Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5651b345-56a7-3c62-8f22-b08ae9282a7c.roa
File:                     5651b345-56a7-3c62-8f22-b08ae9282a7c.roa (raw, json)
Hash identifier:          L8Je2U2QZob5oyGe9kDp86wv1DECdKjt9k+2SA+7SXs=
Subject key identifier:   71:E3:E9:C7:AE:1A:F9:95:59:C8:D8:43:35:BF:6C:7F:9C:8E:01:98
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584F63F8304076332C15AA066B00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5651b345-56a7-3c62-8f22-b08ae9282a7c.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     14789
IP address blocks:        162.158.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:30:40:76:33:2c:15:aa:06:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=289c1627-f443-4330-be6b-dca1704a7f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:60:af:f5:0b:95:bc:b6:34:e6:9e:52:b0:c6:
                    bd:2e:e2:29:08:31:96:90:98:38:0b:71:99:ef:d3:
                    07:9e:82:ab:f6:be:55:73:d8:86:e9:24:fb:d0:70:
                    31:b1:93:45:d4:c2:6c:90:77:b6:47:ee:b9:76:cd:
                    3f:f5:d2:29:9f:a2:9a:5a:82:9a:11:df:86:e2:c8:
                    25:6b:73:4a:7b:2b:11:b7:e3:e4:56:b1:11:cf:6a:
                    88:ee:e4:52:6c:bd:13:a2:fc:66:71:34:e4:53:f5:
                    a5:4c:43:89:12:67:21:e8:ef:a6:e9:af:2b:67:90:
                    d8:06:e7:fe:77:e3:79:d4:30:e4:49:ec:2c:26:a3:
                    a2:ea:1d:8d:f1:5c:d7:81:6a:1f:84:57:7f:7c:dc:
                    45:c2:15:80:b3:37:9d:c8:5f:dc:b0:9d:b5:d2:40:
                    f6:7f:66:b5:49:71:1c:51:a3:4c:2d:a2:0a:fc:74:
                    63:b2:d3:16:5d:59:54:d8:c1:80:77:bd:fa:53:d8:
                    38:31:60:95:4a:4e:f4:22:27:99:54:5b:51:2f:5c:
                    f0:4f:4b:21:46:7b:71:d2:23:bb:65:fb:1c:88:5b:
                    b1:b3:e2:9e:b2:70:4b:c3:ec:db:87:e3:ed:61:f2:
                    e9:8a:c6:bf:ac:bb:c5:f3:e0:19:86:f6:c9:fd:c5:
                    b9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E3:E9:C7:AE:1A:F9:95:59:C8:D8:43:35:BF:6C:7F:9C:8E:01:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5651b345-56a7-3c62-8f22-b08ae9282a7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:8a:70:55:46:c2:b4:59:25:41:bb:2a:62:b3:38:ac:e8:ea:
         a8:f0:7a:64:36:3d:64:60:1f:09:ee:92:90:b1:9e:05:18:08:
         12:eb:39:df:95:62:46:48:d5:5b:20:a0:d7:f8:ae:b5:53:40:
         97:82:a9:d7:85:fb:9a:b7:0c:20:a2:72:61:4c:03:ff:e9:eb:
         82:96:d8:33:f9:63:b9:e0:be:75:02:ee:37:96:dd:96:e9:88:
         f6:8b:47:0a:97:5e:8f:a2:15:db:eb:04:32:24:b2:53:04:b0:
         91:3b:f8:34:84:53:b2:3e:97:d5:04:c6:f0:32:cd:a5:43:83:
         b6:19:00:fa:a3:ea:c7:f9:d1:34:e0:0b:1b:a4:5d:a3:e8:41:
         e2:31:fa:91:a3:b3:42:a0:df:a1:2e:00:49:c6:8e:69:50:07:
         95:0d:70:bb:c7:18:ad:92:b1:6c:e7:b1:0b:75:25:9f:9c:c7:
         dc:72:88:56:7f:5d:ef:5d:c4:39:31:57:4e:8b:d2:81:0a:62:
         47:5a:a6:6a:34:d6:0b:8d:27:04:f6:92:e7:df:72:fd:06:e7:
         c8:e5:fb:e7:9f:2f:60:31:5d:97:a2:6f:fa:9c:f6:34:3f:7f:
         22:b3:84:ba:da:a1:e5:8b:f0:59:01:0f:da:39:90:e5:59:63:
         f2:6f:02:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:25:26 2026 by rpki-client