Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ab1fa162-144b-3e0e-a82b-86083baf3661.roa
File:                     ab1fa162-144b-3e0e-a82b-86083baf3661.roa (raw, json)
Hash identifier:          YPPnu/ZYFA6cJ6CrSH2J7uBdPmBuzaw4cMW7X6Kq6vE=
Subject key identifier:   B1:1C:8C:D9:86:0F:E1:06:9D:9C:54:5C:91:8B:1A:D6:33:D3:A6:DD
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BA932854B5C295FBE94784880
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ab1fa162-144b-3e0e-a82b-86083baf3661.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     13335
IP address blocks:        162.158.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:85:4b:5c:29:5f:be:94:78:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=21c2252a-e9c6-40fe-921b-4878009e4fa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6e:98:52:32:c6:9d:ce:f2:89:6a:7d:d0:e7:
                    37:01:74:e4:1b:a4:15:56:68:a0:b5:82:76:50:75:
                    01:fd:6c:d9:c7:a8:71:12:65:9a:30:80:bd:76:3e:
                    c3:2c:94:89:eb:e7:5d:bb:e0:61:91:66:19:3f:f0:
                    4b:09:96:fd:fb:4e:d3:93:a2:a1:af:e8:f7:37:30:
                    3f:2f:45:e1:cf:9f:9a:27:ee:4c:38:f2:eb:df:56:
                    8b:c5:a4:b2:74:5c:ff:9a:6f:2a:54:08:cc:57:03:
                    fe:08:0a:18:f7:dc:ad:fa:11:ba:55:df:a3:63:d4:
                    4f:0f:08:cc:1c:0d:8c:05:db:fd:57:a2:cb:2b:f1:
                    cd:ec:66:f2:9e:fa:be:03:d1:0f:9d:f0:4e:a2:ea:
                    ef:cf:2b:a8:5e:06:f3:37:37:e4:a6:60:26:66:0b:
                    4b:af:37:69:e9:2c:94:67:f1:1e:8a:25:9d:77:86:
                    77:2b:9b:84:c4:c4:c0:e2:75:c2:34:a6:24:4f:5b:
                    74:cd:63:36:1e:7b:30:48:5e:25:67:a8:44:23:dc:
                    0c:4f:a1:b2:6a:b4:d3:1a:84:e1:ad:eb:1e:df:1d:
                    1f:87:9a:60:5a:02:04:46:cc:b8:da:9b:74:a1:da:
                    4b:ed:73:b6:ab:da:c6:64:ce:06:77:88:1e:9a:26:
                    19:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:1C:8C:D9:86:0F:E1:06:9D:9C:54:5C:91:8B:1A:D6:33:D3:A6:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ab1fa162-144b-3e0e-a82b-86083baf3661.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:bd:8a:ae:f7:99:f0:91:99:75:8b:26:2f:fa:1f:fd:69:9f:
         19:03:c3:70:83:f8:7a:a2:ba:2c:9d:e7:05:fd:24:32:b6:e8:
         4c:d8:c2:50:93:08:fc:2c:04:88:a4:fc:2e:6e:cb:4f:56:94:
         5a:ea:24:98:7f:9f:1d:d6:82:33:3b:3f:ce:3c:05:fb:8e:07:
         66:d0:22:a5:29:a5:79:86:eb:47:53:6c:e0:1a:20:a3:e0:1a:
         47:f8:92:e8:07:87:83:76:a4:23:9d:69:72:29:6d:8b:47:19:
         5e:84:e1:b3:94:40:2a:c1:8d:df:aa:1a:b4:77:07:b4:fc:3d:
         ce:b6:4e:f2:81:5c:b5:04:f2:54:9a:b6:a2:99:5e:d0:dc:ce:
         fa:ce:79:76:c3:f7:e8:64:3e:03:ba:4a:bd:a6:85:61:54:8f:
         30:f3:2a:35:b2:c6:a2:08:bc:4c:43:2f:ad:aa:0f:c2:95:67:
         b0:6c:d1:4e:dc:4d:aa:a4:dd:37:2c:22:41:03:d7:21:19:b5:
         d2:9a:0d:86:5e:55:2b:82:1f:26:7e:94:e1:2c:ba:7c:d8:7e:
         d8:20:a8:2b:14:71:e3:65:c8:b4:4f:9c:d1:8b:b1:d4:53:79:
         9a:3b:f2:d4:de:23:f8:7b:4a:ea:60:ef:7a:1d:34:6d:00:41:
         59:a1:53:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 12:32:27 2025 by rpki-client