Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02460791-f62f-3d6c-b7fa-3dbedfae72eb.roa
File:                     02460791-f62f-3d6c-b7fa-3dbedfae72eb.roa (raw, json)
Hash identifier:          5MSan2zi/PfBZHi9TDcegPYkP5129tEBiTBBW5z+qQo=
Subject key identifier:   00:DB:42:0F:17:DB:D1:DE:FD:83:40:7D:F5:DE:20:B1:3B:B3:40:1D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E4AEF554511567E00C517F000
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02460791-f62f-3d6c-b7fa-3dbedfae72eb.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        162.158.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:55:45:11:56:7e:00:c5:17:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=24b3a586-cddf-42d9-8fdb-bbe6072c65e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b2:69:18:15:29:a9:11:cf:21:f7:c0:69:a5:
                    86:f3:f2:61:ab:3d:da:0b:9f:53:7c:25:9f:09:9b:
                    1c:10:74:5a:f4:0a:ba:69:e7:b9:d6:03:e5:e1:d0:
                    95:24:2f:2d:27:97:ad:4c:13:da:b4:30:ee:a7:ca:
                    18:4c:c7:70:c2:ac:03:fa:25:26:90:51:0b:1e:a4:
                    36:f7:6d:88:8e:fa:9c:76:0c:c4:ac:58:62:09:d9:
                    c8:6a:3e:a3:f7:88:55:4b:83:16:4c:fa:7f:f4:de:
                    55:51:a6:1b:2b:95:5d:59:f0:c0:7a:81:d1:bf:ad:
                    20:1f:a3:b2:12:0b:60:ff:31:d5:a4:d7:ef:d4:1b:
                    0a:4a:9d:a3:ea:3b:61:d8:54:c7:5a:fc:83:a4:a4:
                    24:0d:b0:dc:89:38:e9:a6:ea:ab:2f:2b:b2:f6:f0:
                    9c:57:db:71:07:d7:1b:27:c3:da:49:78:00:41:e3:
                    8b:8f:62:a4:b3:6a:63:bb:54:fc:53:98:53:77:a3:
                    88:24:1f:18:0b:e9:75:45:42:2c:45:9e:49:11:58:
                    a8:e9:59:e2:41:e0:eb:ed:79:8c:33:ba:37:61:df:
                    b8:fd:27:f6:65:2e:a8:39:56:48:fc:67:c0:1e:69:
                    cf:fc:a9:8c:64:49:9c:c7:41:26:c7:0b:ca:4a:7a:
                    a1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:DB:42:0F:17:DB:D1:DE:FD:83:40:7D:F5:DE:20:B1:3B:B3:40:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02460791-f62f-3d6c-b7fa-3dbedfae72eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:3e:3d:47:2d:af:da:1d:9d:49:5b:1f:b3:d5:0e:d2:3c:65:
         e9:29:85:1b:22:9e:ce:55:2d:cf:f8:c1:f5:40:69:bb:df:ed:
         9f:3c:96:6d:a9:66:7c:36:7b:2e:cc:f4:bc:68:97:89:62:02:
         22:49:99:3d:1f:13:26:dd:5f:10:78:ba:39:01:59:e0:2a:1b:
         e4:d0:f6:06:99:2f:15:88:08:12:fb:1e:5f:eb:27:5f:86:50:
         11:c6:8e:7a:37:dc:ac:89:03:13:7a:79:c1:3f:60:45:98:c4:
         09:d7:d9:03:56:72:7a:9e:8f:c4:70:bd:38:2f:ee:7f:08:94:
         c5:11:8f:c0:67:9f:04:65:e7:ef:4a:5a:b0:54:34:b2:4a:cb:
         82:36:56:9c:a7:2a:ba:f8:d2:b4:f9:11:43:ee:b5:df:91:68:
         62:b0:f5:76:29:be:43:6b:41:4d:6b:06:79:a1:ab:ee:14:70:
         5a:32:bb:28:54:09:ce:03:9d:a6:5c:e5:44:16:ac:44:0b:1c:
         5a:2b:e0:05:74:73:f5:0b:73:f9:09:0e:48:c3:9d:4c:5a:af:
         7b:18:49:c9:2c:e5:28:01:de:82:f2:c6:d1:e5:87:5c:2c:7a:
         72:be:02:4f:61:82:d7:46:be:c5:20:c9:c9:f3:a6:28:7c:b7:
         62:fc:46:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:49:23 2026 by rpki-client