Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4d2da5a1-ea94-3efd-b01b-3a0d37d0a950.roa
File:                     4d2da5a1-ea94-3efd-b01b-3a0d37d0a950.roa (raw, json)
Hash identifier:          X/Xqpe4Zkgy67HshSSvHQIsW6YopBCv5iKjN1D4AEcg=
Subject key identifier:   F1:50:52:E2:AB:5E:10:5D:F4:72:B6:90:A8:BF:F0:C0:93:5D:F7:20
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584B3B25E5FEBBFE98DF210B9800
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4d2da5a1-ea94-3efd-b01b-3a0d37d0a950.roa
Signing time:             Thu 18 Sep 2025 02:56:45 +0000
ROA not before:           Thu 18 Sep 2025 02:56:45 +0000
ROA not after:            Wed 17 Dec 2025 03:56:45 +0000
asID:                     395747
IP address blocks:        162.158.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3b:25:e5:fe:bb:fe:98:df:21:0b:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 18 02:56:45 2025 GMT
            Not After : Dec 17 03:56:45 2025 GMT
        Subject: CN=d1e31670-a70f-4a4b-af41-a8da6043a568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:89:e2:72:cd:4d:01:9c:b1:9e:c6:ba:85:11:
                    e6:2d:3c:51:9e:42:1d:38:41:ec:4d:43:31:13:86:
                    ce:ad:ce:ff:7f:09:5b:4c:8e:58:55:13:90:5c:a1:
                    2b:67:cf:92:51:5c:25:7d:a0:47:78:47:c2:f2:53:
                    c0:36:bd:c1:6a:25:e2:9d:de:f3:26:1c:f5:4f:22:
                    8b:49:ed:8d:c5:c8:0c:2b:d6:ab:af:5b:21:2e:88:
                    75:a6:67:c3:25:56:b2:b8:8e:b6:1a:d9:e1:66:5b:
                    b1:81:0f:54:d3:07:22:72:00:ce:06:d6:b8:f7:cb:
                    33:0e:45:d6:62:37:76:ac:88:6a:ce:0f:45:87:f9:
                    d4:51:3e:84:0d:c6:ff:65:cf:68:82:f6:b9:1e:41:
                    7d:6c:44:84:32:85:8a:d1:7a:f4:e7:b0:89:30:73:
                    a8:fe:70:a5:1e:9c:da:58:25:d4:fe:40:19:07:e8:
                    be:ba:11:47:48:75:36:ef:54:62:09:2e:8b:59:45:
                    dd:56:10:7e:c6:82:d1:28:01:13:ed:99:e7:90:c7:
                    4c:58:32:56:b3:43:b0:99:7f:1f:91:35:27:cd:88:
                    80:92:2b:09:33:4f:7f:cb:83:76:e6:02:5c:01:99:
                    2a:6f:80:44:6b:93:3e:06:52:02:5c:e6:29:24:a2:
                    c7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:50:52:E2:AB:5E:10:5D:F4:72:B6:90:A8:BF:F0:C0:93:5D:F7:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4d2da5a1-ea94-3efd-b01b-3a0d37d0a950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:9c:08:0a:95:c5:86:30:0a:b3:3b:3c:52:37:8a:b7:c0:bc:
         21:3e:b8:da:7f:b2:81:f7:ae:9f:6b:68:9a:65:97:ea:c6:52:
         a2:5f:ee:fe:f2:c8:04:50:bb:f8:e6:51:9a:df:fa:4b:3c:a2:
         f9:4b:a7:c4:01:82:63:41:42:97:26:71:5f:57:eb:22:8b:71:
         ac:b1:70:45:f4:a4:9b:0a:8a:c5:ad:18:e2:48:da:71:a8:07:
         c1:df:d3:40:84:91:90:38:fc:9d:63:44:3a:89:84:ff:6c:8e:
         b9:57:4d:c5:1c:ec:2e:b3:41:21:0d:c5:f8:82:38:20:24:fd:
         bb:2d:45:7d:98:82:ef:31:e2:b9:e8:d1:e4:fe:1b:c4:8a:d8:
         c3:63:02:bd:73:32:35:c4:a1:18:0e:04:7a:49:e1:53:42:46:
         18:70:34:8e:f4:d7:b4:84:e2:b6:50:c4:31:5f:28:51:43:b5:
         5b:96:67:4b:c4:d9:15:c0:29:2b:a1:16:3c:ed:25:25:9c:13:
         df:de:68:e7:75:3a:35:c4:c7:7e:ca:ed:08:36:d3:ff:bc:1e:
         6f:ef:ac:d9:07:9b:68:be:9b:c7:6f:e8:f4:37:41:4e:da:07:
         93:3f:d7:1f:5a:ef:4e:b4:ac:de:1c:8e:ee:01:62:2e:57:10:
         83:5f:ce:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:41:01 2025 by rpki-client