Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e66e02fe-eedc-396f-a36c-8104cebe452a.roa
File:                     e66e02fe-eedc-396f-a36c-8104cebe452a.roa (raw, json)
Hash identifier:          2xrIeFKCWfGcstEgTDSq/kPxBBGU3OWvzhI38sUVd6k=
Subject key identifier:   2B:1E:B5:BF:A7:3C:F6:7D:56:DA:A4:99:DE:2E:77:DB:56:37:F6:EA
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EEA87766F135CF5CE8A6FEF90
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e66e02fe-eedc-396f-a36c-8104cebe452a.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        162.158.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:76:6f:13:5c:f5:ce:8a:6f:ef:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=dbd05737-6417-4b8b-b7ea-729982523c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5c:60:06:bf:2e:4e:00:8e:7a:b2:d6:57:c0:
                    77:5a:cb:a1:4e:ac:72:4d:7b:3e:26:fe:65:74:19:
                    47:9a:c1:b9:d6:db:31:94:84:bc:75:cc:92:a3:47:
                    c9:ff:f4:9c:27:7b:bd:52:0a:72:89:14:30:26:49:
                    dd:55:d8:db:db:75:33:9f:a9:52:cc:4b:2b:1d:28:
                    51:05:b5:69:1f:86:b2:8b:6b:a8:a6:77:f1:eb:4c:
                    c9:9c:dc:83:21:06:07:4a:bc:a9:ab:56:79:24:76:
                    00:6d:c6:1e:37:fb:f9:5c:82:23:6f:2d:6d:0d:4b:
                    9f:8b:7e:3c:19:bb:75:aa:88:b1:45:1a:6e:a7:c7:
                    fc:45:92:10:fd:f6:ff:51:3d:8d:5b:af:97:ad:59:
                    9f:6a:8a:72:a5:9c:1a:d3:44:94:c8:a7:14:cf:96:
                    dd:de:5c:a0:be:f4:51:37:42:6a:ad:00:27:c8:c2:
                    f3:0d:73:9c:6b:31:bf:49:6f:f9:a5:2c:0c:7d:1d:
                    ec:b4:88:67:41:12:42:53:2c:a8:27:00:52:8b:d8:
                    83:cd:8a:57:f9:fb:17:8e:80:a7:c5:6f:4b:f9:67:
                    ee:09:e6:25:87:43:e7:1d:b3:18:53:1f:64:4f:5c:
                    19:a7:77:48:35:56:0c:0c:8e:18:c9:af:5b:7c:3e:
                    05:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1E:B5:BF:A7:3C:F6:7D:56:DA:A4:99:DE:2E:77:DB:56:37:F6:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e66e02fe-eedc-396f-a36c-8104cebe452a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:18:de:a8:ce:ed:80:ad:31:15:7e:8b:5a:09:2e:1e:9e:64:
         a8:16:f8:95:9d:97:00:23:61:21:88:db:7f:46:d2:35:9d:90:
         33:42:b5:58:cb:0c:53:2b:4a:30:64:4e:93:7e:47:34:c1:7b:
         97:4c:58:13:4b:bf:ee:72:2d:a2:50:05:dd:04:45:78:98:b0:
         fc:69:d0:b8:5d:ed:3d:73:ef:4e:91:66:09:b8:bd:82:a2:27:
         43:ae:ec:1f:8e:05:66:75:a8:79:bf:02:a0:79:4f:f8:ec:10:
         32:64:bd:94:7f:f8:7e:e8:db:a4:50:f7:03:20:f7:dc:91:66:
         eb:39:11:af:36:f9:f0:90:23:28:11:3c:0c:b6:6f:96:25:b5:
         d9:1c:95:85:63:43:3b:bf:d8:1a:48:28:d1:a0:e1:c7:9f:3d:
         91:94:23:58:d3:66:7f:f5:91:13:1b:46:67:ee:c9:cc:74:19:
         44:80:c9:bc:a2:b1:28:6b:e6:80:01:74:12:81:11:e8:8f:e0:
         34:11:03:05:9c:dd:0f:38:08:44:99:7e:5c:1a:d0:39:47:26:
         47:6a:79:74:4d:48:ed:25:69:49:a6:77:cf:3a:0a:59:d4:4c:
         86:fa:85:e8:a0:45:cf:ea:b6:6e:c9:4e:b1:ec:38:40:18:39:
         83:ae:99:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:24:03 2026 by rpki-client