Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/604a6fac-2d19-3247-b089-eada9799dc4b.roa
File:                     604a6fac-2d19-3247-b089-eada9799dc4b.roa (raw, json)
Hash identifier:          65KUXnaLQSewydajb0aatPNUS+8qTVMhTmkILq6lR8E=
Subject key identifier:   45:71:E1:2E:74:8B:6C:B8:E2:EF:B2:29:A4:35:72:85:AE:46:69:37
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D6AAA91C4F46B1C944E2F5100
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/604a6fac-2d19-3247-b089-eada9799dc4b.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     13335
IP address blocks:        162.158.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:91:c4:f4:6b:1c:94:4e:2f:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=a2a15a79-a4c6-4c14-b7e7-f81c344e5581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e8:c1:8d:2a:da:08:5f:a6:f4:1b:16:ae:98:
                    0e:10:72:6e:d4:9b:dc:3d:d8:c6:00:f0:47:2b:0f:
                    65:ca:89:01:2d:a2:3a:56:0d:69:3c:38:8e:6d:ec:
                    03:8f:bd:7d:b2:f0:1f:b7:5b:92:32:fb:b6:f4:73:
                    1e:eb:3a:c2:4c:b3:8b:d7:cb:06:0c:ca:ef:b0:ba:
                    66:47:4a:61:aa:16:99:44:d4:37:48:d8:d2:de:7c:
                    be:a2:4d:11:f7:32:46:a1:20:87:52:b8:f0:23:fb:
                    26:56:64:b4:50:1d:b2:98:4d:3e:7d:71:ac:75:80:
                    28:db:16:cf:84:bb:05:3a:b4:f3:1c:75:ab:bb:db:
                    32:65:19:c2:5d:a0:75:8a:94:a7:0c:ff:ec:84:7c:
                    7a:17:40:5d:69:9e:a9:7c:33:d3:19:aa:78:20:ed:
                    69:4c:c9:ea:d7:88:d1:6d:90:4b:94:88:0e:30:c0:
                    26:8f:bd:99:b5:38:a7:db:20:79:90:ed:8f:a8:2f:
                    2a:92:47:71:93:e5:33:7f:b4:6d:e8:fb:d4:46:fb:
                    91:65:25:1f:94:62:a9:23:80:12:d8:6a:04:8c:12:
                    e3:88:d0:eb:12:63:72:06:e0:36:53:f3:b2:06:eb:
                    9a:b6:f2:ec:f2:9b:86:d1:d3:9a:92:f4:c3:4f:96:
                    51:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:71:E1:2E:74:8B:6C:B8:E2:EF:B2:29:A4:35:72:85:AE:46:69:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/604a6fac-2d19-3247-b089-eada9799dc4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:6d:b1:b1:a4:3f:3a:e6:01:eb:9a:47:38:e3:07:a5:85:ac:
         cc:2e:2d:2c:ac:52:9f:aa:31:f6:bf:33:41:9a:e6:e3:bb:e0:
         80:b2:26:c3:4d:c1:50:ee:20:8a:4f:29:82:ac:d6:ab:a2:0a:
         b9:f3:79:41:d4:7c:de:a6:a4:d5:b3:84:9e:64:3b:bc:5a:dc:
         f8:6f:19:5e:a7:a8:0a:59:ab:30:d4:94:83:39:46:a6:48:f3:
         31:1a:4e:b1:5c:01:bd:d0:b8:d5:4b:35:09:f7:c8:b8:90:5f:
         98:29:e6:90:0b:fa:60:e8:5d:95:29:ac:60:4d:7a:a3:c1:5d:
         7c:56:3d:5f:6b:96:0a:18:bb:8d:89:90:c9:b7:2e:2e:da:1b:
         ec:7a:3b:43:4c:bc:44:b5:95:f3:85:fc:42:8c:90:d7:16:7f:
         09:db:f1:84:65:31:c5:d9:1a:3f:d7:9a:73:db:45:12:70:c4:
         43:e2:cf:76:3e:bc:7a:ec:76:3d:cd:70:c8:a2:8b:e2:fe:1a:
         2c:1d:f6:c5:e7:19:29:92:72:9c:22:73:97:f8:a9:03:38:d2:
         77:c0:9e:8a:65:7e:8d:6d:2a:b8:9f:85:3f:65:c3:fc:24:4b:
         d7:03:0d:15:0c:be:02:c2:41:93:50:3c:63:28:34:27:aa:6a:
         d2:7a:91:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:06:36 2026 by rpki-client