Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4b079f91-50d8-3c52-adaa-ca9459be4054.roa
File:                     4b079f91-50d8-3c52-adaa-ca9459be4054.roa (raw, json)
Hash identifier:          Z1+QakKYiGovPKNJSWh8TN/6tnAes7td0cJGrjHZz0o=
Subject key identifier:   BE:D3:72:C5:FC:46:0F:A1:E7:1F:7B:9C:8E:6A:20:6F:C3:C9:3E:F3
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D6AAA93E4AFE4EDD261230340
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4b079f91-50d8-3c52-adaa-ca9459be4054.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     13335
IP address blocks:        162.158.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:93:e4:af:e4:ed:d2:61:23:03:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=c91cedab-fe10-4a6e-a258-53fd40377beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:db:47:40:bf:dc:5a:47:eb:2c:72:50:f8:3f:
                    d6:4f:4c:de:d4:69:88:02:0a:66:83:c5:1c:a8:34:
                    23:89:20:db:2c:4b:81:fa:93:6f:df:9c:61:69:f4:
                    b3:d3:16:cf:7e:8b:41:23:0c:37:f1:06:c7:40:6b:
                    17:c3:c8:a5:f3:41:ef:a3:0a:33:37:dd:31:79:76:
                    77:f1:f5:7c:67:c7:e4:77:58:7b:23:44:eb:c0:32:
                    a1:43:d2:e0:58:a2:ea:64:0e:04:36:3c:54:d5:c3:
                    51:10:27:a6:ab:62:2f:1b:8b:f3:fd:04:bb:4b:fe:
                    15:0b:d6:f1:b5:ba:78:f1:cc:4a:d8:47:2a:4b:26:
                    a2:9d:f4:43:d8:e0:77:01:54:64:98:09:a7:67:11:
                    e2:92:90:67:9d:dd:b5:df:92:00:a6:8d:fd:72:cd:
                    d1:6c:31:65:e8:c6:5e:c1:a8:3b:86:87:cb:84:c8:
                    11:c1:80:d7:04:94:b7:bb:a0:d4:94:e5:9d:d2:c1:
                    d1:97:fc:79:f0:9c:a4:a7:1b:5a:b5:07:46:d0:b7:
                    33:52:0c:0a:5f:96:cd:26:ad:07:fa:0b:f2:37:36:
                    d3:52:8b:a6:d0:67:85:a9:83:91:64:7d:59:f0:d3:
                    d6:f5:52:69:58:ab:cc:9e:65:26:c7:09:e6:2b:36:
                    0d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D3:72:C5:FC:46:0F:A1:E7:1F:7B:9C:8E:6A:20:6F:C3:C9:3E:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4b079f91-50d8-3c52-adaa-ca9459be4054.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:a0:d2:93:21:e4:c3:3d:1e:3c:ba:52:34:97:2d:d4:cf:89:
         c5:95:15:4c:de:26:96:64:f9:d2:57:4e:f5:22:fd:0a:88:52:
         e9:60:70:ac:89:26:52:eb:5d:5a:be:0e:5a:46:e3:52:c6:0d:
         e5:14:61:7e:62:e6:90:6e:50:c0:9b:81:25:25:e2:54:f5:36:
         47:c6:d9:6e:82:b3:9c:3d:64:8d:24:53:a7:42:83:87:83:01:
         ae:a3:95:6e:37:a0:27:c3:7a:79:ed:95:3a:a3:aa:1c:bd:82:
         00:82:1b:b8:52:52:85:c7:e6:5d:98:ab:9c:10:50:43:3f:b5:
         5a:3f:a5:da:3b:f7:47:06:07:a9:64:d2:56:1d:90:1d:a2:e7:
         14:2e:20:7e:0f:2e:fe:14:68:9a:64:08:2c:82:91:4c:eb:b2:
         c4:0a:aa:8f:14:a1:84:fe:cf:91:b5:56:92:fc:b9:3f:0d:46:
         74:00:20:29:4a:81:89:c8:9e:d1:41:e0:b1:e1:f2:e5:30:ca:
         7a:ff:b1:4c:97:43:f1:ba:c7:1c:ab:1e:94:43:b8:ce:79:4c:
         9d:d2:da:99:81:88:2a:3c:31:9d:4c:54:cf:bb:59:73:6d:df:
         e2:20:bd:ed:ff:29:f8:fa:54:b6:e1:d7:29:f2:97:8c:90:60:
         12:3e:40:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:40:47 2026 by rpki-client