Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1f21211e-27ca-3d2f-85ff-f95d80ff6707.roa
File:                     1f21211e-27ca-3d2f-85ff-f95d80ff6707.roa (raw, json)
Hash identifier:          ov0PZGUOmx9n8d1HWeNCugLY3zUrHnwQZNdYBOQkkEM=
Subject key identifier:   3E:34:8A:58:34:F6:33:59:E4:E4:7D:1F:6D:A6:F6:29:04:B9:FB:CF
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D6AAA91599CCF5DAF16037440
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1f21211e-27ca-3d2f-85ff-f95d80ff6707.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     13335
IP address blocks:        162.158.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:91:59:9c:cf:5d:af:16:03:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=9499006f-b455-43ec-a46f-681ff452caa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bc:65:7b:9e:99:47:aa:b2:07:3a:18:09:da:
                    e3:18:f6:00:34:7e:f8:37:33:ae:76:0c:6e:db:6d:
                    33:b4:01:88:c2:a2:71:00:96:79:37:07:4a:5c:88:
                    c9:25:36:1c:0e:6a:1f:d7:8a:d4:e3:c8:14:4b:a3:
                    9f:b6:fc:8d:1e:a0:29:de:3c:ed:8f:f0:e0:c0:11:
                    69:1a:4e:6e:d5:00:b0:a5:f0:63:48:c4:ed:a0:7f:
                    b2:b3:01:99:fa:a6:20:7b:ec:af:16:02:29:a8:72:
                    bf:2a:28:bf:b6:64:b6:98:37:ad:32:c2:2a:00:bd:
                    37:1e:5d:71:ad:9b:69:b9:04:a2:bb:94:39:2f:72:
                    97:21:04:51:ab:33:5f:ba:53:c0:54:e6:49:38:c0:
                    0d:be:b2:39:ca:2a:09:7e:e1:46:60:24:bf:28:21:
                    d9:a5:8a:68:c6:d1:f0:2f:84:f7:19:96:66:ac:90:
                    56:05:2d:9f:2a:d1:f9:c6:23:68:26:95:87:95:75:
                    d1:32:e8:8b:da:9b:5e:3a:bb:14:54:04:ec:fa:35:
                    54:db:46:8b:72:72:37:7b:8c:d8:4a:00:0a:82:ce:
                    89:7e:b7:e0:1f:5b:8a:d0:8d:a6:d8:98:79:3a:a2:
                    6a:19:22:cd:cc:da:3e:b5:5a:72:31:1e:a8:05:57:
                    8e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:34:8A:58:34:F6:33:59:E4:E4:7D:1F:6D:A6:F6:29:04:B9:FB:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1f21211e-27ca-3d2f-85ff-f95d80ff6707.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:95:7c:23:12:b2:37:29:86:19:38:07:50:e7:1c:b6:98:db:
         ea:b9:de:2b:6c:c9:44:42:12:1d:50:84:76:e7:38:8c:34:f0:
         fe:27:5f:50:51:fe:8f:8f:af:ac:e8:4e:58:54:33:72:bc:5d:
         a4:38:a8:8b:b6:7b:2d:91:dd:a5:e6:71:0a:a4:1f:1c:17:9c:
         f5:1e:fa:67:97:03:a0:47:20:fa:cc:77:34:3f:9c:67:b1:cd:
         ea:33:d4:81:ba:26:59:79:dd:6e:8f:18:ee:39:14:91:f2:a2:
         2b:c4:d3:ca:fb:32:1a:8e:98:47:08:be:fb:38:84:f3:16:d6:
         e6:4d:9e:cf:87:02:2d:08:f1:9c:a5:24:3d:5e:51:aa:3b:d7:
         00:ea:f3:bf:1b:4b:07:c5:7a:76:a5:b0:68:16:37:9c:85:2f:
         e6:0d:a6:86:ca:ce:cf:4a:3a:a4:23:04:c7:48:f2:14:4e:e9:
         f7:61:64:58:6d:4c:39:df:44:0d:97:99:6f:41:8f:1b:dc:6b:
         6e:d0:bc:0d:fa:0b:3c:b8:d0:58:e0:6e:ba:ac:37:fc:8c:24:
         0c:d7:09:64:d7:e9:93:8f:b5:63:68:f4:fd:18:e0:5d:84:83:
         9e:b6:37:0d:a0:ef:29:b9:63:ce:04:7c:2e:f6:66:83:e5:4e:
         49:e6:44:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:01:27 2026 by rpki-client