Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/652bff35-0a34-313b-a92e-312c2b40f28d.roa
File:                     652bff35-0a34-313b-a92e-312c2b40f28d.roa (raw, json)
Hash identifier:          rK3zsCOwVUu3rPajCU0+5c94ZOwC7H2uIO+mcQxoiso=
Subject key identifier:   B8:C4:70:B4:6A:0A:CF:41:9E:D5:52:2C:35:40:26:19:87:0E:E3:F0
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584B74274BC9C2DF4189AFECB500
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/652bff35-0a34-313b-a92e-312c2b40f28d.roa
Signing time:             Wed 08 Oct 2025 13:00:37 +0000
ROA not before:           Wed 08 Oct 2025 13:00:37 +0000
ROA not after:            Tue 06 Jan 2026 14:00:37 +0000
asID:                     395747
IP address blocks:        162.158.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:74:27:4b:c9:c2:df:41:89:af:ec:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct  8 13:00:37 2025 GMT
            Not After : Jan  6 14:00:37 2026 GMT
        Subject: CN=edc0a988-c625-434d-ab78-da7cedd69162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e3:ef:d8:4e:4b:5c:38:59:74:12:34:f9:88:
                    8f:12:a6:0c:7f:b3:cf:04:ba:aa:d9:d9:bf:65:f4:
                    60:30:95:60:77:49:04:85:89:8c:12:4c:38:43:0d:
                    f1:3a:1c:ee:60:ff:1a:78:5f:10:65:40:ac:95:0e:
                    6e:48:85:cf:78:eb:15:d7:26:1d:1c:e7:53:30:b1:
                    f5:db:cc:51:17:b2:7a:5a:94:83:d8:49:84:a4:45:
                    bc:5e:3e:63:ef:04:be:c4:2d:dc:f8:63:f5:32:98:
                    18:cd:6b:28:63:f4:81:80:96:4f:50:d1:1f:ab:df:
                    28:d8:27:19:53:24:32:d6:f9:ad:ec:2d:3a:e3:4c:
                    87:30:83:10:58:aa:99:cd:0c:ed:46:cf:88:ca:cb:
                    28:2b:76:eb:44:6e:8b:f6:4d:ac:d6:01:78:5c:bb:
                    ff:85:da:de:e6:c1:d2:d6:f1:5f:fc:36:31:5a:79:
                    f1:21:5e:c4:75:59:cd:67:4f:b9:ef:6b:05:af:c2:
                    77:b2:db:ec:4e:48:56:16:97:60:03:a8:da:da:e0:
                    a4:eb:a5:26:72:fd:97:c8:13:4b:d1:a9:41:ee:75:
                    d0:05:f3:3c:4e:04:76:88:59:08:07:ad:5b:6d:c7:
                    da:83:2b:f9:b5:8b:2a:99:d9:5b:05:fa:70:a7:05:
                    1d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C4:70:B4:6A:0A:CF:41:9E:D5:52:2C:35:40:26:19:87:0E:E3:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/652bff35-0a34-313b-a92e-312c2b40f28d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:f0:f0:ee:c8:77:84:56:1b:88:b6:8c:b7:44:69:52:26:78:
         72:39:f5:d9:9f:13:aa:73:c8:6e:3a:39:5e:95:15:5c:ba:e4:
         c3:4a:d7:57:57:10:45:51:1b:d3:b0:90:e6:46:bc:02:9e:8c:
         c2:ef:31:82:73:26:9a:e8:a2:60:a2:05:16:89:e5:64:a0:d9:
         c5:9d:db:c4:07:29:79:78:27:54:86:86:33:e0:c0:1b:0e:27:
         4d:7b:af:f0:11:75:b8:da:90:92:f8:de:37:11:72:9e:b0:6d:
         ab:77:ac:88:66:ed:55:5c:78:60:7b:3d:3b:65:bd:4b:cf:1f:
         15:7d:96:ce:1b:0f:fd:b2:f9:62:6d:22:2b:cf:3d:df:3c:ea:
         09:e9:70:00:92:6b:e1:d9:09:4d:c5:f1:e3:a3:47:65:20:fc:
         eb:00:d7:98:42:a8:31:cc:e6:ef:8f:5b:84:23:01:96:1f:fe:
         45:88:7d:f7:70:53:7c:cc:12:11:65:60:30:5d:75:f3:52:d0:
         5d:db:21:25:15:9d:c2:18:1f:b6:a7:0a:38:c4:f9:39:e7:03:
         17:a0:1e:56:72:26:62:dc:79:94:b4:6a:38:57:e0:a7:3f:c5:
         ed:48:da:38:1b:55:1a:f6:24:2e:1c:37:0d:c4:a1:12:8f:26:
         89:ec:12:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:04:41 2025 by rpki-client