Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c70fba05-dedc-3f50-9c4e-3c02ddac411d.roa
File:                     c70fba05-dedc-3f50-9c4e-3c02ddac411d.roa (raw, json)
Hash identifier:          I1yHvNjIRkxDW1WVPq2aCTBVglkv4pCX9uAUT3LFEzA=
Subject key identifier:   F1:4A:68:5E:C5:00:82:28:F1:A3:F1:24:F0:71:9E:F2:F2:0B:D2:99
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EED52359C3BD9660685C620C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c70fba05-dedc-3f50-9c4e-3c02ddac411d.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        162.159.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:35:9c:3b:d9:66:06:85:c6:20:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=ae7be215-25ea-4ea5-9980-d24824205b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:de:a3:0c:f0:35:06:f6:52:5e:8c:51:8b:9d:
                    2b:e8:b6:71:e4:07:01:49:71:24:33:a8:fc:ff:5e:
                    2f:8e:04:6e:b7:63:3f:3c:1f:4a:5d:37:12:ae:de:
                    3d:2f:da:80:69:64:c8:49:49:6e:ef:a6:c6:5b:11:
                    40:29:4b:e2:b1:7f:78:c7:aa:b5:0e:5f:aa:35:80:
                    bc:ff:7d:18:6e:21:e4:0f:3c:03:cb:83:e5:4d:9f:
                    7a:1b:99:b1:50:23:66:04:6b:b5:87:af:14:40:30:
                    d7:17:25:ec:28:e5:16:6b:9b:fa:0e:73:cb:be:23:
                    a6:8b:2d:34:c6:ee:d4:20:72:82:b2:70:5d:9a:49:
                    bd:af:95:7c:6b:be:d2:ff:2b:ac:06:ae:be:eb:c3:
                    71:d1:90:f6:2e:e4:65:3c:49:30:76:d4:9a:a3:15:
                    f7:ad:4f:d8:cc:da:ce:f0:19:fd:56:8e:17:69:4a:
                    73:12:bd:3e:4b:3a:c7:4f:4d:dd:c2:3d:77:2e:ce:
                    64:96:e3:8e:b1:71:69:a8:94:3f:6f:d9:84:d3:3b:
                    61:83:30:d3:71:f2:a4:95:f1:ec:04:b2:fd:a6:51:
                    70:87:d2:bc:40:aa:ff:68:80:1e:de:c6:44:69:a6:
                    dd:c3:67:05:45:27:df:26:44:c9:05:d9:21:84:22:
                    ee:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:4A:68:5E:C5:00:82:28:F1:A3:F1:24:F0:71:9E:F2:F2:0B:D2:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c70fba05-dedc-3f50-9c4e-3c02ddac411d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:56:dd:a3:8b:42:9f:ca:e4:7d:f2:8f:f9:1a:e4:6f:a2:8b:
         b6:95:b8:0f:86:4d:78:57:86:1f:71:df:8b:d1:43:b8:5c:f5:
         d5:a6:af:09:0c:c1:d6:59:d6:20:05:28:fb:35:54:66:61:7a:
         6c:b2:bc:57:f8:7a:9f:5a:62:9d:a0:73:93:8f:e3:37:96:79:
         5d:d7:be:9b:1c:30:50:11:99:b6:e4:91:4b:81:b6:08:6d:f7:
         1b:74:08:f4:9e:9d:d9:e3:a3:88:c8:c6:bb:c3:22:6e:e1:c3:
         9e:8a:63:df:14:85:0b:3e:22:f5:5c:b2:aa:75:b4:a7:37:48:
         0a:d5:35:70:e4:58:e7:5b:19:7f:3b:bd:a8:f4:f8:23:b0:ac:
         ea:93:a5:fc:aa:b8:54:fa:fd:32:f4:fa:8b:fe:2a:58:95:cc:
         e3:c2:0d:71:16:5a:4b:bb:fb:ae:d6:eb:18:b1:78:cb:3e:f3:
         c4:2d:6e:f2:10:f5:40:1c:4f:78:01:42:50:6d:72:eb:2a:d3:
         a1:e3:d2:cb:07:f0:93:da:47:e8:57:b7:14:b9:e9:93:32:ea:
         dd:c1:a1:44:2d:c8:d4:b8:84:dc:ce:d2:61:0e:3d:3b:dd:a9:
         c3:db:33:bf:28:34:cc:cf:95:4f:ef:8d:25:73:37:9b:a1:d7:
         8c:ad:63:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:41:43 2026 by rpki-client