Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9314b48a-96c8-3ee8-af02-45e46270e2ad.roa
File:                     9314b48a-96c8-3ee8-af02-45e46270e2ad.roa (raw, json)
Hash identifier:          VUfm2IXw/917n4BEm58RYIuv1x3etpv2dDX74XEsLDc=
Subject key identifier:   92:92:0A:8E:A7:5A:B3:F1:62:73:F9:29:BE:A3:28:3D:AA:40:E3:30
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D6AAA9DFB3E41E39ED82C0100
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9314b48a-96c8-3ee8-af02-45e46270e2ad.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     13335
IP address blocks:        162.158.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:9d:fb:3e:41:e3:9e:d8:2c:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=bf4214c1-f7c2-4811-acca-f16e0bd2ed30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:39:f9:7f:e9:b6:81:c9:8a:0c:3f:f9:3d:f2:
                    76:6d:b8:b7:2d:f0:6e:31:f1:10:7d:02:01:f2:14:
                    55:7d:08:7a:0d:ee:cc:27:1a:f1:3a:13:8d:ea:5a:
                    5f:ef:b8:9f:d4:46:6e:ec:67:f0:c8:bf:3e:de:f1:
                    5a:9b:d4:d5:94:e3:54:2a:75:4b:0a:0d:0d:b1:15:
                    6d:2c:1d:aa:a7:00:1c:ed:04:3e:80:63:d6:77:a2:
                    0c:47:87:e2:c4:0b:a8:5b:1b:78:8f:8d:7b:55:a5:
                    44:34:6d:79:80:0c:2b:42:a7:f1:78:f8:fc:66:94:
                    81:da:8f:71:50:0c:10:5d:2a:aa:15:ab:50:e0:17:
                    9a:3e:98:ae:68:f3:e8:f0:39:2e:53:1d:a6:16:8c:
                    2c:97:69:cf:f0:89:1b:28:2b:98:dc:95:a2:10:79:
                    ab:ea:49:f1:ce:40:69:e6:46:63:69:a2:e2:96:46:
                    c4:5a:02:ba:97:a0:93:38:04:de:31:2d:5f:72:d1:
                    83:c1:b5:ae:db:35:07:1f:1b:30:76:43:dd:4d:33:
                    f1:10:d6:c7:be:2a:1f:59:07:00:a8:4b:d8:b8:da:
                    bf:5d:b3:a4:01:2a:4b:16:fd:8c:69:49:81:81:17:
                    3f:f8:5e:85:a1:3f:61:0d:1e:39:b5:5c:a6:1d:83:
                    78:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:92:0A:8E:A7:5A:B3:F1:62:73:F9:29:BE:A3:28:3D:AA:40:E3:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9314b48a-96c8-3ee8-af02-45e46270e2ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:27:9e:15:39:18:10:3f:e8:37:7a:05:58:2d:19:7e:5b:4d:
         19:fa:84:30:d6:32:0e:98:a8:35:9b:b4:65:34:b7:27:3a:10:
         66:9f:44:a5:1c:ea:26:96:e8:00:cb:55:f5:71:c4:17:8e:a0:
         66:76:b1:b8:30:bd:28:37:73:72:7c:a8:76:cd:72:92:d6:6d:
         2f:94:3f:b3:74:5c:3e:ec:7a:4f:ca:f7:e0:e0:39:2c:0e:3b:
         7f:47:18:54:e1:62:15:59:65:b9:13:fb:31:da:80:40:2f:d8:
         93:94:5d:2c:a7:19:64:bb:db:15:64:1b:5c:43:b5:2b:c4:2c:
         dc:11:58:bc:67:1f:49:44:90:67:7c:4b:b0:22:c7:95:3f:b8:
         f5:1b:74:58:b3:64:0b:6f:5d:2f:2a:0e:b3:83:0b:d7:38:2e:
         f7:78:fd:eb:31:f9:84:26:94:62:8e:fb:d6:2f:50:89:95:05:
         8f:67:7a:d3:80:b5:8d:73:d5:37:fb:75:a3:79:ca:d2:15:6b:
         ba:1f:2e:b8:4b:bd:b3:a5:db:9f:9d:b3:23:9b:f2:2a:8a:d7:
         e5:84:ae:61:0f:78:ec:94:5f:90:6f:15:a3:fa:fc:cd:f4:42:
         23:a0:55:a8:33:8d:b0:8e:58:88:82:0a:06:91:a0:27:a4:21:
         d1:e7:17:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:47:07 2026 by rpki-client