Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3af3e7b5-1acc-38ec-b667-14532b7b5e10.roa
File:                     3af3e7b5-1acc-38ec-b667-14532b7b5e10.roa (raw, json)
Hash identifier:          hrGBsFzV1tkrRlW3ghey/9BUjBgQtTMdfB7BHJXvYiA=
Subject key identifier:   4C:43:C5:4F:D0:63:4D:62:6B:58:46:6F:45:30:49:F6:AB:2D:70:98
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D6AAA9F0B6043FD2420B3BEA0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3af3e7b5-1acc-38ec-b667-14532b7b5e10.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     13335
IP address blocks:        162.158.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:9f:0b:60:43:fd:24:20:b3:be:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=92083b9b-9c15-4c9a-956e-b0cb5cc97a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:de:db:7e:ec:35:04:7c:e7:6c:58:c3:0d:09:
                    07:a7:ef:fa:67:42:83:4d:0a:f5:82:68:93:3e:4c:
                    8a:8b:51:94:3e:cf:82:0d:c1:3a:0b:10:a9:8a:15:
                    f9:1d:16:4a:f5:eb:56:b0:21:e3:47:3e:20:73:9c:
                    05:52:43:66:84:c6:02:c2:e1:89:db:1f:5c:7d:2a:
                    d8:9c:30:8d:2e:f3:55:06:4c:11:63:29:58:a5:b4:
                    6a:2a:31:b8:23:d5:e4:6a:39:ab:a6:03:f5:08:87:
                    2c:0d:52:f2:b5:30:a9:57:47:e5:32:fd:ba:c7:c7:
                    4a:be:70:79:83:40:1f:17:2b:19:02:1c:9a:8b:51:
                    28:3b:4d:3c:62:f1:e8:0f:3f:db:14:74:4a:ae:2f:
                    ec:b0:cf:1c:17:fb:15:2c:1a:07:d1:6e:f3:44:cf:
                    b0:2d:57:e0:ee:cf:5b:ae:3a:11:77:59:61:90:e3:
                    63:15:40:48:4f:34:99:01:06:87:7b:75:d2:5b:09:
                    26:35:e9:c9:de:60:f9:2d:31:bd:2c:9e:09:ca:41:
                    d3:8d:aa:58:ab:bd:eb:ec:68:a8:5f:f5:cf:1a:2f:
                    6e:60:cc:52:ce:86:a2:47:e2:66:51:9e:35:15:cb:
                    c4:e8:ac:cd:a0:b7:5e:a9:82:3b:29:f0:fe:fa:6f:
                    b6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:43:C5:4F:D0:63:4D:62:6B:58:46:6F:45:30:49:F6:AB:2D:70:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3af3e7b5-1acc-38ec-b667-14532b7b5e10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:18:ab:fc:49:db:6e:25:b6:2f:2d:02:5a:16:c4:25:9f:fb:
         e0:16:bd:c0:47:2a:00:11:c7:0e:12:49:05:40:55:2d:b0:6f:
         a8:5b:a9:cd:55:be:1d:af:00:ae:66:cf:de:2d:59:9a:81:8b:
         1a:db:07:34:f9:27:91:e5:38:44:e2:01:45:8d:34:84:42:18:
         ff:7a:26:f5:31:50:27:1e:80:71:c0:15:89:38:5f:0b:34:11:
         07:1f:77:98:88:b1:83:5f:dc:75:bc:78:9d:77:42:09:b2:bd:
         78:aa:92:5b:10:e0:16:d1:44:0a:3f:9e:29:a9:2c:3b:aa:c3:
         6e:16:fc:70:66:cf:33:57:6c:29:14:d0:42:d2:3b:59:44:49:
         31:b9:b4:6d:95:12:c3:9a:75:cb:60:36:b3:08:9c:d5:64:d7:
         6a:f7:c2:6d:ae:59:22:52:f9:a5:88:0c:0c:ab:fe:cf:91:cd:
         6c:3a:71:54:98:89:06:c1:56:2d:e9:5e:fa:98:ad:44:48:9d:
         c3:57:f5:05:a8:61:90:84:8e:50:0d:e3:f9:97:67:03:89:11:
         a8:34:b7:6d:22:d9:28:63:72:5e:59:25:3e:a0:be:f5:74:cb:
         c5:2e:0f:95:e0:05:78:2d:47:63:f1:77:d4:93:13:b7:9f:67:
         02:46:0a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:46:58 2026 by rpki-client