Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e8a07521-4a86-3af0-b951-484503cb1ecb.roa
File:                     e8a07521-4a86-3af0-b951-484503cb1ecb.roa (raw, json)
Hash identifier:          /z5Pf4H59W63pj0DgKPv46qrb0Aqkhh2tQ86XzXCCkk=
Subject key identifier:   86:29:C3:5A:2C:44:2C:C4:5D:3A:60:24:DC:7E:74:71:E2:F1:F4:D8
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EED5229422B8166B881B9EEC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e8a07521-4a86-3af0-b951-484503cb1ecb.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        162.159.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:29:42:2b:81:66:b8:81:b9:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=541f1ce2-c238-4fd1-a3e2-e54c8699e4bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:be:50:dc:20:f9:94:1c:e7:51:90:31:67:60:
                    94:aa:5e:68:c5:9e:21:5d:81:e5:51:59:c6:8c:72:
                    d4:2f:5f:bb:3c:09:4a:9b:35:6f:01:1c:2f:0b:6d:
                    3d:0b:20:48:a8:a8:33:19:4a:d8:7c:31:07:5d:f6:
                    6f:06:20:eb:6c:15:e2:0c:9f:ea:29:7f:95:a8:a6:
                    f8:9b:e3:4b:a8:63:26:3a:d8:48:7a:c1:b7:dc:e4:
                    e0:c8:7c:d0:25:08:e1:23:16:18:7b:f7:ae:83:89:
                    68:63:d9:72:dc:8f:3b:2b:dc:dd:e0:1f:e7:da:ed:
                    bb:f2:ba:1f:73:df:b4:3d:0f:93:68:15:85:9e:68:
                    f7:af:40:9e:fd:fd:ed:c0:09:80:f0:43:86:5e:91:
                    c6:70:c2:95:a7:50:54:bf:60:08:27:96:3a:df:22:
                    5e:3a:2d:4c:55:ab:43:5d:d8:f9:a2:7c:39:f5:2a:
                    fb:02:7d:97:5a:15:0a:7e:98:70:e8:98:05:fe:af:
                    b3:df:5b:48:d3:f5:f6:56:86:1f:56:f7:9d:53:21:
                    9f:f9:b1:db:6d:25:57:31:a5:40:a0:ab:e4:ce:b6:
                    dd:50:32:3d:ec:ce:9f:c5:1a:16:1e:48:d2:c6:82:
                    c0:b8:50:7b:03:4f:19:da:39:15:46:a4:49:a5:0a:
                    ff:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:29:C3:5A:2C:44:2C:C4:5D:3A:60:24:DC:7E:74:71:E2:F1:F4:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e8a07521-4a86-3af0-b951-484503cb1ecb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:56:84:6b:52:1c:f9:3f:73:9f:62:3b:e5:00:ca:34:4b:51:
         3a:f3:0e:27:9b:19:24:1b:0b:b8:83:9b:18:81:18:08:44:da:
         18:50:e1:6f:80:b7:cd:42:fe:d2:ec:da:d7:7f:c8:0f:aa:e2:
         29:6f:49:21:6d:67:30:f6:46:9b:f1:f8:94:93:2e:e5:6a:0d:
         45:22:97:82:7a:3a:7e:23:da:9e:a7:1a:0b:64:28:fc:98:0b:
         9f:13:5a:8c:89:89:15:a0:1e:38:ca:df:ba:44:b4:d5:85:30:
         37:60:75:f5:36:4c:5f:31:1d:27:b6:14:52:bf:22:20:d5:59:
         75:d8:2e:d0:a3:b0:06:3a:bd:86:de:9f:72:e3:5f:8a:bd:40:
         23:19:e8:95:53:32:d9:58:64:08:f9:43:d4:24:a4:06:27:05:
         3c:b5:70:23:d6:09:06:28:4c:14:cf:4b:96:19:45:c6:e6:b8:
         9b:da:00:d3:7e:c6:6e:33:df:f0:78:05:cd:61:a8:34:fd:0d:
         52:14:fd:8a:ed:dc:9f:b0:8c:6d:ef:68:db:1c:81:be:44:8d:
         f8:4f:fa:ab:4b:7f:26:f5:03:9e:2a:36:51:02:72:74:0f:0f:
         d1:bb:5c:ab:53:a1:4a:91:69:a3:44:57:65:12:5d:f3:db:93:
         16:80:bb:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUilCK4FmuIG57sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk
NTQxZjFjZTItYzIzOC00ZmQxLWEzZTItZTU0Yzg2OTllNGJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL5Q3CD5lBznUZAxZ2CUql5oxZ4hXYHlUVnG
jHLUL1+7PAlKmzVvARwvC209CyBIqKgzGUrYfDEHXfZvBiDrbBXiDJ/qKX+VqKb4
m+NLqGMmOthIesG33OTgyHzQJQjhIxYYe/eug4loY9ly3I87K9zd4B/n2u278rof
c9+0PQ+TaBWFnmj3r0Ce/f3twAmA8EOGXpHGcMKVp1BUv2AIJ5Y63yJeOi1MVatD
Xdj5onw59Sr7An2XWhUKfphw6JgF/q+z31tI0/X2VoYfVvedUyGf+bHbbSVXMaVA
oKvkzrbdUDI97M6fxRoWHkjSxoLAuFB7A08Z2jkVRqRJpQr/4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIYpw1osRCzEXTpgJNx+dHHi8fTYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZThhMDc1MjEtNGE4Ni0z
YWYwLWI5NTEtNDg0NTAzY2IxZWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop/EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAABWhGtSHPk/c59iO+UAyjRLUTrzDiebGSQbC7iDmxiBGAhE2hhQ4W+A
t81C/tLs2td/yA+q4ilvSSFtZzD2Rpvx+JSTLuVqDUUil4J6On4j2p6nGgtkKPyY
C58TWoyJiRWgHjjK37pEtNWFMDdgdfU2TF8xHSe2FFK/IiDVWXXYLtCjsAY6vYbe
n3LjX4q9QCMZ6JVTMtlYZAj5Q9QkpAYnBTy1cCPWCQYoTBTPS5YZRcbmuJvaANN+
xm4z3/B4Bc1hqDT9DVIU/Yrt3J+wjG3vaNscgb5EjfhP+qtLfyb1A54qNlECcnQP
D9G7XKtToUqRaaNEV2USXfPbkxaAu3U=
-----END CERTIFICATE-----
Generated at Tue Sep 22 07:16:01 2026 by rpki-client