Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c8ea313a-63f1-3933-94cc-f1df3ab467f5.roa
File:                     c8ea313a-63f1-3933-94cc-f1df3ab467f5.roa (raw, json)
Hash identifier:          GRKI+raDYVCGRV0HsYYJ5lfw1rk5HJK68mYfkKtRMAI=
Subject key identifier:   16:38:D4:87:DB:B3:9A:4B:07:B8:2E:56:E7:86:17:51:94:D6:FC:26
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584F497425F5830394F2FFAA9A80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c8ea313a-63f1-3933-94cc-f1df3ab467f5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        162.159.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:25:f5:83:03:94:f2:ff:aa:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7f3d76b5-cce7-431a-bcde-2e94c94e9cb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5b:84:51:df:97:38:04:69:99:58:6b:e6:bf:
                    b7:2f:7c:95:08:1c:fb:ef:67:b7:e9:12:1e:22:83:
                    7d:8f:8b:30:b7:8e:08:a7:ae:21:cf:27:ab:01:ec:
                    e5:64:aa:1f:5a:3c:dd:dc:80:e5:c0:17:fb:8a:7f:
                    ea:de:87:59:cb:f5:d2:6e:60:71:16:66:f7:f2:f0:
                    e9:79:5e:ea:e1:dd:db:c6:28:97:e0:dd:c0:a4:c8:
                    3f:c2:bc:0f:9d:51:23:80:fe:44:58:58:d7:ba:17:
                    2c:55:e9:9a:1a:ad:1c:1d:b2:55:a4:ea:32:01:7a:
                    d7:95:5b:d7:6a:82:ea:88:29:cb:cc:bf:a3:e5:c2:
                    74:75:f9:e2:5a:18:f4:6d:36:e2:ab:2d:b7:6d:9d:
                    cc:00:22:d7:a0:d8:55:cf:59:6c:41:5f:d5:73:10:
                    da:cb:ad:01:75:96:93:d5:0a:c2:a0:50:ce:12:e3:
                    a9:1c:45:99:6f:8f:cf:65:3e:09:a3:b5:1c:1c:88:
                    d1:52:20:50:a2:f0:13:95:31:2b:b2:c2:39:0e:0b:
                    41:b6:b0:4e:06:98:35:be:85:1e:8f:9d:ee:b3:74:
                    f3:c2:b5:01:ef:28:ca:a4:7a:55:93:0e:c7:d8:08:
                    0e:3d:b0:f4:ac:3e:dd:6a:25:af:f1:1a:54:cf:66:
                    eb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:38:D4:87:DB:B3:9A:4B:07:B8:2E:56:E7:86:17:51:94:D6:FC:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c8ea313a-63f1-3933-94cc-f1df3ab467f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ce:7f:b4:c6:e7:06:6b:c6:f3:a0:10:4f:46:af:ab:b1:77:
         55:a8:a5:44:51:04:81:fb:30:71:6d:b7:a4:a9:0b:45:b1:0e:
         d6:47:b3:5c:f4:ca:4c:37:12:db:ba:f6:b2:8d:ae:63:2a:47:
         22:6b:43:68:96:67:27:b5:22:73:ef:57:67:63:21:be:2d:a0:
         ca:c2:b4:f3:ae:44:53:45:c1:96:2c:36:98:24:b6:ae:3b:05:
         04:21:e5:95:6a:b0:1a:30:1f:58:25:56:d2:b9:2b:c1:c8:47:
         26:3a:1e:6b:8c:c1:26:9d:aa:62:85:9b:c8:28:62:d7:ef:35:
         02:3c:0c:bf:ae:04:d6:e4:b0:f5:64:f0:0a:bd:74:68:ff:96:
         20:17:c9:c5:c7:8b:a4:22:f6:16:17:4e:1c:0f:c9:c6:75:79:
         20:46:91:69:87:36:1e:d1:27:fb:31:3b:62:6b:1c:cb:73:f6:
         76:c4:c2:67:61:a4:3f:7f:41:35:a9:82:47:3e:0c:df:00:25:
         ad:54:71:3d:6d:01:44:38:f6:bc:16:ab:7f:0b:a6:50:0a:50:
         14:cb:61:08:ab:4e:c4:21:8c:9d:cf:8b:81:78:4a:80:16:02:
         19:6c:ba:8e:fa:38:d1:de:fa:a3:ca:a4:0b:13:eb:63:f2:9c:
         22:e8:9d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:22:39 2026 by rpki-client