Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/86df83fe-6eb4-31b1-86f2-e5f124491dfa.roa
File:                     86df83fe-6eb4-31b1-86f2-e5f124491dfa.roa (raw, json)
Hash identifier:          1xlJEsfkD17K1WDdmxwUjbFJ74rm+rabDNJVjBwH1xU=
Subject key identifier:   5F:48:04:47:4E:95:CB:8A:76:44:83:7F:BD:50:95:7D:FA:AB:4A:52
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584F4972A355C64400CE9AEB4C80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/86df83fe-6eb4-31b1-86f2-e5f124491dfa.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14789
IP address blocks:        162.158.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:a3:55:c6:44:00:ce:9a:eb:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3424b864-5a0f-4994-b3ce-d803eb0dfc46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f8:64:53:d3:fd:bd:ea:66:0c:08:d8:e5:15:
                    16:8d:b2:01:e3:6f:1f:e1:9e:fe:63:a9:2e:8c:2b:
                    76:94:d1:93:b6:1b:94:31:f1:f5:f7:9c:45:a3:6e:
                    77:c0:f2:72:bd:15:f5:87:6c:49:12:e3:fd:cf:21:
                    4d:35:20:7d:9a:4c:b6:3a:95:7d:c7:69:2e:f0:d7:
                    0d:f0:9d:6c:41:60:d5:14:fb:65:ef:cc:62:88:2e:
                    e1:83:95:f0:91:ab:ef:e2:26:65:ef:cf:2a:c5:d4:
                    c6:88:43:6c:cb:72:83:88:fc:6c:bb:67:3d:5f:c9:
                    fe:26:6c:0a:61:a3:01:8a:bf:04:e2:aa:08:b5:81:
                    24:97:70:2c:18:81:5e:54:07:a2:c2:10:7d:17:f4:
                    5d:16:56:c0:82:72:b1:af:7b:21:f2:fe:24:e8:0c:
                    83:ff:dd:ae:40:b7:55:ea:6a:ce:bd:a8:55:a0:70:
                    20:83:55:9f:5d:7c:e4:74:8d:1a:53:1d:db:2b:c8:
                    f9:22:79:b0:39:1a:5d:e9:71:64:a1:6a:61:26:0b:
                    a2:04:09:52:31:a0:86:f5:7f:ca:df:df:2f:ba:fd:
                    3e:e1:b1:4c:87:b4:d6:9e:6f:0e:12:72:a9:c4:14:
                    1a:99:e7:38:a7:81:90:82:79:9a:fc:e4:17:b1:27:
                    e6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:48:04:47:4E:95:CB:8A:76:44:83:7F:BD:50:95:7D:FA:AB:4A:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/86df83fe-6eb4-31b1-86f2-e5f124491dfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:75:ad:96:c2:4a:e5:4d:1e:25:de:18:93:b2:1e:f3:50:5d:
         df:e5:fe:4e:0a:6f:c5:d0:71:6e:a9:cc:e2:0f:46:52:6b:00:
         1e:f1:44:c6:65:ad:7f:04:a6:38:5b:9d:67:54:9d:8d:a0:20:
         64:8a:82:47:a4:f5:49:b4:80:8e:27:ac:dd:dc:08:64:ce:5e:
         ee:89:e2:ea:1b:9d:a8:f7:5a:55:12:e1:fd:25:ce:48:ec:fb:
         d0:c2:19:1e:ca:79:2c:30:e0:fc:59:57:6c:3c:d6:0f:12:73:
         79:60:17:7b:ce:8b:19:63:7e:20:d9:ef:26:cb:0c:2d:7c:95:
         a5:6c:1d:08:d5:f5:cc:31:7d:df:c2:2f:92:e0:24:20:2d:b0:
         89:74:47:05:fa:38:a8:63:58:9e:52:13:e4:00:7b:9f:21:5b:
         1d:8c:56:3b:3a:a2:5d:a0:3d:b5:5f:67:9a:67:07:a5:45:21:
         e0:e9:08:85:3e:ae:f7:51:33:f6:39:d0:b8:ab:83:7a:b9:be:
         c2:2c:06:9e:a3:aa:20:2c:c2:e5:54:fd:d3:db:2c:b9:85:4a:
         3c:99:53:ed:ed:d8:89:37:8a:e0:74:ca:0f:99:28:83:ae:d2:
         73:f2:91:2e:8b:1a:9f:d8:87:ab:b0:01:a6:c4:7f:49:48:94:
         27:a8:08:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcqNVxkQAzprrTIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MzQyNGI4NjQtNWEwZi00OTk0LWIzY2UtZDgwM2ViMGRmYzQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfhkU9P9vepmDAjY5RUWjbIB428f4Z7+Y6ku
jCt2lNGTthuUMfH195xFo253wPJyvRX1h2xJEuP9zyFNNSB9mky2OpV9x2ku8NcN
8J1sQWDVFPtl78xiiC7hg5Xwkavv4iZl788qxdTGiENsy3KDiPxsu2c9X8n+JmwK
YaMBir8E4qoItYEkl3AsGIFeVAeiwhB9F/RdFlbAgnKxr3sh8v4k6AyD/92uQLdV
6mrOvahVoHAgg1WfXXzkdI0aUx3bK8j5InmwORpd6XFkoWphJguiBAlSMaCG9X/K
398vuv0+4bFMh7TWnm8OEnKpxBQamec4p4GQgnma/OQXsSfmmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF9IBEdOlcuKdkSDf71QlX36q0pSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODZkZjgzZmUtNmViNC0z
MWIxLTg2ZjItZTVmMTI0NDkxZGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop5RMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADJ1rZbCSuVNHiXeGJOyHvNQXd/l/k4Kb8XQcW6pzOIPRlJrAB7xRMZl
rX8EpjhbnWdUnY2gIGSKgkek9Um0gI4nrN3cCGTOXu6J4uobnaj3WlUS4f0lzkjs
+9DCGR7KeSww4PxZV2w81g8Sc3lgF3vOixljfiDZ7ybLDC18laVsHQjV9cwxfd/C
L5LgJCAtsIl0RwX6OKhjWJ5SE+QAe58hWx2MVjs6ol2gPbVfZ5pnB6VFIeDpCIU+
rvdRM/Y50Lirg3q5vsIsBp6jqiAswuVU/dPbLLmFSjyZU+3t2Ik3iuB0yg+ZKIOu
0nPykS6LGp/Yh6uwAabEf0lIlCeoCAg=
-----END CERTIFICATE-----
Generated at Thu Nov 5 09:30:15 2026 by rpki-client