Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1bb66015-2609-3d2c-94d9-6378dc5a9f37.roa
File:                     1bb66015-2609-3d2c-94d9-6378dc5a9f37.roa (raw, json)
Hash identifier:          WCz/MoWi2zaJbYaGz6IBUrRiNwRMe7hkuOBS1rXWsjs=
Subject key identifier:   C8:EC:3A:CA:5E:7B:A5:39:B9:F3:77:18:5D:66:8A:68:66:CC:D5:80
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584F8DD8791EE7FB39D317D28500
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1bb66015-2609-3d2c-94d9-6378dc5a9f37.roa
Signing time:             Mon 19 Oct 2026 13:00:12 +0000
ROA not before:           Mon 19 Oct 2026 13:00:12 +0000
ROA not after:            Sun 17 Jan 2027 14:00:12 +0000
asID:                     13335
IP address blocks:        162.158.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8d:d8:79:1e:e7:fb:39:d3:17:d2:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 19 13:00:12 2026 GMT
            Not After : Jan 17 14:00:12 2027 GMT
        Subject: CN=e8fa8d31-cc67-4ff5-92a5-90232387675d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:06:c7:25:1a:ac:6b:9a:67:cb:e6:47:72:4e:
                    16:9c:4b:59:bb:40:aa:29:23:c3:30:83:ec:1a:04:
                    d6:8a:73:14:69:b6:73:ad:5f:eb:df:22:fa:72:e1:
                    1e:38:06:99:43:09:2c:5e:6f:a5:b2:ae:5a:d8:9c:
                    ae:9d:da:76:6f:2c:44:5d:73:05:57:f3:ec:3e:11:
                    12:ff:52:c6:86:73:50:35:17:75:95:d6:19:4a:29:
                    97:22:6c:ff:d6:cb:d5:29:4a:4d:44:cf:ce:48:04:
                    17:48:4c:e4:a0:20:67:78:d3:a0:04:31:9f:9c:a9:
                    cb:4d:94:f9:69:4c:ca:86:f9:8f:39:da:14:58:bb:
                    83:c7:16:56:6e:47:d1:39:86:e9:fe:d7:f0:2b:25:
                    c9:69:10:62:ec:d6:32:da:ad:47:90:dc:4d:16:0d:
                    23:8c:f0:33:59:55:a6:80:b6:de:e1:1f:06:db:0e:
                    9d:60:01:67:c2:97:94:d8:07:46:b3:3f:a6:39:3f:
                    1a:d1:7f:0c:9b:17:ab:04:27:81:d2:bf:9f:61:b7:
                    6f:ca:1b:4f:93:5d:02:e6:95:01:f1:99:43:a1:6b:
                    60:9b:9e:69:a9:ae:bc:5d:21:a5:e0:02:36:ce:21:
                    33:b7:2e:0a:ca:a1:5c:2e:e1:64:b5:02:7f:fa:3e:
                    ba:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EC:3A:CA:5E:7B:A5:39:B9:F3:77:18:5D:66:8A:68:66:CC:D5:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1bb66015-2609-3d2c-94d9-6378dc5a9f37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:84:90:2b:7e:61:50:22:8b:73:6e:e3:a5:5a:4d:05:67:d1:
         cc:7f:a8:75:de:cf:b2:85:50:08:13:4b:e9:d3:6f:bb:87:4a:
         7f:c8:4c:60:6f:b9:84:ae:fc:87:38:9b:29:b0:46:08:24:56:
         33:8b:de:09:77:ea:e4:61:fc:61:d0:f9:63:97:c8:3c:b6:be:
         8e:e1:93:7d:c2:8f:ab:6f:17:23:bb:bd:67:1f:c4:a7:1a:76:
         ba:78:09:07:79:b8:c4:a1:02:74:f5:a4:5c:93:18:71:ea:ae:
         35:64:d9:98:2d:d7:5d:35:47:fe:ec:cd:0a:5c:c8:33:9f:db:
         aa:7a:e8:ef:54:ad:1c:1a:dc:67:53:85:0a:f5:c7:58:e1:d0:
         e9:5d:df:11:85:43:68:0f:b1:fb:a1:67:0b:4c:b2:4d:26:b3:
         52:1d:2b:9f:cd:5d:5e:c6:ee:0a:04:1b:97:46:6b:9c:e6:da:
         86:f2:bf:de:fc:0a:16:a3:c4:61:7d:df:a9:61:e6:c9:9e:d1:
         4b:31:39:c3:50:d2:33:69:0b:32:ca:82:f4:86:36:74:c6:0e:
         d6:39:ef:9d:ec:fd:76:99:82:54:52:e9:83:97:22:15:41:0c:
         8a:d8:b8:99:78:4a:ba:f8:e2:4c:8a:43:8a:ae:a0:51:b7:c5:
         78:48:13:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:21:55 2026 by rpki-client