Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a171e529-be52-33c0-a394-6d7043980bdd.roa
File:                     a171e529-be52-33c0-a394-6d7043980bdd.roa (raw, json)
Hash identifier:          97BujgwjsQ5pdDtVJ5I/gMN+ZE2ntQ6fzFwrXLS1gB4=
Subject key identifier:   8F:3B:6C:BD:6F:D0:0F:33:61:9C:E4:AC:2B:AF:E5:26:4D:9B:37:EC
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E4824AD3095D959AAC6ADD440
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a171e529-be52-33c0-a394-6d7043980bdd.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        162.158.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:ad:30:95:d9:59:aa:c6:ad:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=9cef8a57-7fd4-40d5-b1bb-a4d35c2c920a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:86:5e:71:9a:7c:53:c4:b1:9c:6b:17:06:a8:
                    c6:50:36:86:92:ef:51:d1:51:08:3b:91:0d:53:bf:
                    15:c7:ef:49:6e:84:8b:69:a6:b6:9c:57:bb:bd:cd:
                    d5:5f:e9:87:5a:7e:5e:fc:23:ca:b3:cf:68:5e:fd:
                    c9:c1:5d:d6:cc:f0:a8:ea:de:80:07:32:75:33:43:
                    91:cf:af:9d:35:39:91:ae:ea:38:1c:0d:04:17:8c:
                    b1:5a:ac:b5:6b:ce:95:40:c7:88:b5:58:08:70:a1:
                    9f:eb:1e:97:50:4f:c3:13:8d:c4:c1:06:2e:5b:ff:
                    dc:76:5f:23:f3:af:82:b9:1a:ae:97:45:15:65:20:
                    7e:7a:93:f7:b7:69:2f:b7:cc:00:34:7e:fc:2a:74:
                    26:30:5d:a4:66:3f:5c:a3:55:9e:81:c5:37:8a:a7:
                    0f:23:db:3d:bc:72:52:76:29:af:13:81:fe:07:20:
                    db:19:85:02:b5:7d:a8:4d:b8:2f:70:a4:3a:8c:19:
                    dc:18:b4:e4:cc:69:ff:4d:9b:34:2e:f4:c0:65:31:
                    fa:18:3c:f2:0f:f8:6d:2d:c7:1c:4f:58:f5:0f:48:
                    79:6b:ed:a0:e2:fa:7c:8d:c0:fa:e6:bd:32:22:b3:
                    33:75:ba:26:e6:8c:65:4e:e7:48:85:42:e2:bf:e0:
                    ba:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:3B:6C:BD:6F:D0:0F:33:61:9C:E4:AC:2B:AF:E5:26:4D:9B:37:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a171e529-be52-33c0-a394-6d7043980bdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:ee:64:d8:64:82:f7:b6:82:2b:f9:1f:c0:b5:0c:72:46:a1:
         ac:78:75:c7:17:e0:bb:6a:4a:bc:aa:1a:96:3c:a2:ce:51:77:
         26:5b:3a:37:d1:85:71:9c:d0:de:20:4c:97:ce:d0:6f:85:9c:
         bd:85:c2:f2:3e:39:a7:a6:a1:2b:19:ad:c0:a3:af:df:b7:ad:
         26:0e:27:e8:45:de:27:45:4c:d7:be:78:db:59:fd:ce:08:d0:
         2a:2f:15:5e:dd:4c:11:96:a7:8e:70:42:7d:38:c2:d0:13:f2:
         45:41:4c:ee:41:0f:7a:30:59:c3:d6:1d:11:dd:67:f2:6d:0f:
         1e:cf:af:f8:e7:e2:2b:12:39:8a:6d:f9:9c:21:bf:2d:ca:bc:
         3a:1d:e2:51:71:bd:4c:eb:c7:e6:ff:77:8c:fe:4c:d5:52:0d:
         fd:de:f7:60:c7:8d:3d:00:6a:0d:8e:24:ed:63:c6:79:c4:81:
         40:25:1f:d6:70:75:29:23:62:b4:12:9f:7d:74:44:c5:bb:d7:
         ff:5a:78:fd:59:91:92:e3:9b:36:4c:2b:3d:35:02:82:92:b5:
         f6:4e:28:f5:c4:80:de:84:35:62:bc:30:7e:4f:a3:aa:a5:7f:
         06:6c:54:64:dc:1d:fc:0b:f1:e2:f4:57:fa:53:02:8d:e2:8a:
         01:d8:71:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJK0wldlZqsat1EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk
OWNlZjhhNTctN2ZkNC00MGQ1LWIxYmItYTRkMzVjMmM5MjBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIZecZp8U8SxnGsXBqjGUDaGku9R0VEIO5EN
U78Vx+9JboSLaaa2nFe7vc3VX+mHWn5e/CPKs89oXv3JwV3WzPCo6t6ABzJ1M0OR
z6+dNTmRruo4HA0EF4yxWqy1a86VQMeItVgIcKGf6x6XUE/DE43EwQYuW//cdl8j
86+CuRqul0UVZSB+epP3t2kvt8wANH78KnQmMF2kZj9co1WegcU3iqcPI9s9vHJS
dimvE4H+ByDbGYUCtX2oTbgvcKQ6jBncGLTkzGn/TZs0LvTAZTH6GDzyD/htLccc
T1j1D0h5a+2g4vp8jcD65r0yIrMzdbom5oxlTudIhULiv+C66QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI87bL1v0A8zYZzkrCuv5SZNmzfsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTE3MWU1MjktYmU1Mi0z
M2MwLWEzOTQtNmQ3MDQzOTgwYmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop4PMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALPuZNhkgve2giv5H8C1DHJGoax4dccX4LtqSryqGpY8os5RdyZbOjfR
hXGc0N4gTJfO0G+FnL2FwvI+OaemoSsZrcCjr9+3rSYOJ+hF3idFTNe+eNtZ/c4I
0CovFV7dTBGWp45wQn04wtAT8kVBTO5BD3owWcPWHRHdZ/JtDx7Pr/jn4isSOYpt
+Zwhvy3KvDod4lFxvUzrx+b/d4z+TNVSDf3e92DHjT0Aag2OJO1jxnnEgUAlH9Zw
dSkjYrQSn310RMW71/9aeP1ZkZLjmzZMKz01AoKStfZOKPXEgN6ENWK8MH5Po6ql
fwZsVGTcHfwL8eL0V/pTAo3iigHYcQs=
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:55:50 2026 by rpki-client