Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2861afee-4a16-35c0-8206-af8c038a41b1.roa
File:                     2861afee-4a16-35c0-8206-af8c038a41b1.roa (raw, json)
Hash identifier:          IyTrtWb7PlfkkiOJqEDy40dO8N3CP1N9VslCRqPrDxA=
Subject key identifier:   7F:7E:4F:1D:38:4F:26:10:0F:39:CB:7D:D3:6B:DA:C6:0E:B5:8F:20
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D6AAA90C8DE46897125681020
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2861afee-4a16-35c0-8206-af8c038a41b1.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     13335
IP address blocks:        162.158.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:90:c8:de:46:89:71:25:68:10:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=6aa6e9e2-721a-472e-87c5-28f757d89412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2a:d3:b2:36:73:3b:58:84:df:58:4b:0f:ab:
                    e8:35:7e:4e:62:bb:cd:1b:e6:ad:4f:f4:21:4a:b1:
                    ec:1d:a6:bb:a9:f8:9a:2e:d0:a2:05:03:df:86:fc:
                    db:53:cc:e8:53:33:cd:be:6c:9e:a5:fa:eb:c4:2c:
                    d9:40:70:24:fd:dd:15:36:01:77:ae:aa:82:4d:fc:
                    c2:4b:77:92:4a:bc:3e:7e:b8:f7:c9:1d:ae:fa:3a:
                    65:79:33:23:c5:3d:68:fb:06:12:00:f8:31:43:6e:
                    d3:1c:12:27:93:88:f0:5c:e4:dc:63:49:7f:3d:c6:
                    85:86:8e:73:ae:37:9f:dc:9a:f8:14:fe:60:86:77:
                    37:d1:91:b9:2e:4d:61:25:23:d0:32:d1:bc:4a:a7:
                    27:07:26:60:88:1b:3a:5e:00:34:9f:87:9b:d0:05:
                    76:61:01:a4:16:74:11:74:0c:d6:50:79:9f:e5:62:
                    0e:30:cb:88:e9:09:3c:02:d4:e2:f4:0b:43:79:e2:
                    b3:b1:b5:fc:80:b0:a1:69:34:ca:eb:90:43:f5:19:
                    5a:53:7d:01:ef:4d:61:06:79:f2:c2:53:cf:4c:64:
                    c0:94:3d:d2:dc:57:ac:2c:c7:77:64:aa:80:2f:97:
                    fd:93:29:d7:20:0b:73:96:72:94:04:9f:ed:2e:02:
                    53:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7E:4F:1D:38:4F:26:10:0F:39:CB:7D:D3:6B:DA:C6:0E:B5:8F:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2861afee-4a16-35c0-8206-af8c038a41b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:01:f6:f6:40:0d:35:82:d8:58:9e:38:d8:13:32:70:74:58:
         02:10:82:66:65:02:8f:fd:52:cd:ef:62:36:05:e9:f4:a1:48:
         04:db:97:4f:54:37:4b:de:cc:ba:a4:33:8d:d1:26:dc:39:63:
         10:9c:01:e8:bc:a9:60:cf:65:ae:6b:28:89:28:e6:ac:bf:b9:
         22:c4:83:4c:10:3b:ec:45:9e:38:52:45:f3:98:86:ac:29:62:
         0e:11:ee:16:58:21:59:cf:10:a2:df:a4:e5:46:14:10:d2:fe:
         63:df:4a:2c:37:2b:b5:0a:bd:fc:e5:05:ba:f3:2a:fb:bf:8a:
         c5:45:0f:bb:fe:27:a3:68:94:18:b3:a9:a9:5d:8d:2a:21:28:
         e9:ff:fc:a7:7f:08:2b:b7:6a:32:22:c3:33:07:32:4e:44:de:
         1c:1c:a7:fd:fb:c3:d7:db:da:ce:11:2d:1a:10:be:56:f8:3d:
         6a:05:14:c0:0a:5d:f9:ee:8b:df:dc:06:8f:30:da:fe:65:e1:
         c3:20:94:f5:8e:e0:15:06:91:4d:8b:d7:20:c3:b8:df:c8:b2:
         4a:85:0b:83:49:3b:46:30:49:8a:ce:23:75:a3:02:54:cf:0b:
         45:ca:b0:d9:35:a5:fd:86:f2:7b:5d:9c:4d:2e:86:41:d1:02:
         d2:61:64:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:50:46 2026 by rpki-client