Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f5dbd1d1-7592-3997-bbb1-735e9caa86c8.roa
File:                     f5dbd1d1-7592-3997-bbb1-735e9caa86c8.roa (raw, json)
Hash identifier:          pheJeDRAz/k1fzsiegpr80bkTw5ZjeQBNIKo7SuNf40=
Subject key identifier:   20:FE:3A:76:6D:A1:61:8B:45:C4:E3:DD:F4:DB:11:64:1C:DB:23:42
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E4AEF645AF5C03B2F6679B7E0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f5dbd1d1-7592-3997-bbb1-735e9caa86c8.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        162.159.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:64:5a:f5:c0:3b:2f:66:79:b7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=18309197-290d-4088-af06-f386aa01d8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ec:1d:96:cb:59:fe:b1:d1:04:fb:c0:99:6b:
                    11:0f:8c:f2:b4:4f:b3:b7:4a:76:6c:58:58:e7:7f:
                    8e:c8:e3:c9:16:d8:d0:3a:8c:e5:ff:8a:64:31:d8:
                    16:07:c7:15:41:04:4f:89:bd:74:46:84:6b:d6:c6:
                    95:4a:7c:20:d8:ab:7f:98:6f:a7:c6:d7:0d:0c:59:
                    4c:5a:97:a5:57:68:91:86:a3:90:97:b0:71:da:14:
                    fc:6a:c4:78:2c:19:40:d3:fe:32:c1:de:f7:62:fa:
                    89:65:a9:23:43:44:8a:fe:59:fd:7a:fd:88:35:fa:
                    ac:85:a8:19:6b:de:37:cd:66:15:f8:cd:a6:d8:71:
                    ad:9b:f7:f1:a8:14:15:2a:1c:d2:d1:c6:e4:6c:e7:
                    78:2a:aa:5a:38:fb:3d:86:b5:ea:62:4b:3f:8f:d7:
                    3f:90:e2:d2:59:fd:3c:1c:32:8a:81:8c:08:4b:bf:
                    ba:ad:f5:de:8d:a1:90:f6:9b:80:26:71:59:2b:b0:
                    ed:34:3c:90:b6:0b:c2:b5:15:e7:c7:3c:fb:44:01:
                    6a:db:d3:a9:1a:00:1e:0f:47:6f:fe:24:bd:97:ac:
                    52:22:1e:e3:d1:f0:a7:e9:69:37:12:76:ee:86:89:
                    28:02:b3:28:68:42:db:92:95:e5:63:83:83:cc:28:
                    df:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FE:3A:76:6D:A1:61:8B:45:C4:E3:DD:F4:DB:11:64:1C:DB:23:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f5dbd1d1-7592-3997-bbb1-735e9caa86c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:f0:d2:c1:f3:aa:91:db:63:d0:55:44:9d:2c:16:e0:4b:30:
         7f:58:d4:bf:21:b5:34:22:be:0d:5a:b7:f6:c4:61:6c:64:21:
         41:01:a5:9c:dd:f0:80:b0:44:fe:84:27:d4:77:bb:51:02:b2:
         d8:a1:3b:f3:9a:46:50:a2:4d:6f:c8:fd:e0:6f:77:09:48:5f:
         48:2f:85:b1:53:d1:c8:d2:fc:97:7b:33:30:14:1d:f4:0b:3d:
         33:35:66:bd:b4:62:5e:24:c9:4c:c8:65:6f:34:88:af:31:68:
         6a:91:c5:fa:bb:35:d7:6d:65:cc:ed:4e:20:f1:de:23:2f:bc:
         8a:21:49:ee:ca:6f:c9:d9:01:fd:21:86:69:36:16:5a:eb:e7:
         70:ca:aa:2a:af:15:43:43:35:65:b2:37:ca:2d:cb:47:cf:b2:
         a7:fb:a6:90:5e:f5:6d:2c:12:ef:10:72:03:3e:a6:53:54:c5:
         ab:28:13:15:89:4c:b5:bd:74:68:9d:38:33:b8:bb:38:ed:ac:
         fc:58:be:92:c1:3d:53:91:aa:c9:93:f3:21:bf:81:fb:75:c3:
         7f:40:3a:f3:4b:24:87:4b:9d:70:a1:1b:0e:ac:fb:ce:f1:a4:
         24:ca:f7:3d:ed:be:87:80:29:f3:c1:1c:45:b2:ee:f5:d1:a7:
         ec:3a:6f:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K72Ra9cA7L2Z5t+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk
MTgzMDkxOTctMjkwZC00MDg4LWFmMDYtZjM4NmFhMDFkOGVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOwdlstZ/rHRBPvAmWsRD4zytE+zt0p2bFhY
53+OyOPJFtjQOozl/4pkMdgWB8cVQQRPib10RoRr1saVSnwg2Kt/mG+nxtcNDFlM
WpelV2iRhqOQl7Bx2hT8asR4LBlA0/4ywd73YvqJZakjQ0SK/ln9ev2INfqshagZ
a943zWYV+M2m2HGtm/fxqBQVKhzS0cbkbOd4KqpaOPs9hrXqYks/j9c/kOLSWf08
HDKKgYwIS7+6rfXejaGQ9puAJnFZK7DtNDyQtgvCtRXnxzz7RAFq29OpGgAeD0dv
/iS9l6xSIh7j0fCn6Wk3EnbuhokoArMoaELbkpXlY4ODzCjf6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCD+OnZtoWGLRcTj3fTbEWQc2yNCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjVkYmQxZDEtNzU5Mi0z
OTk3LWJiYjEtNzM1ZTljYWE4NmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop/FMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACDw0sHzqpHbY9BVRJ0sFuBLMH9Y1L8htTQivg1at/bEYWxkIUEBpZzd
8ICwRP6EJ9R3u1ECstihO/OaRlCiTW/I/eBvdwlIX0gvhbFT0cjS/Jd7MzAUHfQL
PTM1Zr20Yl4kyUzIZW80iK8xaGqRxfq7NddtZcztTiDx3iMvvIohSe7Kb8nZAf0h
hmk2Flrr53DKqiqvFUNDNWWyN8oty0fPsqf7ppBe9W0sEu8QcgM+plNUxasoExWJ
TLW9dGidODO4uzjtrPxYvpLBPVORqsmT8yG/gft1w39AOvNLJIdLnXChGw6s+87x
pCTK9z3tvoeAKfPBHEWy7vXRp+w6b8o=
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:47:36 2026 by rpki-client