Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f2d47f3-0eba-3002-b5a1-1d951661c329.roa
File:                     2f2d47f3-0eba-3002-b5a1-1d951661c329.roa (raw, json)
Hash identifier:          y04GTVStVK8o7+nVew2ysi5SlAlW23+lN2G/ABLRXkc=
Subject key identifier:   52:0C:63:E8:DD:10:47:66:A4:2D:BF:A1:46:57:90:CF:4E:5F:3B:D4
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D67DFE2EE1D8FB968C3CB2F80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f2d47f3-0eba-3002-b5a1-1d951661c329.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     13335
IP address blocks:        162.158.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:e2:ee:1d:8f:b9:68:c3:cb:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=ad59a7c6-bfc7-49c6-9114-8f7809746bdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d0:7b:2b:95:35:9f:5f:25:f0:f3:50:95:c8:
                    52:71:44:fb:3f:68:3f:15:0f:da:5f:45:ca:db:dc:
                    91:03:7d:6b:fb:f4:8c:d8:57:b3:90:5f:59:a5:47:
                    04:71:2e:fb:cb:ac:36:3c:3f:85:00:a2:36:93:fe:
                    d3:79:f5:65:41:3b:b3:d1:ed:19:79:e4:d6:1d:d9:
                    57:0b:c6:70:b8:32:1f:44:7b:1d:4d:5e:48:a5:84:
                    99:ec:1d:0c:96:48:40:3e:12:0a:41:bd:18:05:27:
                    3d:d0:2d:0a:63:66:03:a0:07:44:6b:1e:66:e1:1d:
                    79:fb:1b:43:18:81:8f:ff:fd:e8:81:ff:46:d6:e1:
                    04:a3:dd:71:e4:1e:40:e8:2a:8c:fd:e8:49:d5:63:
                    2d:3f:67:ab:98:f2:00:93:59:6b:d2:f6:84:7e:3e:
                    78:92:e8:46:bd:52:2d:24:50:2a:4b:2d:d8:ad:eb:
                    d1:1d:e7:64:79:00:80:32:e9:7e:d2:4c:18:c0:3b:
                    86:59:5b:0e:e3:1b:0a:f9:04:9a:77:33:64:29:e2:
                    c5:de:d9:03:af:6b:b7:a4:28:e6:39:2d:d2:ee:a4:
                    a0:b8:bb:fa:3e:63:de:9e:ea:ca:3b:57:c1:35:6d:
                    c2:a4:c5:14:2a:84:1e:08:ec:ca:a4:16:fb:2e:85:
                    d6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:0C:63:E8:DD:10:47:66:A4:2D:BF:A1:46:57:90:CF:4E:5F:3B:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f2d47f3-0eba-3002-b5a1-1d951661c329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:f8:9c:46:76:69:d1:a2:03:80:76:db:10:33:3b:72:f1:83:
         7b:4d:b3:cc:0a:2f:e2:cb:b5:58:4e:86:d9:f1:45:80:52:f9:
         fe:b9:9c:e3:d2:2f:82:bd:9c:14:02:dc:cf:c0:d3:3a:48:bc:
         20:02:41:75:bb:78:7b:a4:ac:28:1f:0c:8e:cd:e8:37:2c:e0:
         57:42:cc:ee:8e:e9:b4:ea:be:76:e0:01:ce:a0:be:eb:77:e8:
         de:99:e7:da:02:5c:59:c0:f6:40:29:59:d0:73:1f:26:cd:7a:
         da:9e:d1:7b:e4:05:be:a5:57:41:0d:2d:ba:ed:da:59:0f:57:
         56:5a:ad:00:7a:73:5e:44:47:3e:c7:31:4b:75:e1:70:4e:d4:
         c8:69:45:d9:ae:fa:8a:bf:6d:3d:c3:43:e9:29:3a:9c:b3:4e:
         ce:e4:b3:1b:f9:59:b0:7b:6f:6f:30:75:aa:75:bb:c3:7a:71:
         e4:26:6e:7a:3e:53:9f:5f:95:e7:7f:23:fa:8e:f4:6f:79:40:
         d0:a3:ac:2e:5d:30:63:98:b8:c7:19:84:fc:e9:d7:69:a8:a8:
         a7:9e:9f:cc:9f:81:3b:66:08:51:a4:79:3d:f1:04:73:e5:62:
         e3:5f:5f:a2:6b:d0:db:d5:ad:aa:18:75:0c:36:09:53:b0:60:
         bd:f4:fd:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:14:20 2026 by rpki-client