Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/19059ea3-f636-3fe2-ad00-c425a8072309.roa
File:                     19059ea3-f636-3fe2-ad00-c425a8072309.roa (raw, json)
Hash identifier:          GclXRw0132S8MMs7F5EGRqgIKykwVbggCMxPSmPZ4+c=
Subject key identifier:   B3:8C:3D:A3:83:2E:F4:5B:C2:EB:3C:F3:BC:B7:2D:26:0B:26:38:77
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584F3A17CE043519EFE1CF441680
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/19059ea3-f636-3fe2-ad00-c425a8072309.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     14789
IP address blocks:        162.158.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:ce:04:35:19:ef:e1:cf:44:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=20e60db1-bc69-46fc-aa83-e1a3aa661e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:92:aa:3b:52:ea:a1:ff:a4:d2:17:ee:f8:f1:
                    d5:77:08:c3:d8:36:cb:e1:a5:22:03:a9:84:b2:bf:
                    59:b4:cc:56:9f:56:8f:04:44:fd:f0:e3:b8:c1:ea:
                    bf:3c:e0:e4:bf:65:fe:f3:99:66:54:f0:34:2f:ad:
                    a5:58:b2:47:9b:0b:76:04:70:94:3b:1c:90:f3:14:
                    f8:a5:2e:21:4a:ff:0e:95:c2:1b:4c:3a:74:f4:5e:
                    84:1b:ff:9c:a3:4b:65:a2:e0:2c:a8:c8:c3:64:b0:
                    82:bc:78:00:b2:67:7b:6c:0c:ff:cf:ca:7a:c6:96:
                    79:96:5a:38:3c:3c:4b:ed:21:14:ea:56:cf:40:d3:
                    0d:60:a2:8c:41:02:e6:42:e2:ff:8b:e5:a2:bb:84:
                    4c:4a:f2:5e:eb:20:10:0a:bd:af:50:d7:0a:1b:1b:
                    0f:68:9f:37:d8:0a:2c:2d:12:aa:94:cc:9e:35:98:
                    c0:c9:b6:f9:62:21:1b:e8:a9:e2:ec:34:ab:57:c6:
                    ab:16:3f:5d:c3:47:72:4f:eb:75:e7:f2:bc:91:04:
                    f7:f4:f4:22:f8:d8:ba:d0:73:b2:99:a2:d3:29:32:
                    0a:13:57:66:57:80:e7:5b:15:e8:fe:e4:2b:32:d3:
                    05:b7:7d:4a:7d:e0:3d:c2:a7:38:05:f2:3f:b5:76:
                    27:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:8C:3D:A3:83:2E:F4:5B:C2:EB:3C:F3:BC:B7:2D:26:0B:26:38:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/19059ea3-f636-3fe2-ad00-c425a8072309.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:e4:92:e7:2f:1e:11:2e:f0:57:5b:9c:f1:23:0c:d7:8c:7d:
         3b:07:d6:fb:eb:90:e3:af:7c:da:7b:3a:ff:6a:26:dd:d2:b8:
         86:e1:78:eb:fb:ed:d8:b1:f0:7f:94:ba:93:95:22:f7:c1:f8:
         19:08:07:92:ec:1d:b2:3f:ce:9a:a1:d2:d3:a3:c4:b8:88:ba:
         d2:6f:ce:ed:1b:f2:d5:91:fa:79:07:0d:9c:53:af:76:6a:ef:
         e3:57:6c:84:49:c4:c5:ea:61:43:50:2f:81:f9:c2:59:b1:da:
         d4:0a:f1:71:de:62:b9:35:3b:44:a7:aa:6b:66:e0:42:45:de:
         80:8f:d8:18:d3:51:10:ef:a7:ab:bb:6d:7d:72:d5:54:ed:b9:
         05:ab:6c:4f:b2:de:a5:6b:1a:99:c5:a7:75:ac:15:06:79:d0:
         69:27:25:26:d5:b4:f4:49:03:67:23:e3:78:0d:29:81:cc:c1:
         a9:e4:4c:6a:9c:46:e2:89:91:32:83:d9:dd:bd:ff:e9:77:1a:
         91:cb:0e:3f:5c:db:ce:3a:bc:7b:3b:1b:3f:5b:95:c6:9e:49:
         3b:28:19:ad:ab:97:6b:3d:d1:f1:78:3c:09:e2:32:92:d9:88:
         87:9e:4a:2a:6b:23:6d:77:15:55:e6:2e:27:b3:fd:38:cf:ef:
         40:ed:48:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:10:15 2026 by rpki-client