Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/19bd034d-548c-3f81-bed5-7c1cb3753de5.roa
File:                     19bd034d-548c-3f81-bed5-7c1cb3753de5.roa (raw, json)
Hash identifier:          KBJ3RwxfzHdOoSn1I17NY2fX0FUo7sRGQT4WxsA4rlE=
Subject key identifier:   23:D5:59:AD:53:78:72:8D:BA:B4:00:7A:20:C3:F0:97:FC:B9:29:BE
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584CF157690B5CDC68CDE07C7800
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/19bd034d-548c-3f81-bed5-7c1cb3753de5.roa
Signing time:             Sun 22 Feb 2026 02:00:32 +0000
ROA not before:           Sun 22 Feb 2026 02:00:32 +0000
ROA not after:            Sat 23 May 2026 01:00:32 +0000
asID:                     14789
IP address blocks:        162.158.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f1:57:69:0b:5c:dc:68:cd:e0:7c:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 22 02:00:32 2026 GMT
            Not After : May 23 01:00:32 2026 GMT
        Subject: CN=a8548278-506b-48c5-b95a-a40b574342ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:8e:41:b9:a8:33:d9:92:fd:e0:96:c4:11:7a:
                    de:43:7d:63:5d:f9:48:3e:41:0e:87:a5:7b:42:69:
                    d6:08:df:4a:92:e8:99:80:83:f3:c4:17:28:55:b4:
                    d8:dd:e7:09:d9:19:31:6b:df:78:4e:8f:1c:3c:8e:
                    7c:55:7e:be:a0:ab:5e:f1:e8:cf:15:7c:ef:88:db:
                    b5:b9:c2:e2:8d:04:24:ef:b2:9c:28:d5:1e:d7:b2:
                    11:18:d5:74:25:23:a3:8e:5d:82:37:c9:c2:ca:71:
                    30:a4:83:c3:bb:71:ab:92:00:76:e8:6d:d7:7b:1d:
                    d2:83:14:de:cd:77:f9:da:f0:e1:cd:41:e5:d4:17:
                    49:56:4a:1c:46:cc:f6:cc:c6:3d:34:b3:f6:c2:a8:
                    49:ec:d7:6d:34:cb:47:28:75:36:6a:fc:35:6a:28:
                    e2:30:41:52:a9:60:08:a3:2e:ca:27:f5:c3:ed:8c:
                    c5:6b:1d:e4:15:23:38:13:29:0a:10:92:b7:ad:4e:
                    5a:05:c1:5d:d0:cb:dd:4b:cd:ea:5b:7e:eb:db:ec:
                    72:04:47:f7:fe:c1:52:cc:47:6f:cf:56:98:0a:e9:
                    4e:3c:7a:35:e7:22:b5:74:b5:2d:7c:35:c6:d3:17:
                    b1:c7:66:d8:d4:eb:0c:ba:96:08:91:94:ea:7c:08:
                    b0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D5:59:AD:53:78:72:8D:BA:B4:00:7A:20:C3:F0:97:FC:B9:29:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/19bd034d-548c-3f81-bed5-7c1cb3753de5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:2c:15:84:1b:b9:4c:b8:86:c8:4a:da:04:97:e2:43:20:e1:
         1b:27:57:cf:42:f8:c3:d3:1c:74:c9:ae:45:b2:33:cc:c9:25:
         96:cc:b1:d9:69:fe:3a:04:4a:eb:46:f6:a3:62:b0:ed:24:aa:
         7f:ed:d8:2c:2a:ae:40:6d:03:4f:87:35:32:8f:d8:05:f8:4f:
         55:5f:9f:e7:6f:be:e2:52:11:12:2f:de:5e:0d:da:28:56:c4:
         56:45:8f:3b:d0:d7:95:f1:fb:9e:7e:83:c8:61:d8:86:8a:7a:
         51:14:42:6b:d6:80:ee:95:99:46:a0:66:12:30:7b:3a:85:aa:
         07:a6:10:64:f7:af:b3:9b:f2:3e:a4:09:8d:d8:04:7b:50:38:
         c0:4f:e2:8a:6d:e4:49:58:bc:26:e1:c6:ea:20:81:71:68:3d:
         e4:c6:48:a7:ff:91:c1:f2:1f:f8:32:ad:a4:a7:2a:5e:11:4b:
         e3:16:59:ce:ca:95:94:37:23:df:cd:a7:ec:6d:7e:27:65:1c:
         da:00:82:ab:5a:bf:e1:ee:ed:88:95:55:60:67:87:21:6b:c4:
         8d:55:92:03:3d:ed:51:9b:6a:16:ec:19:0d:19:aa:45:19:d1:
         4b:dd:38:c3:f7:4d:df:1c:e8:64:88:93:ec:d4:22:b7:3b:39:
         4d:b1:c7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:42:47 2026 by rpki-client