Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4af89233-da0e-341c-afa8-d66644de70f2.roa
File:                     4af89233-da0e-341c-afa8-d66644de70f2.roa (raw, json)
Hash identifier:          fwDqB4aDzRHwtf1XF4IdWilEQZGswqQCqNL80fxnlL8=
Subject key identifier:   B6:48:A8:F8:75:5E:DC:C6:A4:03:0C:B2:7F:A4:5B:75:E7:BD:1F:CF
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E4824A1D5D8ED1B501F7C69C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4af89233-da0e-341c-afa8-d66644de70f2.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        162.159.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:a1:d5:d8:ed:1b:50:1f:7c:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=e0013e38-8a3e-4794-af8c-a2136755b288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:99:73:d0:1c:20:bd:a0:99:9e:a8:d9:5c:d9:
                    62:e5:27:86:a2:28:70:69:7f:f3:7e:67:a1:fd:94:
                    61:4f:69:f7:f5:18:20:4a:c6:72:8a:ec:f5:d0:00:
                    d2:55:1d:bd:76:24:db:bd:ae:1d:63:3b:69:54:60:
                    d1:bd:71:5e:e1:54:1e:3a:43:9d:ef:46:84:ec:3c:
                    a7:20:95:c1:47:16:6a:f2:fa:8f:a7:1d:85:12:8e:
                    5d:75:ee:30:ce:d2:aa:25:69:6a:75:4d:f5:78:1d:
                    39:a0:97:1e:61:89:5b:8c:e0:29:cd:e8:a6:b9:3b:
                    5d:de:3b:7f:fc:98:d1:42:54:e7:07:9c:90:66:3d:
                    fa:06:d1:f1:da:be:02:d1:17:94:86:3d:b8:34:86:
                    d2:d0:af:df:73:d3:30:28:69:c3:2e:15:bc:0a:9f:
                    ef:1e:6d:f8:af:8f:cd:27:90:37:6e:53:db:59:5f:
                    50:98:9d:70:6e:c4:7e:92:cb:d3:39:9e:db:b6:f0:
                    ca:af:40:3c:00:30:fd:63:44:39:14:de:90:f6:59:
                    bd:2d:0e:ec:5e:81:65:ce:6b:df:63:f2:14:a2:14:
                    0c:36:de:37:c3:22:a3:44:03:a5:8f:d0:07:47:de:
                    17:7a:11:e1:a7:62:b7:7a:e2:22:19:02:1f:f2:f7:
                    9e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:48:A8:F8:75:5E:DC:C6:A4:03:0C:B2:7F:A4:5B:75:E7:BD:1F:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4af89233-da0e-341c-afa8-d66644de70f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:1a:a3:f5:b8:74:4a:28:cf:3d:f8:2f:2f:f0:40:c9:27:45:
         0d:49:52:76:d4:3b:1f:72:57:23:4b:70:a8:32:a0:b4:bf:94:
         f2:56:a1:eb:34:2d:63:7c:f9:98:b4:92:0f:ca:d1:e0:53:0b:
         02:83:1e:65:84:d8:72:b1:fa:b1:65:b8:98:af:72:ef:4a:3b:
         00:e7:9f:2a:fe:e4:07:56:46:4c:b6:7b:9f:dd:86:30:b3:81:
         f5:4d:6a:a8:3f:c4:9e:ec:b7:f4:4e:75:1c:aa:d5:c8:4a:26:
         af:5f:dd:72:84:fc:85:0f:2a:87:c9:10:aa:88:58:88:d9:25:
         f2:35:8c:78:d9:5b:18:a4:af:2d:30:55:76:2c:0c:f0:d4:75:
         0c:56:bd:1d:03:c0:82:ac:b2:a9:25:6f:f8:dc:21:c3:8d:6c:
         e5:63:bc:58:44:dc:b3:a6:3b:22:86:fb:a8:ee:cc:2e:78:f3:
         99:54:d4:d0:bd:47:c8:a4:a4:87:8e:40:90:9b:da:29:88:a2:
         7d:ec:5d:9e:64:df:1a:23:f2:c8:43:ec:c3:0d:15:1d:23:6f:
         cc:d8:44:e7:e4:d6:b9:e2:f1:af:b4:0b:4c:bf:da:ee:9b:c6:
         85:78:54:f4:45:82:48:0c:ee:6b:a7:23:44:19:b1:dd:34:ad:
         6e:4d:bc:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJKHV2O0bUB98acAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk
ZTAwMTNlMzgtOGEzZS00Nzk0LWFmOGMtYTIxMzY3NTViMjg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZlz0BwgvaCZnqjZXNli5SeGoihwaX/zfmeh
/ZRhT2n39RggSsZyiuz10ADSVR29diTbva4dYztpVGDRvXFe4VQeOkOd70aE7Dyn
IJXBRxZq8vqPpx2FEo5dde4wztKqJWlqdU31eB05oJceYYlbjOApzeimuTtd3jt/
/JjRQlTnB5yQZj36BtHx2r4C0ReUhj24NIbS0K/fc9MwKGnDLhW8Cp/vHm34r4/N
J5A3blPbWV9QmJ1wbsR+ksvTOZ7btvDKr0A8ADD9Y0Q5FN6Q9lm9LQ7sXoFlzmvf
Y/IUohQMNt43wyKjRAOlj9AHR94XehHhp2K3euIiGQIf8veebQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLZIqPh1XtzGpAMMsn+kW3XnvR/PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGFmODkyMzMtZGEwZS0z
NDFjLWFmYTgtZDY2NjQ0ZGU3MGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop88MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKQao/W4dEoozz34Ly/wQMknRQ1JUnbUOx9yVyNLcKgyoLS/lPJWoes0
LWN8+Zi0kg/K0eBTCwKDHmWE2HKx+rFluJivcu9KOwDnnyr+5AdWRky2e5/dhjCz
gfVNaqg/xJ7st/ROdRyq1chKJq9f3XKE/IUPKofJEKqIWIjZJfI1jHjZWxikry0w
VXYsDPDUdQxWvR0DwIKssqklb/jcIcONbOVjvFhE3LOmOyKG+6juzC5485lU1NC9
R8ikpIeOQJCb2imIon3sXZ5k3xoj8shD7MMNFR0jb8zYROfk1rni8a+0C0y/2u6b
xoV4VPRFgkgM7munI0QZsd00rW5NvDY=
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:57:19 2026 by rpki-client