Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/227e48b6-c682-3543-b621-5c8c2605f18d.roa
File:                     227e48b6-c682-3543-b621-5c8c2605f18d.roa (raw, json)
Hash identifier:          Gc7QfG6A8ieI9m3Ylq5c2a3bK9WS+B5vnI/HLutI1UE=
Subject key identifier:   FE:46:BD:A0:2B:62:4A:AA:98:D3:D2:8E:53:6D:93:AA:76:D8:FA:DC
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584F58CD66348C30F66A972B5240
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/227e48b6-c682-3543-b621-5c8c2605f18d.roa
Signing time:             Wed 30 Sep 2026 13:00:13 +0000
ROA not before:           Wed 30 Sep 2026 13:00:13 +0000
ROA not after:            Tue 29 Dec 2026 14:00:13 +0000
asID:                     14789
IP address blocks:        162.158.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:cd:66:34:8c:30:f6:6a:97:2b:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 30 13:00:13 2026 GMT
            Not After : Dec 29 14:00:13 2026 GMT
        Subject: CN=65e3e39d-fd40-4bd4-bfd1-83b0d7b36b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:56:5e:62:cf:ff:11:6c:a0:d6:3a:7b:69:cf:
                    a9:c0:35:c2:f1:e0:23:66:0d:bd:3b:17:4e:94:ff:
                    2f:86:4a:56:2b:9a:05:83:d3:4f:3b:07:d1:e2:8e:
                    b1:fb:61:47:03:ec:80:af:f2:eb:53:7c:c8:4f:fd:
                    55:ac:3b:15:c2:3d:86:9b:46:13:51:bf:0d:d1:a7:
                    85:f2:78:96:33:25:91:25:11:da:1f:ee:d0:9e:15:
                    c1:5c:9e:ee:98:de:96:e1:99:65:76:78:8a:7c:4d:
                    ca:14:f6:58:d1:a7:81:53:d9:25:3d:54:9a:30:f2:
                    7d:bc:4c:9e:ae:39:9b:5b:ca:fd:1b:36:86:c8:8a:
                    b9:66:8b:04:a3:d6:fc:df:44:af:af:31:65:02:3c:
                    ce:76:71:42:da:d0:79:dd:db:23:f4:f2:f9:87:37:
                    27:f3:0e:f4:5f:48:85:ad:a1:67:94:90:bb:f2:a2:
                    78:3c:fb:1c:8c:84:80:b6:4c:d2:af:ae:bb:36:0a:
                    c4:91:6d:af:c3:74:05:16:aa:2c:61:dd:e2:95:7b:
                    55:4d:49:db:ea:57:a6:46:e9:83:b2:b0:27:17:28:
                    a6:ae:03:c1:1c:95:fc:88:37:d8:b1:e6:98:33:c0:
                    02:b4:e6:95:46:bd:ce:31:66:c5:91:36:12:cc:c9:
                    ca:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:46:BD:A0:2B:62:4A:AA:98:D3:D2:8E:53:6D:93:AA:76:D8:FA:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/227e48b6-c682-3543-b621-5c8c2605f18d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:e4:ca:5b:de:f4:81:ac:22:37:37:e5:23:26:a3:34:23:af:
         59:a0:70:21:ae:6b:f7:6e:a4:2a:d5:df:47:cb:c4:33:25:a9:
         42:da:95:0b:47:a4:e0:aa:b3:29:5c:94:fb:b4:d3:3c:e5:c3:
         da:16:47:02:9a:fc:eb:77:0b:e4:af:f0:65:70:b5:1f:97:5e:
         14:fe:2b:a8:8d:fb:c4:f4:35:42:76:84:de:71:e5:91:5b:85:
         0e:28:b8:92:13:f3:15:07:eb:a3:c1:05:7b:78:cc:38:1d:f4:
         7b:cc:fb:a7:91:76:16:85:e7:80:70:ae:2b:f9:e9:3d:a3:cd:
         0c:e2:5a:bd:56:5d:97:47:35:f6:49:16:e5:38:9b:67:c8:0d:
         df:e2:5c:7b:68:38:17:62:f3:74:c5:8a:99:ca:b9:15:9c:52:
         ad:7a:47:41:ba:20:f2:83:85:60:2e:95:4d:3e:5b:f5:e5:e2:
         d9:56:ca:66:7b:b4:aa:81:ad:1c:d5:1f:d5:85:7b:d6:87:91:
         b3:a3:08:a4:6b:14:b8:b2:ca:76:6e:a0:da:10:3d:58:03:26:
         bf:a4:bb:9b:d5:93:e6:2a:28:f2:6f:fd:41:7f:ae:37:40:c0:
         b2:bd:2f:14:c2:a9:61:cb:ff:47:ab:de:05:5a:dd:6c:ba:da:
         31:78:aa:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:32:48 2026 by rpki-client