Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b7439aa-4c76-3085-8b58-df9430a9e044.roa
File:                     9b7439aa-4c76-3085-8b58-df9430a9e044.roa (raw, json)
Hash identifier:          PShM6JMLJGYMNOnQrSE79NHrOdVnGrLFSQwFcXuHDqw=
Subject key identifier:   6F:B3:D4:2F:25:0E:51:62:09:34:7D:93:F7:98:5D:F3:9C:79:8A:34
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EED5225304105B93330092F40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b7439aa-4c76-3085-8b58-df9430a9e044.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        162.158.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:25:30:41:05:b9:33:30:09:2f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=c221c27b-78eb-497e-9ae5-291cb37ef68d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:75:19:fd:8f:37:bf:7e:98:77:97:1f:41:94:
                    16:f2:ba:69:32:15:79:ee:7c:3b:6f:c0:c1:e1:6e:
                    f5:24:3a:44:2d:0c:18:54:5b:f1:ba:b3:13:ee:e2:
                    ee:4b:6b:b4:31:27:db:ae:cc:4a:d7:ca:ca:8d:73:
                    63:9f:8f:85:a3:74:0c:19:0b:f3:5f:bb:4c:e4:47:
                    bd:8e:b8:2d:c4:f2:f8:a8:de:2c:3b:3d:53:4e:b7:
                    7c:19:2d:76:8d:b5:d8:a0:80:13:51:cd:d0:91:ef:
                    d9:fd:7f:a9:48:73:5e:8e:48:79:6e:ea:b8:78:26:
                    3f:45:b5:07:26:7a:23:89:bd:3f:a3:7d:2d:f6:60:
                    c7:62:ed:0b:ed:91:8c:70:87:ee:b1:41:ac:47:82:
                    10:26:2a:dd:1e:01:71:82:4b:00:cc:0c:0c:88:44:
                    68:a7:aa:34:00:9b:68:6a:bc:e1:f8:96:03:c3:73:
                    92:1c:8f:55:d9:89:e1:5e:1f:50:98:b9:df:d4:c1:
                    09:0d:73:f9:e4:28:3f:ae:a6:f5:fe:0b:5a:49:a3:
                    81:38:b7:f2:4d:e6:2f:3c:d4:a8:4d:ec:35:ab:7e:
                    07:b6:aa:4c:f4:e1:97:75:e6:43:25:f0:8d:68:b3:
                    16:83:c8:5f:dd:27:fa:8a:8e:0f:97:86:b1:8e:25:
                    59:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B3:D4:2F:25:0E:51:62:09:34:7D:93:F7:98:5D:F3:9C:79:8A:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b7439aa-4c76-3085-8b58-df9430a9e044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:bc:f7:4a:f4:a8:70:86:a2:09:58:95:5e:99:ee:38:f2:fb:
         fc:86:14:e1:1e:7f:ef:ea:a2:b7:7c:9d:a9:4c:e2:6d:3c:fc:
         82:cf:b7:56:de:1d:b1:67:83:b7:d4:20:d9:aa:bd:2c:c7:12:
         4a:5f:dc:64:70:d3:24:43:aa:43:d2:dc:47:9a:e0:cf:28:a8:
         5e:8d:54:0e:95:f9:5a:1d:04:da:a7:ea:53:be:54:0b:db:f6:
         54:f9:f8:c2:6f:51:7e:db:8e:b7:af:44:cd:74:f2:6e:e6:fb:
         a5:7c:d2:22:52:e6:5b:52:f9:b6:0a:9b:70:7e:d5:68:e3:bc:
         7c:97:ca:15:05:2f:52:9a:2e:6f:23:52:2b:41:12:93:55:78:
         c4:bd:25:03:9d:2f:67:f1:5a:b4:5f:cb:de:7d:e0:43:3b:d5:
         ab:f5:e0:d7:28:de:35:e3:07:56:d3:0f:e0:08:ef:d8:03:4f:
         66:7d:1f:21:12:2d:4c:ab:3c:fd:9b:18:1b:64:b4:5e:be:8c:
         c6:cc:2a:27:23:1a:78:74:04:ac:2a:a5:d6:7b:80:7d:d8:e9:
         02:c8:c4:ee:d5:9b:b7:3a:2f:3a:8d:89:7b:f9:d4:86:57:a1:
         c5:21:3f:8a:14:cf:88:48:c9:66:b2:47:d8:3b:30:81:46:ac:
         a1:00:74:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:55:04 2026 by rpki-client