Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fca6dcc1-1038-33d3-b32a-56d200a06324.roa
File:                     fca6dcc1-1038-33d3-b32a-56d200a06324.roa (raw, json)
Hash identifier:          CNZO5d+6O1BmKqC6yLvSnl/MZBXWYoQze8Puxzb5F/8=
Subject key identifier:   3A:48:CC:56:58:F7:AB:3D:3D:75:F2:2C:E8:1A:00:40:3A:D8:30:DD
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584F4986745C89A6576020F77500
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fca6dcc1-1038-33d3-b32a-56d200a06324.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        162.158.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:74:5c:89:a6:57:60:20:f7:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1b2edaf6-a0eb-4be0-86d7-159dd55fd993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cc:54:e4:f2:6e:ec:14:f9:d7:5c:40:60:42:
                    15:04:bb:24:e4:78:28:70:c7:65:56:bf:bf:3b:02:
                    2c:ec:07:d0:43:50:cc:ba:f1:8b:6e:f4:f4:5f:3f:
                    9b:59:48:8f:12:67:ab:31:25:da:08:36:38:de:cb:
                    1d:e3:e8:48:8a:40:3b:96:c4:97:6f:52:29:79:25:
                    80:7d:7c:25:bd:91:50:da:01:42:3b:48:3c:89:f0:
                    74:4c:e8:6d:29:70:4a:9c:a5:a1:7d:56:0b:fc:5e:
                    1e:42:ae:c5:53:ab:8e:28:8c:5d:f3:f9:d2:12:1a:
                    0a:95:2c:32:3c:1c:74:8b:be:ae:c7:45:a6:0c:ad:
                    27:af:20:41:ce:44:05:88:65:50:fc:9d:a4:44:9a:
                    d4:13:f0:1c:75:79:ce:7b:11:80:26:f2:92:a1:14:
                    55:63:cd:25:0e:9a:92:60:31:20:7c:72:8f:1f:d3:
                    75:a5:0c:dc:91:90:f5:a8:52:b9:5f:93:07:fe:fd:
                    9d:71:04:c9:1f:8f:17:e4:18:3b:82:d3:eb:02:84:
                    52:95:57:1f:b7:49:66:7b:d9:97:e2:77:d2:ca:34:
                    61:2f:23:10:92:60:af:ec:2d:19:65:9e:10:4f:fa:
                    21:b3:e8:df:fb:5d:8a:4b:3b:f9:55:c6:f1:39:ba:
                    3b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:48:CC:56:58:F7:AB:3D:3D:75:F2:2C:E8:1A:00:40:3A:D8:30:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fca6dcc1-1038-33d3-b32a-56d200a06324.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:58:91:81:9f:a2:71:9b:e9:a8:b0:55:28:c1:e3:ba:17:4d:
         e9:6c:8f:fb:e8:b0:f4:6d:d1:87:75:37:18:2b:20:e1:6b:7d:
         7c:b9:da:22:11:ca:53:ae:f3:10:bd:f9:49:ea:5f:d7:88:89:
         0c:57:f0:86:95:64:1c:a3:53:d4:10:11:95:ec:6b:0a:72:f2:
         2d:76:90:d2:3c:98:6d:a2:05:0e:1d:d7:68:63:be:dc:85:79:
         a7:ba:f5:26:cc:31:42:83:23:0d:2b:e9:85:df:5f:99:c1:e9:
         af:ac:00:e6:cc:7d:b2:bf:b8:4f:ef:cd:e0:1f:13:94:41:cb:
         da:94:fc:68:c3:97:8f:7a:02:a6:dd:ce:5c:f3:f0:aa:a0:cb:
         a7:e8:d6:64:17:b6:87:43:49:fd:4c:51:bf:74:f4:e5:27:0e:
         12:51:ab:4e:16:9a:ef:3e:f2:cd:e7:0e:b8:04:e6:6c:1c:30:
         65:82:ab:71:3f:16:47:b3:91:09:c9:32:e5:1b:fa:03:c5:68:
         64:fd:c6:1b:bc:a5:b0:3b:82:33:f4:c5:de:b0:16:d5:c1:b7:
         e2:7f:ce:38:22:7a:a1:20:01:ca:db:99:85:d2:63:8b:45:ac:
         79:77:9d:b5:7b:f0:b2:02:80:cb:92:9d:ad:3e:4f:66:0e:16:
         51:34:04:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhnRciaZXYCD3dQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MWIyZWRhZjYtYTBlYi00YmUwLTg2ZDctMTU5ZGQ1NWZkOTkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMxU5PJu7BT511xAYEIVBLsk5HgocMdlVr+/
OwIs7AfQQ1DMuvGLbvT0Xz+bWUiPEmerMSXaCDY43ssd4+hIikA7lsSXb1IpeSWA
fXwlvZFQ2gFCO0g8ifB0TOhtKXBKnKWhfVYL/F4eQq7FU6uOKIxd8/nSEhoKlSwy
PBx0i76ux0WmDK0nryBBzkQFiGVQ/J2kRJrUE/AcdXnOexGAJvKSoRRVY80lDpqS
YDEgfHKPH9N1pQzckZD1qFK5X5MH/v2dcQTJH48X5Bg7gtPrAoRSlVcft0lme9mX
4nfSyjRhLyMQkmCv7C0ZZZ4QT/ohs+jf+12KSzv5VcbxObo7MwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDpIzFZY96s9PXXyLOgaAEA62DDdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZmNhNmRjYzEtMTAzOC0z
M2QzLWIzMmEtNTZkMjAwYTA2MzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop7fMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF1YkYGfonGb6aiwVSjB47oXTelsj/vosPRt0Yd1NxgrIOFrfXy52iIR
ylOu8xC9+UnqX9eIiQxX8IaVZByjU9QQEZXsawpy8i12kNI8mG2iBQ4d12hjvtyF
eae69SbMMUKDIw0r6YXfX5nB6a+sAObMfbK/uE/vzeAfE5RBy9qU/GjDl496Aqbd
zlzz8Kqgy6fo1mQXtodDSf1MUb909OUnDhJRq04Wmu8+8s3nDrgE5mwcMGWCq3E/
FkezkQnJMuUb+gPFaGT9xhu8pbA7gjP0xd6wFtXBt+J/zjgieqEgAcrbmYXSY4tF
rHl3nbV78LICgMuSna0+T2YOFlE0BLg=
-----END CERTIFICATE-----
Generated at Tue Sep 29 02:59:38 2026 by rpki-client