Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bd14d38-6c80-34b6-b616-5ff26fb6b3ba.roa
File:                     5bd14d38-6c80-34b6-b616-5ff26fb6b3ba.roa (raw, json)
Hash identifier:          iKgiOqGe86Tk54hgLy1R/gbSbmAnicbG9zncODakyeI=
Subject key identifier:   0F:E6:87:92:0A:DC:C8:10:54:54:02:21:20:9D:20:55:CE:2E:AB:C8
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BA667B15B6B1FB371222C7720
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bd14d38-6c80-34b6-b616-5ff26fb6b3ba.roa
Signing time:             Sun 26 Oct 2025 13:00:38 +0000
ROA not before:           Sun 26 Oct 2025 13:00:38 +0000
ROA not after:            Sat 24 Jan 2026 14:00:38 +0000
asID:                     13335
IP address blocks:        162.159.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a6:67:b1:5b:6b:1f:b3:71:22:2c:77:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 26 13:00:38 2025 GMT
            Not After : Jan 24 14:00:38 2026 GMT
        Subject: CN=02d79e18-6696-41b5-ab19-6fb428ba6bc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2c:60:87:70:17:5b:f8:eb:3b:ac:11:51:39:
                    f9:b7:59:81:51:de:2f:b1:ca:ae:ae:7f:40:de:37:
                    a8:3a:4f:8f:06:59:34:e8:7e:0c:1d:d4:bf:f4:b4:
                    6f:0c:40:3a:da:3a:1b:92:df:1d:e6:aa:df:90:ad:
                    6c:dc:7e:13:e6:a5:f7:4f:2d:52:39:34:ba:aa:18:
                    db:7b:a4:36:0c:68:3b:be:b4:8a:e9:cb:6a:cc:73:
                    67:f5:b4:23:db:c3:60:76:60:1a:f2:11:df:f2:0d:
                    54:29:db:8b:5a:38:b7:a4:d2:89:a9:9f:1e:9c:b2:
                    f4:1b:62:43:3a:f2:2d:d2:77:0c:81:91:08:98:2f:
                    56:39:d1:f9:f4:91:83:30:a7:80:88:67:d6:92:01:
                    f0:ce:c4:41:87:f9:31:c2:bf:44:49:e1:d7:2a:c9:
                    f5:c8:fa:59:c9:2d:59:ea:a9:c0:2d:56:f9:01:7b:
                    6b:b7:11:e6:28:45:e2:c1:f5:25:4e:62:aa:46:d5:
                    c9:19:73:e4:0e:2f:fb:05:65:8d:d5:1e:32:9e:35:
                    de:56:c2:dd:e5:ac:59:a7:03:5c:1a:e7:62:26:0d:
                    05:52:7b:00:cc:c5:e1:45:fe:00:59:f5:a0:bc:95:
                    6d:63:de:45:a9:e2:19:19:b5:f8:fe:7d:70:84:12:
                    37:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E6:87:92:0A:DC:C8:10:54:54:02:21:20:9D:20:55:CE:2E:AB:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bd14d38-6c80-34b6-b616-5ff26fb6b3ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:b5:ed:98:68:95:a1:86:0a:10:5f:04:ae:2f:bb:5a:49:13:
         ce:8e:ff:83:c7:97:47:ee:7b:8c:b7:ad:07:57:49:6b:1d:ba:
         6d:e8:59:5a:62:cd:20:67:91:1f:69:66:b4:85:e4:57:ba:61:
         40:9d:2e:a2:df:db:16:3c:8d:c6:e9:9a:1c:3b:3e:0b:11:d1:
         2d:62:5a:99:a2:cf:6b:20:58:ea:34:03:1a:f4:99:a0:41:dd:
         3a:2b:1d:a5:af:40:d0:c6:4f:7b:74:ad:fa:e3:d9:37:7a:1a:
         5f:a9:73:fe:78:65:ac:52:d4:f8:44:57:eb:e0:fa:06:48:90:
         44:71:cb:72:d1:59:e3:a5:9d:35:5f:6d:2f:45:8d:d5:96:b3:
         d0:e3:00:00:23:44:ce:bc:21:2e:f1:be:42:f0:88:c7:6a:a1:
         1a:b2:82:7a:9c:b6:65:47:1c:b8:15:07:92:3f:ce:8f:4a:dc:
         75:e1:0e:a2:74:96:f2:1b:1a:64:18:0f:72:4e:f8:1f:1a:23:
         63:3a:11:c5:99:1e:b9:b7:75:58:39:25:9a:84:a4:c5:7c:44:
         d6:21:f4:ea:dd:4b:88:6b:86:fe:7f:ab:5b:0d:c5:ec:4f:d9:
         8f:c0:c3:c0:b5:f2:1d:e1:d6:97:47:dd:11:d3:af:46:c1:c2:
         56:2c:a7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 09:59:15 2025 by rpki-client