Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c27aaa9f-3aaa-3985-8a68-6ad9191a15e3.roa
File:                     c27aaa9f-3aaa-3985-8a68-6ad9191a15e3.roa (raw, json)
Hash identifier:          7YuCuKrR3LtGqck57QMNGseQ965xBCe/bHbolna189I=
Subject key identifier:   17:2C:6D:6B:69:CF:ED:12:BF:04:29:BB:C5:D7:D5:76:12:02:3D:95
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E4AEF6093500C4CA248102880
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c27aaa9f-3aaa-3985-8a68-6ad9191a15e3.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        162.158.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:60:93:50:0c:4c:a2:48:10:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=6e272f18-1394-4348-a753-a58d01384f78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a2:36:e0:72:be:f0:a2:19:41:ea:e5:ff:af:
                    11:e3:00:53:d2:38:46:bc:cb:ed:70:0b:d0:37:18:
                    23:62:08:e2:e9:79:a6:95:db:29:e8:cd:93:3d:d5:
                    7b:7e:7d:e0:d1:71:59:69:95:43:9f:d2:83:c1:da:
                    7d:17:df:a1:f9:58:d9:03:4e:27:e9:30:b5:64:c0:
                    a6:40:95:4e:ac:ab:00:1b:ad:49:70:63:aa:2d:2c:
                    74:d6:f2:de:b5:d9:af:31:0a:46:f4:5a:ad:cf:1c:
                    ce:5c:a4:96:41:e6:0f:37:f6:7b:e2:b3:02:7a:84:
                    4e:30:3e:fe:08:9c:4f:90:62:b7:72:4a:80:e4:f5:
                    3b:85:ec:07:69:a3:c2:1c:3c:cf:39:73:fe:ed:3a:
                    11:32:cb:1f:a2:9f:61:61:c7:4e:d3:81:8b:85:c3:
                    94:52:b5:92:56:66:d5:14:46:fb:17:78:3e:3f:eb:
                    31:cf:83:73:2d:fe:b3:ba:d4:02:c8:ad:23:8b:01:
                    07:39:2c:86:5f:6c:68:89:1e:d5:b1:67:6e:43:02:
                    90:a4:00:6d:a5:10:f6:1d:3e:71:82:94:89:f7:69:
                    53:fd:59:42:5d:64:6a:7e:1a:4b:95:2a:3c:3e:74:
                    af:1d:e4:46:42:32:6a:97:b9:b3:d1:7c:28:f5:f9:
                    68:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:2C:6D:6B:69:CF:ED:12:BF:04:29:BB:C5:D7:D5:76:12:02:3D:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c27aaa9f-3aaa-3985-8a68-6ad9191a15e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:db:0c:8c:71:bc:36:00:7d:65:4e:33:aa:2c:a5:59:5d:02:
         6a:a1:b1:90:a8:cc:ff:3c:7b:45:67:6f:f0:11:ae:d8:79:b6:
         29:ca:c9:69:d5:7f:1f:70:fb:67:40:32:98:fd:c9:98:ae:ce:
         76:49:0a:8a:25:58:8b:84:ee:7e:25:ab:1b:11:68:80:3f:9f:
         a0:63:44:30:8b:e9:b6:c2:85:0a:db:8b:23:52:48:08:da:99:
         b5:ff:a9:a7:d9:67:ed:7c:34:55:2f:f2:6f:e7:37:60:ac:1b:
         c8:71:16:83:30:99:b1:c4:1b:2b:51:b7:67:95:fb:ae:e1:43:
         fc:c8:b7:62:e9:f5:cd:57:1d:ad:b1:e3:fc:1a:21:c9:db:72:
         f0:27:cc:9a:9e:ce:b5:17:bb:88:bb:d8:da:a7:9c:27:db:9e:
         6e:3f:5a:cd:52:12:f2:da:e0:78:43:28:69:e2:9f:b0:c2:f5:
         f6:0f:2c:5c:c4:6a:d8:e0:52:77:a4:90:e8:62:2d:5f:0b:e7:
         b5:eb:c2:e0:6a:d5:5c:af:ec:97:a7:86:5c:1f:be:3f:61:a2:
         99:ee:7a:ea:62:a8:ae:4b:ed:ff:2c:82:29:04:6b:e3:b2:ac:
         73:20:51:e1:bd:10:af:e4:cd:bc:56:f7:19:62:ee:c3:d7:d5:
         70:71:1a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:24:38 2026 by rpki-client