Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4b9dd9d9-7e0f-3d4b-bd2b-bc19e1f1b95f.roa
File:                     4b9dd9d9-7e0f-3d4b-bd2b-bc19e1f1b95f.roa (raw, json)
Hash identifier:          SLw/Zt4jqf1df789ou2fngeQ6QnFqhcjHvk6z9Jc6Fk=
Subject key identifier:   8B:BA:DB:63:EB:C5:71:E3:7B:D3:37:00:03:7D:42:CF:35:07:CB:EE
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EEA877F5F4CE730A79FE19600
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4b9dd9d9-7e0f-3d4b-bd2b-bc19e1f1b95f.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        162.158.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:7f:5f:4c:e7:30:a7:9f:e1:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=75ed0edd-7cfa-441c-ae6f-e8fdbd3f2fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3a:97:e4:8d:b4:a9:7b:78:9c:62:73:6c:6c:
                    ea:79:81:5a:07:a7:d6:fd:47:af:00:db:52:85:7f:
                    c0:75:b4:98:5a:37:76:58:19:62:03:87:9a:d0:3e:
                    92:e2:46:37:5b:b6:8e:a2:18:b7:59:d4:c0:43:67:
                    5f:c2:e4:0f:a3:bb:3e:44:ea:93:81:2c:d0:23:2c:
                    b5:ee:d7:fe:de:37:ee:f0:39:ca:c1:70:05:2b:ec:
                    50:c2:8c:da:51:8b:cc:6f:99:83:1a:a2:b1:2a:a5:
                    f5:44:49:1d:92:7c:31:8c:05:a7:83:65:84:c5:6b:
                    e7:f2:4b:a6:f6:68:a4:88:7c:b8:8a:ac:ee:9d:0b:
                    9b:8c:6d:a7:18:fe:33:57:9b:39:e5:33:5a:1f:03:
                    f8:fd:16:25:14:50:d6:d6:d5:da:ea:9f:63:6a:a0:
                    d3:83:1a:f3:97:46:c2:4f:15:49:99:79:23:90:9d:
                    b8:fb:1e:0d:16:f4:17:02:86:12:0f:60:73:c1:ad:
                    3a:e7:be:99:7b:ea:cd:49:d0:51:a3:ec:f5:e2:ab:
                    6a:c8:40:64:a0:e9:c0:ce:4e:af:1a:e2:76:c1:de:
                    93:cf:c0:81:f6:b0:79:b5:8d:98:46:bc:52:1f:b8:
                    b3:11:ec:80:ec:32:de:9a:61:10:ba:55:3e:a6:09:
                    73:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BA:DB:63:EB:C5:71:E3:7B:D3:37:00:03:7D:42:CF:35:07:CB:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4b9dd9d9-7e0f-3d4b-bd2b-bc19e1f1b95f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:4e:c7:1e:a3:4c:9f:49:f4:2d:af:10:e3:17:0d:e0:46:4b:
         dc:ab:dc:18:c1:68:0c:08:5e:21:4f:09:d6:7a:34:4b:29:8b:
         a4:be:cb:ee:53:b0:ad:e0:f7:5c:34:cc:f3:ed:72:c4:88:c1:
         c0:c5:93:47:f1:ef:f2:c2:13:cf:51:df:2d:de:39:cd:3d:15:
         99:d4:a6:b3:f1:a9:e7:ad:b2:aa:48:bd:fe:0e:7d:8b:f7:ee:
         e9:a4:0a:4b:db:2d:20:f3:f1:4f:0c:c9:44:79:8d:c0:3f:55:
         7d:8e:17:49:7f:5d:40:58:41:e5:25:0f:9b:2d:e0:c2:07:3e:
         6f:a6:a4:ea:76:e5:93:07:35:75:0f:cb:a6:e2:0a:af:d1:74:
         1e:95:51:83:b8:60:7d:df:8c:48:c9:44:b0:59:65:4e:c6:43:
         c2:77:dd:79:96:e5:cb:b6:c1:ed:f8:b8:c2:b6:69:34:d9:bd:
         54:46:cb:43:88:a9:43:d2:1f:aa:e7:3f:77:b6:aa:fb:ce:89:
         28:d0:f8:d9:8a:02:85:75:95:56:65:71:99:27:b5:bd:0c:d6:
         43:dd:bd:fc:0b:11:cd:5b:f8:b3:60:b9:3b:ee:2a:b4:dc:ca:
         a7:1e:a6:ab:4e:2f:4f:a5:20:5b:7a:4e:b1:4c:b5:0a:9d:a4:
         18:5e:a2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:38:10 2026 by rpki-client