Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f6e0f7e-fb27-3793-9b5e-88f156878013.roa
File:                     8f6e0f7e-fb27-3793-9b5e-88f156878013.roa (raw, json)
Hash identifier:          Ledw7JpYvJjAe9Q/sMcp4KSFcE6gDz0TL1yicbmBLVc=
Subject key identifier:   F6:F3:A6:0D:04:82:24:2E:82:83:27:A8:4C:B8:F1:96:10:16:DC:FD
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E4AEF57B13C1A6589D26D4200
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f6e0f7e-fb27-3793-9b5e-88f156878013.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        162.158.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:57:b1:3c:1a:65:89:d2:6d:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=c1590fa1-b018-4e70-99fb-2fc2753496a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:72:13:f5:99:8f:29:a9:99:7f:95:2c:e6:ca:
                    b9:95:0a:d3:1a:4e:22:83:73:13:91:94:4e:42:dd:
                    86:aa:33:7a:bc:45:3f:ce:4b:01:0d:7d:91:db:5d:
                    ec:5c:90:98:23:41:b8:e9:67:a7:8a:35:a0:1a:db:
                    19:df:81:2a:00:04:f0:3b:55:1d:61:2a:b2:61:c8:
                    1f:64:4d:98:f2:82:06:1d:09:ea:f3:9f:48:ee:bc:
                    ff:a6:dc:57:ee:0f:9f:db:d4:fe:54:fb:e4:c8:cc:
                    b4:0a:db:e5:57:9c:0d:3d:ed:bc:4f:5f:04:12:c4:
                    73:79:7e:31:9f:5d:39:a5:60:02:34:86:75:61:10:
                    df:c3:f7:9a:7b:5d:5f:89:c0:e0:e4:61:36:c1:52:
                    0d:50:a4:b3:bf:6a:30:1f:e2:20:9f:8a:59:f7:77:
                    d4:3f:a0:db:89:70:5e:c1:18:da:18:94:28:01:14:
                    56:0e:e8:ef:4c:6b:0b:f4:aa:d1:c8:bc:84:92:ec:
                    47:e5:af:79:3a:31:7d:97:87:83:66:49:98:de:60:
                    2f:0a:30:23:49:91:f5:a9:df:f7:8d:5d:63:8d:ae:
                    91:9c:f6:08:c6:36:88:fa:dc:2a:8b:d4:f8:ae:14:
                    27:ee:99:70:a9:eb:db:ad:86:c4:3b:b5:88:7a:f2:
                    36:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F3:A6:0D:04:82:24:2E:82:83:27:A8:4C:B8:F1:96:10:16:DC:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f6e0f7e-fb27-3793-9b5e-88f156878013.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:cb:38:97:8d:1d:5b:fd:87:b2:1a:a3:9c:26:1a:09:41:b0:
         57:d6:33:ce:c9:50:99:8f:bd:f3:ea:ec:ba:ca:17:52:19:c5:
         61:2c:7b:4f:60:27:ce:3d:64:6b:2d:bd:80:61:98:50:bd:6e:
         ff:9d:71:6b:a0:e9:73:ab:db:98:88:ac:7f:2c:0c:d3:16:e2:
         62:5e:b3:4a:79:46:21:a3:0b:dd:89:54:d7:9e:76:05:ab:c3:
         ab:37:35:81:ed:12:3b:f5:86:2e:75:2f:30:f5:7a:4e:0c:a0:
         f6:e2:47:48:c9:bd:be:8c:94:d7:f6:fa:d7:9e:59:79:d8:5c:
         40:9b:a3:73:69:2a:fb:55:05:c3:66:59:11:f3:18:2a:e4:12:
         d2:ba:c8:a5:b2:ba:43:78:3e:91:16:ce:f0:ba:f4:35:b0:43:
         9a:eb:65:ac:c6:7e:7a:bb:55:4a:83:2b:dc:6d:49:e8:4b:ff:
         ac:56:58:00:bd:36:fc:c1:7b:6a:b9:f9:a1:9b:1c:d9:e4:eb:
         ce:ae:5d:1a:3b:1a:22:7d:64:51:2f:16:27:2e:ce:a6:a2:09:
         21:a8:ce:66:ca:b5:c4:a2:f4:68:74:2b:3d:f4:32:5e:d5:48:
         a5:4b:0b:86:85:4e:1f:41:8c:d8:1d:cb:bd:85:f4:fa:db:98:
         86:1a:c3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:49:55 2026 by rpki-client