Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3accd74f-0d9c-36f3-8fb1-74227a6ced2a.roa
File:                     3accd74f-0d9c-36f3-8fb1-74227a6ced2a.roa (raw, json)
Hash identifier:          ofZNRqn+58fL10+qe0gVOY1RQ0IDLR34+cYoMzc2M/o=
Subject key identifier:   81:27:C8:37:8A:9C:0C:46:5A:28:DB:26:21:4F:32:6D:13:26:00:92
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E4824A51FBE0FA8008B12BA00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3accd74f-0d9c-36f3-8fb1-74227a6ced2a.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        162.158.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:a5:1f:be:0f:a8:00:8b:12:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=b2f85ad9-ac07-4dae-a127-d5cd12cffb13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9d:11:44:bb:20:c6:6c:24:53:62:a1:38:d4:
                    69:d6:8a:39:ed:d0:97:c4:18:0c:bd:95:64:91:3d:
                    29:d8:58:b5:e0:96:db:fe:23:2f:74:96:bb:6b:40:
                    1f:ae:d5:60:d7:90:14:d2:42:cb:79:79:7a:4e:80:
                    ce:8a:02:c1:28:fe:ac:67:36:f4:78:e9:72:4d:f0:
                    b9:86:46:f6:fb:36:d5:a0:03:77:cf:c8:c6:da:7e:
                    8e:ed:e7:b8:12:a8:85:f4:e4:04:e7:0d:4f:10:f9:
                    f4:a7:01:2e:77:e4:09:f2:4e:1e:3c:88:60:68:9b:
                    87:3d:fa:3a:a6:ac:0d:82:16:a7:3c:c4:2c:1e:6e:
                    52:82:f6:21:7c:d4:54:25:69:16:c0:08:07:07:c5:
                    e2:3b:df:fe:8e:a5:f8:e9:6c:37:82:55:9f:85:5e:
                    a9:c8:91:d5:8a:61:ab:15:a5:44:21:c1:e0:25:60:
                    50:f0:47:eb:e1:20:38:43:56:fe:7d:6c:b1:63:2b:
                    19:00:95:8d:52:7b:e6:9a:de:6c:75:3d:43:15:36:
                    e2:e9:de:e9:70:df:96:d0:35:d0:a9:f2:6c:06:b4:
                    81:8c:48:82:7f:0a:d7:17:4d:0a:03:09:33:1f:aa:
                    82:7b:95:0f:16:49:69:9f:fe:12:08:c4:22:16:b4:
                    9e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:27:C8:37:8A:9C:0C:46:5A:28:DB:26:21:4F:32:6D:13:26:00:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3accd74f-0d9c-36f3-8fb1-74227a6ced2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:3b:f1:93:79:fb:19:50:94:3d:8e:91:87:d5:00:87:7b:a2:
         06:96:71:e5:f6:bf:4c:14:09:ef:3c:3b:1a:d6:b4:84:3e:53:
         62:e2:37:38:fe:37:32:ef:ab:11:97:30:32:5c:6e:34:da:9a:
         c3:22:7d:6b:ba:1d:15:2c:6f:66:eb:7f:b8:ca:59:f2:b4:a9:
         11:27:ad:70:71:a5:cc:2e:fe:ef:7d:d6:f2:b2:46:59:58:5b:
         43:a6:d1:01:c8:c0:89:5a:86:d1:c6:53:35:54:16:86:97:72:
         42:c1:1a:5c:24:85:18:20:60:10:8e:63:bb:a5:05:e2:16:0b:
         f4:81:33:bd:12:bb:c3:2d:56:4b:32:7d:c8:8d:b6:3f:fa:b9:
         84:1f:bf:6e:ea:94:85:6d:b4:91:27:f8:0e:89:89:13:3b:60:
         85:91:ed:f9:67:6e:76:82:76:32:6e:a4:9e:89:3a:fc:55:bc:
         bf:dc:00:28:78:12:24:12:b2:17:ec:98:7a:43:50:58:4f:13:
         d5:b6:4d:49:90:f8:36:ee:f0:48:f1:b0:a1:76:21:66:96:bd:
         4f:52:21:fe:0d:e3:c8:a1:c3:cf:f9:04:8e:e2:35:e7:5e:93:
         0d:76:22:22:a5:10:8c:78:4a:92:83:2c:19:a6:a1:53:a2:72:
         81:27:7c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:52:28 2026 by rpki-client