Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/edbf4013-6725-3d54-b571-639b9205ff3c.roa
File:                     edbf4013-6725-3d54-b571-639b9205ff3c.roa (raw, json)
Hash identifier:          OJNLQRLT4hvwtuWH2vSDoRMl+g+UTlR14DtUjy7El80=
Subject key identifier:   F7:CD:95:CB:42:EB:40:AA:69:43:B7:A1:01:61:69:B9:33:F2:25:59
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E4AEF619FAEFC7CF96060BA00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/edbf4013-6725-3d54-b571-639b9205ff3c.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        162.158.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:61:9f:ae:fc:7c:f9:60:60:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=643bbb81-0bc1-4986-96fb-521e960ddb29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:96:38:a2:6f:b1:e5:bb:60:b1:82:6e:c3:c8:
                    a9:ab:27:ac:88:9c:4b:3d:4f:ed:84:46:57:a0:5b:
                    50:4d:87:8b:ac:5b:3b:c3:72:14:52:32:78:12:b6:
                    49:bb:55:5f:52:22:81:8c:b8:e4:22:d5:d3:41:d4:
                    3e:df:b4:1e:44:a7:41:b3:5a:cf:4c:4c:93:36:79:
                    e5:02:a2:cc:b2:af:72:06:72:c2:10:b6:e6:23:8c:
                    94:9e:f9:7a:fc:4e:70:c7:c8:f0:6c:d7:7d:4f:7f:
                    fe:d2:9d:df:12:32:71:f6:85:e7:25:26:ce:e4:e5:
                    ed:50:44:1a:e6:a1:d4:de:61:6d:56:7e:d5:c1:eb:
                    8a:2a:1c:d8:51:3f:b9:6e:0d:30:ba:7c:6c:a1:e8:
                    0f:be:fc:fa:64:76:00:b7:04:7e:30:1a:75:dc:a6:
                    ea:19:0d:18:62:b3:b2:44:2e:e0:37:ab:80:94:9f:
                    ae:bc:eb:06:db:ab:19:31:df:82:51:00:c4:65:3e:
                    d7:9a:02:c1:a6:cd:49:78:48:0f:d0:08:b0:4c:38:
                    17:04:3c:d5:4c:1b:7e:8f:69:7f:47:13:f4:d1:9e:
                    7f:00:53:23:06:2f:04:e4:cb:83:97:a1:93:3e:19:
                    ce:96:82:32:02:bd:c5:1f:76:bd:ea:04:ce:f9:08:
                    a4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CD:95:CB:42:EB:40:AA:69:43:B7:A1:01:61:69:B9:33:F2:25:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/edbf4013-6725-3d54-b571-639b9205ff3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:34:44:b6:54:a0:fb:52:2a:99:e7:2c:61:ee:8e:a7:a3:02:
         ec:c2:ac:88:f2:2a:f7:2d:e2:f7:e3:f4:bd:9f:94:e7:d0:f3:
         a8:1d:5a:84:4f:55:e2:66:81:3e:5a:e4:61:1c:f6:99:9c:10:
         45:f9:a2:54:2d:cf:af:8b:95:24:57:37:99:37:6b:b0:59:94:
         a7:5e:ed:35:23:57:33:ce:b4:35:e1:88:02:65:bb:1c:6c:12:
         e2:a2:74:eb:94:96:c2:53:3f:7d:c5:d8:67:56:7b:50:5c:6e:
         1d:66:7e:05:8c:f0:5e:91:3d:6b:dc:fc:ae:8f:e4:42:6d:f3:
         d4:79:fe:5c:84:6a:3b:a8:29:9f:00:df:6d:1c:d5:c8:8d:76:
         1a:43:7c:8c:87:66:20:dd:b6:2e:0c:7a:1f:c2:bb:a6:a6:02:
         1d:cf:1f:b4:c3:54:82:b9:45:c2:a9:22:b0:e7:62:f1:63:ae:
         59:54:9d:ef:d3:36:b7:83:9c:4c:bd:a6:fa:0b:16:94:8a:74:
         55:18:73:cc:53:90:60:2a:61:d5:18:98:df:ea:13:95:42:b3:
         2a:1d:02:c1:19:e7:3a:44:9b:b6:72:98:44:68:d5:db:b4:19:
         ac:ad:c8:79:dd:a5:2c:93:53:bb:ba:5f:51:7a:15:b1:9f:ac:
         40:25:a0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:05:00 2026 by rpki-client