Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3f6f5124-c551-3cc3-9b04-79df6f1ea0c8.roa
File:                     3f6f5124-c551-3cc3-9b04-79df6f1ea0c8.roa (raw, json)
Hash identifier:          Q+s+o1IBgAJCZk9nJpqQslq6+SHRkQuREMxGolE2smA=
Subject key identifier:   B8:00:F0:51:E9:F1:33:BE:7B:F3:0C:39:8E:59:D2:05:65:AF:07:70
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EED523400398F14445171AE60
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3f6f5124-c551-3cc3-9b04-79df6f1ea0c8.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        162.158.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:34:00:39:8f:14:44:51:71:ae:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=3dcd25f0-d315-4d92-80a0-1762b8cbdd06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ec:1b:06:b0:61:ea:97:45:ba:a9:17:3c:d8:
                    3a:c3:96:b4:60:f6:e8:c7:85:43:6b:d3:6b:48:3e:
                    08:af:60:e1:df:78:57:29:13:be:82:91:9a:11:61:
                    0b:8d:8b:2a:83:90:c2:37:8d:60:67:b8:fa:e3:5f:
                    d1:95:3c:11:a0:9e:0c:55:cb:0c:3b:68:b9:5d:e6:
                    b7:f6:63:be:20:f3:31:a1:60:df:3d:42:bd:6f:96:
                    03:b4:8c:3a:c4:8a:56:71:2d:ae:cc:e4:59:73:1d:
                    19:1e:99:64:48:c6:c5:d0:5d:db:8f:73:0c:31:87:
                    04:32:e4:d4:89:d1:ec:cf:30:70:2d:e9:bb:24:a3:
                    2d:68:cd:b5:30:cb:e5:9e:b8:8e:1f:b2:6d:6d:75:
                    2b:70:b5:da:86:6e:cb:12:e0:94:bf:c6:41:c4:1a:
                    02:82:2f:e2:ef:9b:be:0d:18:28:fa:c3:82:41:c5:
                    23:aa:19:67:a0:ea:e3:36:eb:ca:c2:ab:ad:1b:62:
                    2c:96:3f:33:c4:18:57:b3:c8:6b:f4:05:3c:a7:c4:
                    d7:16:94:5a:4d:2b:ae:8d:5a:17:3f:0d:69:3c:07:
                    f5:b0:1c:92:4b:a9:2a:b3:52:fa:c8:b2:fb:b7:1c:
                    c5:e5:54:56:35:64:f2:e9:15:4e:c1:d2:d8:61:1c:
                    58:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:00:F0:51:E9:F1:33:BE:7B:F3:0C:39:8E:59:D2:05:65:AF:07:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3f6f5124-c551-3cc3-9b04-79df6f1ea0c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:27:18:42:c3:aa:fb:be:69:e0:b8:6b:3d:cd:3a:d7:15:c6:
         f4:02:f4:d9:4d:0b:08:5d:7d:2b:37:01:ab:64:f5:a7:fc:57:
         bb:1f:fd:f7:c5:50:93:55:cd:aa:1c:a7:a8:d2:ff:1b:19:ea:
         b5:a7:ea:d2:31:11:16:70:06:f8:f5:18:88:7c:2c:05:7f:f5:
         4d:de:61:2a:b1:38:e8:e5:9b:7a:8b:e3:cd:58:8b:46:29:b5:
         65:37:43:e5:44:d9:dd:07:7e:31:b0:05:78:1f:a7:d5:03:cd:
         b3:95:08:8a:05:cd:22:2d:25:34:05:e6:5f:8b:91:9b:84:64:
         a7:58:88:da:01:db:20:70:50:54:c7:c2:34:33:35:ff:bc:79:
         b5:2d:3c:89:24:ce:23:75:7b:7e:e7:f7:d6:91:8a:98:68:5b:
         a4:45:ad:b7:7d:65:cd:ee:d4:7c:1b:72:23:3f:d3:dc:1a:19:
         a7:69:6b:66:df:a7:9e:f1:5d:ca:b9:3c:0e:de:b1:07:00:e6:
         55:f3:a6:5f:39:eb:f4:7b:39:96:42:76:0c:d5:a4:52:e2:83:
         80:7a:3b:c9:b4:3d:80:10:88:18:8a:c8:49:38:74:2d:ed:ce:
         d8:30:99:2b:ea:a1:5b:cc:f6:79:c3:7a:1a:de:67:7f:a8:57:
         52:18:a0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:23:56 2026 by rpki-client