Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bce83fa1-d8d1-3286-99c5-a11d3505cfd6.roa
File:                     bce83fa1-d8d1-3286-99c5-a11d3505cfd6.roa (raw, json)
Hash identifier:          37AjaMCcZ18dxbKZTfbnFbrugo4LrarcyUxvqtdMCV0=
Subject key identifier:   61:25:7C:BD:EF:E7:A3:68:B1:83:5B:11:A4:1F:D9:D7:CE:FF:D3:2A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E4AEF632EA816042E90FEA700
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bce83fa1-d8d1-3286-99c5-a11d3505cfd6.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        162.159.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:63:2e:a8:16:04:2e:90:fe:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=b4e56524-d5da-40cf-83df-82b20bb778ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:55:33:c1:b5:a7:4d:cb:8b:f4:3e:03:9d:08:
                    fe:f7:11:6a:26:84:33:f7:af:45:cb:04:50:b7:69:
                    d1:90:bb:81:48:70:e3:99:b2:71:ae:a6:94:c6:df:
                    d1:1d:f7:cd:28:76:62:26:ab:27:6e:7f:62:de:ed:
                    d1:1e:df:49:02:30:6f:35:fd:cc:e3:41:81:da:54:
                    7b:4e:75:50:32:af:b5:ea:fc:18:23:88:62:1b:93:
                    51:34:27:dd:cc:61:06:11:4d:45:5c:a7:df:f9:b7:
                    a5:61:9d:d5:0e:9d:cb:8e:7a:d6:7c:52:73:b0:20:
                    2a:6d:1c:d4:d5:3a:b0:4c:ed:2b:ad:d0:e4:b6:69:
                    ab:62:a2:e4:0e:08:e0:74:20:1c:0b:b2:6c:48:17:
                    ac:da:c5:f3:e3:4e:d2:74:3c:c1:13:73:47:a8:72:
                    77:49:fb:a8:c4:7b:a4:72:ef:2d:9f:92:f3:d9:1a:
                    7a:c0:67:b4:d8:1e:e5:f8:8b:10:92:92:30:de:b2:
                    e6:32:f8:21:29:22:46:b4:39:24:74:69:8a:8c:50:
                    bb:c3:8e:b3:ef:43:90:8c:0c:24:22:29:cc:44:1e:
                    b8:59:2a:a5:ff:3b:68:c4:da:f8:32:2e:a7:ab:29:
                    d1:7f:f1:90:7f:61:e7:82:51:49:fb:c2:f7:49:08:
                    05:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:25:7C:BD:EF:E7:A3:68:B1:83:5B:11:A4:1F:D9:D7:CE:FF:D3:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bce83fa1-d8d1-3286-99c5-a11d3505cfd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:e0:07:a7:25:4b:4e:5f:7e:27:f9:5d:85:18:04:b8:ac:6e:
         94:dc:5e:10:72:01:3d:ab:9f:ea:48:7a:f9:49:98:6c:f9:4d:
         75:82:62:a4:ad:87:e4:6b:ce:47:41:43:90:20:e4:69:f7:5b:
         64:74:8f:0c:dc:85:3f:ea:c9:75:20:1a:ec:54:30:14:2d:a8:
         11:0e:51:74:2c:87:ea:73:c4:2d:64:ee:01:26:39:0a:b8:c9:
         d2:34:5b:82:3a:15:e6:28:d7:b0:6a:3c:17:6b:3a:6d:3a:00:
         50:9a:35:e6:ad:34:ca:3a:c0:8f:0e:bc:d1:f1:5f:89:4f:43:
         d5:7b:96:a8:72:8a:ea:af:4e:87:77:3f:fe:98:71:a1:da:41:
         0c:48:42:e7:89:9b:4f:03:1f:e9:f2:9c:5c:8f:ef:bc:45:23:
         c0:e6:5d:2b:7e:ec:eb:ab:ca:e7:ed:b0:91:3f:96:8f:17:69:
         aa:ab:09:b4:3a:32:3a:0c:0f:e2:e0:6e:6c:e5:20:08:84:fb:
         02:06:a6:17:e1:f4:52:95:be:07:03:e5:e0:f1:b7:67:67:3c:
         d1:22:00:81:de:07:9e:f5:96:b8:3d:10:54:7d:d4:81:d5:ce:
         b7:d6:69:5e:e8:fc:87:c3:c6:8f:8b:49:4e:a0:f7:4a:84:4b:
         87:e4:7e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:48:02 2026 by rpki-client