Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/df0b97bd-0d9d-3c46-b63a-3763b897ab46.roa
File:                     df0b97bd-0d9d-3c46-b63a-3763b897ab46.roa (raw, json)
Hash identifier:          oKDTdw1tRioW8sVHin5hncJFX6De4ttke1bHPzAdaz0=
Subject key identifier:   79:EC:C5:15:C2:05:9C:C8:C6:C3:39:29:8E:DD:85:1C:93:AB:58:56
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BA7CD14955C8590DC217A9980
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/df0b97bd-0d9d-3c46-b63a-3763b897ab46.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     13335
IP address blocks:        162.158.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cd:14:95:5c:85:90:dc:21:7a:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=852170dd-f6ce-4515-a1f1-6de94edb9bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ec:a2:3f:4f:f9:d7:1a:5e:bd:13:1f:a4:cb:
                    4b:28:70:87:bd:1e:4b:55:22:d5:f6:bf:ce:1a:4b:
                    da:b8:0e:af:e9:ee:80:1a:94:07:a3:fe:69:63:6a:
                    58:a9:e6:7d:a7:f1:5f:1b:79:d0:5d:3b:6f:b3:ef:
                    dd:41:c9:d3:e0:b4:87:fa:2f:22:56:60:28:c7:90:
                    c4:ee:c3:37:1f:4a:ed:83:ef:ad:31:74:4f:87:14:
                    e2:53:bd:90:0f:ed:0d:64:f0:fb:2d:5a:a7:68:49:
                    8d:13:90:73:43:7c:2d:fd:f6:a4:49:fa:ff:ed:d2:
                    95:9f:98:38:57:6a:96:02:e2:76:3c:91:d8:f3:97:
                    98:8e:f9:a1:02:a5:85:fa:ae:f8:fa:7a:9d:24:84:
                    a9:db:da:64:73:8a:ed:9d:55:4e:8e:8b:27:c7:e3:
                    70:2d:08:0c:60:6d:dd:84:3a:96:50:67:1d:f0:ee:
                    48:d0:e7:4f:68:0e:9a:14:bd:ff:fd:00:bf:81:79:
                    74:8a:a2:98:a1:64:6f:e4:dc:ae:af:17:0f:63:f9:
                    fd:d9:ba:00:fb:68:64:20:b1:02:7c:3d:59:0d:03:
                    43:10:09:5d:69:f9:bc:ef:10:42:f1:4d:b2:7b:79:
                    e0:6e:43:7e:53:39:15:a6:a6:52:63:b0:57:ef:6b:
                    b2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:EC:C5:15:C2:05:9C:C8:C6:C3:39:29:8E:DD:85:1C:93:AB:58:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/df0b97bd-0d9d-3c46-b63a-3763b897ab46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:78:bf:bb:e6:55:72:e0:58:9e:00:5e:27:d7:16:08:95:eb:
         64:12:e8:b6:fc:fd:56:0c:11:98:47:50:9d:16:57:9d:e7:f0:
         97:96:eb:69:f5:45:7b:47:2f:38:d4:b7:fc:33:10:39:34:29:
         c2:3b:d3:09:c4:1a:c1:8b:6b:15:e1:a6:e7:bf:6e:03:7a:01:
         3a:eb:b2:c2:bf:ab:14:b3:f9:84:c6:37:85:5f:46:75:da:50:
         15:f9:0d:0e:2b:d6:93:e9:e6:93:10:47:5f:04:e7:b3:d0:48:
         02:19:30:66:d0:a8:b8:d4:f2:89:7f:4e:29:56:58:f8:48:87:
         92:1a:90:d7:77:5f:5b:d3:68:10:38:aa:7d:d4:42:e5:cd:61:
         5b:9b:d7:2f:12:15:ea:c3:fa:c2:95:6c:8f:61:6f:00:ea:e1:
         8b:20:99:1f:01:82:77:c2:b7:a5:4c:d7:bc:9c:68:6d:c0:9d:
         8d:79:83:01:c1:cc:b4:8d:c1:78:08:25:db:d6:37:b5:49:69:
         6b:9a:e6:2e:7f:c2:a3:48:90:bf:c4:11:4a:4f:20:36:41:5b:
         d3:40:c8:88:3f:b8:fc:9e:b0:48:70:a1:08:de:a5:e9:ce:92:
         ae:7b:60:90:b7:83:33:32:e0:96:c7:e0:e7:86:82:83:5b:03:
         72:fb:1d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 04:25:57 2025 by rpki-client