Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/144cb2af-4d6a-340e-8c0c-b3625a4d9a7c.roa
File:                     144cb2af-4d6a-340e-8c0c-b3625a4d9a7c.roa (raw, json)
Hash identifier:          six/pIXuNJTAxYeJDng7jgcf3x5Y1wAB1jMbPat7dqw=
Subject key identifier:   FE:D5:68:F7:C4:E8:25:E7:CA:A9:39:2B:80:4B:79:44:E5:08:D7:E5
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BBBC954C3AEBFBE366D683928
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/144cb2af-4d6a-340e-8c0c-b3625a4d9a7c.roa
Signing time:             Mon 03 Nov 2025 04:49:31 +0000
ROA not before:           Mon 03 Nov 2025 04:49:31 +0000
ROA not after:            Sun 01 Feb 2026 04:49:31 +0000
asID:                     13335
IP address blocks:        162.159.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:c9:54:c3:ae:bf:be:36:6d:68:39:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov  3 04:49:31 2025 GMT
            Not After : Feb  1 04:49:31 2026 GMT
        Subject: CN=ba2e66b8-74c7-4eca-91c6-ae4bae4d56ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2a:03:ff:36:d5:12:b1:26:73:af:13:27:e8:
                    f9:3c:ce:6d:17:03:6b:b7:ae:13:d7:38:fb:86:e7:
                    11:16:a4:a0:7d:ea:ea:55:67:bf:20:8c:e1:f2:29:
                    8a:49:90:76:e8:6d:bc:f8:69:ad:c2:80:a0:52:cc:
                    f3:d8:86:8a:99:b2:99:c3:46:29:bd:1f:e9:d3:79:
                    73:4f:15:a3:5c:ed:8b:c4:19:fb:b2:e5:19:8d:68:
                    f5:b9:93:04:19:aa:e1:2c:ac:c2:43:67:bb:13:37:
                    87:c1:98:bb:cc:11:4d:6f:64:52:7e:98:c5:87:82:
                    15:96:26:f5:61:42:8b:13:1c:31:db:7f:f3:2c:89:
                    c5:a7:28:4b:d4:dc:b1:10:11:99:0a:42:19:29:33:
                    52:ad:24:ee:f0:2b:90:d9:ca:3c:6a:cd:22:da:a0:
                    19:18:dd:0a:b9:df:48:c5:e0:e9:f8:a7:2b:30:e2:
                    18:d6:84:a5:92:28:ef:09:95:93:6d:73:c6:de:b1:
                    c8:d8:45:4f:33:2b:8b:64:48:b9:a9:5d:91:66:0f:
                    25:75:c3:15:dd:df:4a:30:98:b6:a7:8c:df:6c:2b:
                    e0:16:57:5f:cf:b4:21:85:ec:df:3b:9c:27:fe:0b:
                    06:a5:0f:87:5f:dd:18:da:8e:10:9b:91:6d:c8:ce:
                    23:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D5:68:F7:C4:E8:25:E7:CA:A9:39:2B:80:4B:79:44:E5:08:D7:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/144cb2af-4d6a-340e-8c0c-b3625a4d9a7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:bd:b5:a5:a8:3a:32:d4:88:b4:be:b4:ec:4d:e9:38:f6:fb:
         85:3f:b0:dd:7a:c2:21:f4:f7:d8:68:7e:5a:fe:8d:b1:23:0d:
         36:ab:a9:18:02:53:68:ca:26:d4:3e:e6:a2:85:7c:60:93:e1:
         1b:25:c2:d1:77:29:79:21:5b:90:83:81:6c:d5:d3:04:3b:8b:
         78:32:b6:59:50:92:96:24:b3:76:6a:bf:7f:eb:79:b3:95:57:
         7f:52:fe:d2:ed:31:85:f2:7f:a0:13:d0:07:62:68:27:8d:22:
         0d:1a:d7:be:07:41:6d:f3:77:26:ad:6d:e7:12:38:88:28:eb:
         3d:99:67:41:33:80:62:8f:94:c1:7b:1f:b4:bb:1e:a7:26:3c:
         eb:0d:f8:e8:75:35:35:d5:63:cc:89:50:06:ed:2f:04:46:7f:
         cb:c0:9c:44:25:0f:81:b1:45:f9:79:cd:93:93:69:b5:c6:fb:
         cc:7d:29:e8:05:78:56:38:78:98:db:20:3c:24:83:cb:20:95:
         aa:61:f1:0b:80:2c:04:9f:77:f4:56:b8:16:ad:7f:d4:c7:d2:
         10:54:5e:56:8a:d3:39:2a:67:1f:35:7c:d4:0f:ba:76:94:36:
         c6:d5:13:fa:39:6f:24:21:54:22:92:48:b7:e3:98:00:41:fc:
         80:2c:ed:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:39:00 2025 by rpki-client