Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c2408c81-e625-30f8-bf92-308e981e2d0e.roa
File:                     c2408c81-e625-30f8-bf92-308e981e2d0e.roa (raw, json)
Hash identifier:          Z3yN+61Gts/3swL6cXqsKUSEmdlKxWagm9moVr+s3tA=
Subject key identifier:   79:4E:F6:93:50:AF:6B:66:ED:08:D9:C9:D1:E4:07:83:F3:B1:52:B5
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BA9327721C64B9C75DFC1C980
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c2408c81-e625-30f8-bf92-308e981e2d0e.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     13335
IP address blocks:        162.158.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:77:21:c6:4b:9c:75:df:c1:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=56cba3ef-bff7-418c-9846-b9f482ea38fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6f:48:41:af:47:e3:86:95:ff:91:91:c5:14:
                    b1:e4:20:8b:92:8a:fc:a2:4b:65:ba:0a:7d:d1:82:
                    62:8c:d3:fd:1a:53:2b:1b:43:96:cc:36:a3:f6:33:
                    8b:c0:35:7d:7e:aa:30:a4:d4:bd:4b:38:55:b5:16:
                    dd:d4:4b:b8:5e:9b:27:cb:f9:84:27:f6:74:90:db:
                    28:04:6e:7d:a0:2c:57:b0:0c:2e:90:be:c3:b9:33:
                    e0:bd:82:c6:ca:60:c2:e5:22:54:b4:66:08:e9:d8:
                    22:b9:89:01:a5:b4:e4:57:75:29:0f:4a:ab:67:80:
                    77:94:f2:cb:4c:10:99:9c:2d:90:6f:57:c0:0b:ae:
                    d2:90:5e:19:9a:9f:48:b7:af:66:9e:57:6a:f2:27:
                    67:0e:fa:92:15:c3:62:0d:0c:51:d4:e4:1e:5a:d8:
                    cd:bb:2a:27:80:dc:a0:88:ef:eb:7a:be:2d:fa:11:
                    62:23:f4:a0:83:8e:5b:55:f2:fb:74:08:74:6d:ea:
                    98:e6:49:c4:9e:9d:df:30:0b:7c:ec:3e:67:7d:47:
                    ee:f4:c6:1a:10:10:c3:f4:5a:bf:18:84:ad:3d:69:
                    3b:05:91:ea:09:2a:9e:60:2f:fe:37:2b:d5:c7:1f:
                    b3:7a:6d:ec:06:7e:be:ea:c6:f3:72:7c:ba:38:17:
                    67:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4E:F6:93:50:AF:6B:66:ED:08:D9:C9:D1:E4:07:83:F3:B1:52:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c2408c81-e625-30f8-bf92-308e981e2d0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:bc:c5:97:7d:34:9c:c0:d1:5f:71:15:b8:df:a6:58:87:80:
         34:2e:aa:7e:bb:58:d5:4f:38:b3:70:ce:d7:dd:62:36:e9:9f:
         47:53:2e:6a:5a:db:44:82:3e:35:77:19:05:55:20:3a:09:03:
         68:5c:c3:e5:3f:ae:cc:94:ac:34:5c:60:6f:c8:f1:9c:0a:f2:
         73:bc:26:ba:26:55:82:c8:f0:64:12:1d:79:52:d8:b1:29:66:
         b7:fb:45:72:fb:08:3e:67:54:65:c8:56:6c:07:7f:5c:8d:dc:
         a3:4d:03:d6:d8:26:6e:07:4a:93:bd:f2:c3:9d:ac:b3:24:2c:
         0c:88:27:be:bf:56:1b:13:53:dc:c3:70:89:3e:98:0e:1b:df:
         ed:9e:75:af:f6:df:57:fd:1b:d4:eb:a6:5b:17:47:6e:c2:40:
         ad:b5:18:e5:f6:78:b8:bf:cb:d5:49:dc:6e:8e:aa:a5:d1:cf:
         e1:7a:c5:eb:31:ef:b7:0f:a7:e9:96:4e:9e:83:2a:e3:98:0b:
         6c:c2:30:17:29:78:3d:64:14:04:49:75:10:9e:75:d8:6d:f9:
         f0:96:83:62:fb:9e:71:13:8c:0f:66:33:dd:72:c3:78:5d:5b:
         62:ee:39:95:f2:f5:6c:d1:14:16:ca:28:87:c0:ab:62:60:56:
         e8:ac:97:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 10:03:07 2025 by rpki-client