Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/336add42-6abf-3062-9bd8-14b956f005ef.roa
File:                     336add42-6abf-3062-9bd8-14b956f005ef.roa (raw, json)
Hash identifier:          SNkA7WIasiCyv48AP2zdQ2bnu3Hy2fniE3ednVRqS5c=
Subject key identifier:   31:85:06:BD:9C:AF:44:C2:D4:F0:E3:0D:82:15:A1:6E:4D:8F:47:21
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EEA8770391C47A62336C7BE80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/336add42-6abf-3062-9bd8-14b956f005ef.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        162.158.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:70:39:1c:47:a6:23:36:c7:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=2f557221-ef2c-404c-a168-07a33fcc93ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:63:5e:59:7b:4b:0e:66:5a:6d:9c:c1:18:2b:
                    21:e2:61:91:ab:2c:12:d2:7c:00:1d:fb:29:c6:65:
                    88:52:69:57:b6:be:d4:a2:c3:ff:c5:ee:f5:5d:62:
                    fc:f3:53:b9:71:94:69:ad:e5:3e:41:2c:48:34:8a:
                    ad:44:aa:c8:40:2c:b4:24:f9:e8:14:e7:56:a7:ea:
                    0c:0a:71:8f:a4:31:70:b8:7d:20:88:28:49:11:74:
                    50:df:28:a2:da:57:06:3b:97:59:01:94:1c:b4:3d:
                    30:d4:8f:2f:0a:f6:71:ad:02:a8:92:1e:a8:9f:8c:
                    d8:f4:f6:d7:13:ae:36:48:2c:6d:04:c3:9a:3b:e7:
                    c6:04:3f:a0:d3:69:93:a1:e6:c4:3e:83:c1:dd:66:
                    ea:26:74:53:0a:91:c6:da:2e:58:3b:1e:b1:cc:37:
                    51:c3:c9:15:93:8c:43:5a:48:7b:e8:7e:94:2a:f2:
                    bb:64:f6:f0:53:5d:39:e1:cf:70:2e:23:45:43:02:
                    be:43:b8:4b:39:c7:5c:97:4e:91:d7:2e:f5:0e:c1:
                    7f:ec:25:c6:e0:b4:03:cd:44:f9:1e:07:07:6f:80:
                    46:61:9e:b2:20:3f:3c:04:7a:84:4f:f5:65:a1:0a:
                    eb:2f:ba:92:80:cc:47:ce:96:e0:e6:61:1e:2b:9b:
                    72:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:85:06:BD:9C:AF:44:C2:D4:F0:E3:0D:82:15:A1:6E:4D:8F:47:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/336add42-6abf-3062-9bd8-14b956f005ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:a9:59:88:ae:b5:a6:ce:b9:da:13:6c:e5:0f:84:86:1a:5c:
         2d:ad:70:db:78:ee:6b:b6:9a:7b:6e:01:44:08:67:ce:2b:38:
         d7:58:fb:13:49:d2:a6:fb:25:b9:a9:83:de:69:b9:16:b9:09:
         04:31:b1:90:19:9b:6c:50:5f:5f:04:1e:c5:4e:08:c7:af:4b:
         de:89:22:8d:de:01:20:d8:35:65:6b:5c:43:ef:ca:d0:c6:29:
         44:a8:8e:99:9a:cb:18:20:7a:73:c3:d3:3d:99:23:af:5c:ba:
         12:1e:a8:c2:70:54:48:1b:36:22:98:e7:78:41:28:25:15:d5:
         9b:37:f6:b8:5f:bc:87:9f:81:a4:44:d7:ba:e4:c0:f1:6a:b3:
         8d:f7:72:f5:51:b6:bf:c9:9d:64:a1:36:bd:97:e0:ea:5a:b7:
         54:ae:08:d7:e8:a8:93:de:b5:47:af:d8:ee:6f:2e:f3:49:f6:
         ad:c5:87:e2:11:a2:1a:ba:0b:09:56:07:64:6c:e6:4c:0d:1e:
         d7:72:a7:bd:5f:85:19:61:52:08:d0:e8:09:27:03:0f:a1:d3:
         c8:f2:99:07:aa:65:1b:fc:0b:22:06:92:eb:2d:47:0a:c8:c3:
         12:71:3e:77:31:a1:91:a2:f1:72:39:9f:ba:4e:04:11:bf:4d:
         db:48:de:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh3A5HEemIzbHvoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk
MmY1NTcyMjEtZWYyYy00MDRjLWExNjgtMDdhMzNmY2M5M2FkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mNeWXtLDmZabZzBGCsh4mGRqywS0nwAHfsp
xmWIUmlXtr7UosP/xe71XWL881O5cZRpreU+QSxINIqtRKrIQCy0JPnoFOdWp+oM
CnGPpDFwuH0giChJEXRQ3yii2lcGO5dZAZQctD0w1I8vCvZxrQKokh6on4zY9PbX
E642SCxtBMOaO+fGBD+g02mToebEPoPB3WbqJnRTCpHG2i5YOx6xzDdRw8kVk4xD
Wkh76H6UKvK7ZPbwU1054c9wLiNFQwK+Q7hLOcdcl06R1y71DsF/7CXG4LQDzUT5
HgcHb4BGYZ6yID88BHqET/VloQrrL7qSgMxHzpbg5mEeK5ty6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDGFBr2cr0TC1PDjDYIVoW5Nj0chMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzM2YWRkNDItNmFiZi0z
MDYyLTliZDgtMTRiOTU2ZjAwNWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop6YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB6pWYiutabOudoTbOUPhIYaXC2tcNt47mu2mntuAUQIZ84rONdY+xNJ
0qb7Jbmpg95puRa5CQQxsZAZm2xQX18EHsVOCMevS96JIo3eASDYNWVrXEPvytDG
KUSojpmayxggenPD0z2ZI69cuhIeqMJwVEgbNiKY53hBKCUV1Zs39rhfvIefgaRE
17rkwPFqs433cvVRtr/JnWShNr2X4Opat1SuCNfoqJPetUev2O5vLvNJ9q3Fh+IR
ohq6CwlWB2Rs5kwNHtdyp71fhRlhUgjQ6AknAw+h08jymQeqZRv8CyIGkustRwrI
wxJxPncxoZGi8XI5n7pOBBG/TdtI3m0=
-----END CERTIFICATE-----
Generated at Tue Sep 22 06:34:46 2026 by rpki-client