:3C:B0:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c25994a-252b-3369-9a84-496fd328e943.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.150.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:48:6d:2b:6c:1f:ff:dc:db:66:fe:2d:b9:b4:41:b5:e2:48:
         a8:b3:4f:6b:9f:82:6f:ae:d4:3e:af:67:a3:eb:b2:ca:c9:dc:
         7a:32:1a:e3:6b:06:6f:e8:c9:1d:03:30:08:98:01:58:ed:bb:
         ad:7a:fb:47:6f:fe:4f:e2:2e:66:03:2d:fe:11:29:d7:55:57:
         3b:60:bb:69:9f:99:e1:a9:fc:44:3d:6c:10:ad:27:5d:de:e8:
         7d:4a:61:73:d1:d4:7e:57:30:da:8d:c1:09:3a:50:8c:58:93:
         46:1d:8e:17:0a:c9:a4:70:0c:8e:06:66:1d:14:1e:f2:3c:64:
         60:62:33:70:41:16:3c:78:85:11:6c:28:60:8e:22:0c:fc:75:
         26:10:e5:d6:0b:48:3a:76:52:c6:c0:17:dc:3f:c6:f6:4a:49:
         f7:fb:bb:46:55:86:e9:ad:36:c4:4f:ca:b0:3d:63:a2:c0:ae:
         5a:11:71:fb:30:1d:a2:a2:f9:2e:a9:10:9f:d4:67:04:8a:bf:
         64:53:b8:07:90:c6:72:bc:a2:a4:31:7b:d9:48:e1:f3:cd:08:
         30:09:90:92:d2:dd:ec:d4:33:b4:81:f5:2c:cb:b5:7f:96:1f:
         af:c6:b8:41:73:f4:c8:25:96:72:42:6f:49:b6:85:24:7a:f8:
         7f:77:5c:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jerfg5OOprTQ1TgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YjJiY2QyYzQtZDNmNC00MDdjLTlkYjAtMDNhZmI4ZTg3MzhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM8JQkRYT2K3KmUBkCUZceBWJ9J1dpyuUHNF
2q7zjxZvkUIG7WhY9M2rNYOWv374Tm+H/Ej563JMbJsWnZwL6OQSAdPuTHvxswo7
r+U0mw7WL/wGQ+6t7SZhPnsLkCP2apB4cinr+gDe01Gzju6Z1PPw9hFFREjVCNIy
Q9ec8vohD/g+3kMdm7cT0wCSX/yXXHSlNFsuROVaRBezq9gjg2tmkuNx6Gt0/YRT
nzoKDz1mASGC3E2LJqlsEm61sxghg0nnzHfkM4298LX3LlpHkVbnvHfCnCXPTW7T
yMOdsQdX5Q7o5Ytm5e/64oiCt9FmVpEsVZomSn52x0nyBEnjzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC9RxdmayvUqyrEwht1aP1ktPLB5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGMyNTk5NGEtMjUyYi0z
MzY5LTlhODQtNDk2ZmQzMjhlOTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCopYYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGlIbStsH//c22b+Lbm0QbXiSKizT2ufgm+u1D6vZ6PrssrJ3HoyGuNr
Bm/oyR0DMAiYAVjtu616+0dv/k/iLmYDLf4RKddVVztgu2mfmeGp/EQ9bBCtJ13e
6H1KYXPR1H5XMNqNwQk6UIxYk0YdjhcKyaRwDI4GZh0UHvI8ZGBiM3BBFjx4hRFs
KGCOIgz8dSYQ5dYLSDp2UsbAF9w/xvZKSff7u0ZVhumtNsRPyrA9Y6LArloRcfsw
HaKi+S6pEJ/UZwSKv2RTuAeQxnK8oqQxe9lI4fPNCDAJkJLS3ezUM7SB9SzLtX+W
H6/GuEFz9MgllnJCb0m2hSR6+H93XDQ=
-----END CERTIFICATE-----
Generated at Sat Sep 26 11:42:40 2026 by rpki-client