Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c725e32a-b8c8-3351-ad3b-18c94b1d7162.roa
File:                     c725e32a-b8c8-3351-ad3b-18c94b1d7162.roa (raw, json)
Hash identifier:          l+T3RKpEoVQADDvs0TwSei09ene6hbR7c3XjJ/AvXW0=
Subject key identifier:   2C:90:56:13:1E:A8:6C:CB:CB:B7:A0:85:58:5F:23:82:83:2C:F6:28
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E69A4B42D0C1A6AF689E57100
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c725e32a-b8c8-3351-ad3b-18c94b1d7162.roa
Signing time:             Mon 06 Jul 2026 21:00:13 +0000
ROA not before:           Mon 06 Jul 2026 21:00:13 +0000
ROA not after:            Sun 04 Oct 2026 21:00:13 +0000
asID:                     13335
IP address blocks:        162.159.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:69:a4:b4:2d:0c:1a:6a:f6:89:e5:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul  6 21:00:13 2026 GMT
            Not After : Oct  4 21:00:13 2026 GMT
        Subject: CN=f14c60ce-e498-468f-ac69-5e9ddc9bfa67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ca:cc:e2:f9:9b:3f:07:fb:37:6c:81:c9:3e:
                    bc:79:ca:7a:e4:c6:53:a9:dc:f5:66:a2:e5:48:52:
                    f7:da:cc:6e:93:bf:78:f2:5f:af:8f:c8:18:ab:44:
                    e1:1a:b4:67:5a:f8:a4:8a:a2:bb:3e:de:70:cb:0a:
                    d8:34:7b:61:d6:e6:30:ee:f9:94:fe:b7:53:e4:bd:
                    2e:83:43:41:05:c3:4e:c2:56:a9:01:d8:57:82:25:
                    84:de:7e:af:8d:2e:76:75:8b:a3:fa:b7:d0:db:3d:
                    65:08:95:9e:ab:09:8d:52:c2:71:00:a7:53:92:c3:
                    70:75:51:ee:ce:53:0d:82:2e:e0:78:75:86:89:64:
                    5c:1c:ab:c5:72:f4:24:75:b4:7b:54:c1:b7:d7:73:
                    45:b3:ec:08:22:6e:6f:34:4b:e8:26:8f:1f:36:73:
                    be:d5:df:52:88:a7:3a:23:94:44:82:64:0b:73:89:
                    20:ec:fd:71:7c:78:9b:e1:39:82:71:36:ff:47:09:
                    7b:3b:cd:6f:a7:6e:ec:03:42:20:a1:5d:a9:03:c8:
                    cc:49:fb:45:46:1c:38:28:aa:84:e2:09:f5:44:da:
                    76:6c:d6:52:a1:7a:09:89:d8:28:ed:c4:a2:79:80:
                    76:61:ce:b8:40:a3:e5:8a:a1:e5:b8:cd:8d:b4:64:
                    dd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:90:56:13:1E:A8:6C:CB:CB:B7:A0:85:58:5F:23:82:83:2C:F6:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c725e32a-b8c8-3351-ad3b-18c94b1d7162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:f3:ea:4f:5b:6b:14:6b:a7:a6:9b:16:d6:a3:12:6b:45:dd:
         9b:45:14:09:a7:63:a9:7f:09:96:7f:d4:0c:91:fc:db:17:df:
         bf:b9:e1:ae:4f:a7:bf:c3:de:bf:87:43:12:a1:58:78:de:d0:
         77:37:d5:8a:52:3f:d4:24:bf:a7:c9:16:34:9e:d4:71:0b:32:
         0f:25:e6:0f:65:cb:b8:ad:d8:4b:31:52:2b:88:b8:7e:5e:d2:
         18:d9:72:f6:c4:3b:96:28:52:22:c1:9c:ea:73:e0:40:d1:62:
         64:3e:2f:7d:40:99:57:c0:0b:54:2c:ac:ad:8d:37:bc:ae:fa:
         9c:87:30:91:fe:9e:e9:b4:bf:60:5d:2e:ce:72:f9:50:be:1c:
         a5:b5:df:c4:06:20:3b:c2:eb:d0:01:70:da:8a:eb:d5:7f:b0:
         36:f0:3d:f6:4e:bf:e9:8d:ce:30:e3:a7:45:1d:b1:5d:4c:b6:
         e1:cd:82:d4:91:08:7b:98:1a:96:97:44:1c:fb:35:7d:42:87:
         c6:c1:0c:08:ff:bc:14:cc:5d:89:d2:f9:03:7c:60:58:30:bc:
         8f:40:e3:a6:28:6e:da:c6:fa:be:e4:21:55:93:3b:7c:52:91:
         f0:6a:0e:d4:b2:07:ff:99:4f:05:28:11:8f:ca:70:e0:f7:78:
         d4:42:92:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:49:13 2026 by rpki-client