Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34d5f04f-2756-3f1b-92df-9498ac168c2e.roa
File:                     34d5f04f-2756-3f1b-92df-9498ac168c2e.roa (raw, json)
Hash identifier:          o2i5qN515/09PKPN/RPIwhns6zkaXCS0DoXlJ40DxWM=
Subject key identifier:   F0:76:7E:E0:1F:9B:74:B3:E1:4E:F4:BA:2E:B5:37:7D:37:CE:94:90
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BBBF4685200970C80A276CE80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34d5f04f-2756-3f1b-92df-9498ac168c2e.roa
Signing time:             Mon 03 Nov 2025 06:16:19 +0000
ROA not before:           Mon 03 Nov 2025 06:16:19 +0000
ROA not after:            Sun 01 Feb 2026 06:16:19 +0000
asID:                     13335
IP address blocks:        162.159.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:f4:68:52:00:97:0c:80:a2:76:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov  3 06:16:19 2025 GMT
            Not After : Feb  1 06:16:19 2026 GMT
        Subject: CN=d27bcc34-88a6-42a9-97f1-9e0732fe270d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2a:74:f5:f5:08:a1:a1:19:4a:3f:25:4e:8c:
                    4a:10:96:57:44:a2:83:6e:83:06:3b:e2:4d:92:09:
                    54:a9:ba:a8:29:94:5e:9f:4c:62:99:62:2a:c3:be:
                    8e:d1:58:24:dd:24:1d:67:94:3a:20:2b:49:3d:07:
                    51:b4:8f:c4:bf:51:9e:60:1a:9d:c8:66:93:0f:4b:
                    b9:9f:0a:e4:05:4b:26:92:a3:71:3b:b8:60:41:09:
                    e1:c2:76:f0:de:cc:8e:73:54:fb:8c:8a:60:e9:5d:
                    a7:86:30:14:8e:a3:fb:e3:fb:79:6b:05:b3:19:92:
                    29:6b:77:31:1b:1c:39:5e:c4:8e:ed:6d:9b:7c:95:
                    15:62:ad:24:66:eb:28:db:0f:d6:97:21:df:66:d1:
                    b3:cb:05:a6:69:b6:a6:03:30:a5:90:ec:a7:20:a4:
                    a4:8e:a8:d3:b7:6e:12:27:e5:a5:cf:c9:88:d4:c1:
                    a9:aa:19:da:3f:1d:b4:ee:30:71:6f:36:a6:db:f5:
                    c9:3a:6a:36:85:fa:52:ff:35:7e:a3:97:f8:9e:d2:
                    da:71:fd:de:7b:d9:19:1a:1d:40:5c:25:9b:f3:14:
                    5d:d1:89:8c:51:2d:26:3f:e9:cd:4d:f5:07:3c:30:
                    cc:85:43:95:c2:0a:bd:e4:54:6e:c3:0e:27:de:40:
                    4b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:76:7E:E0:1F:9B:74:B3:E1:4E:F4:BA:2E:B5:37:7D:37:CE:94:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/34d5f04f-2756-3f1b-92df-9498ac168c2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:55:1e:7e:32:d1:dc:3a:98:3c:8c:b4:fb:0b:95:d8:13:67:
         c4:6b:96:98:27:10:7c:a1:45:68:05:67:96:06:6d:f2:e6:7f:
         4f:76:86:b7:e1:a6:78:1e:62:eb:14:06:49:a6:5c:e9:7d:e5:
         d0:a7:14:75:2e:22:b7:71:26:5e:8d:da:e7:a5:06:64:03:2e:
         fd:63:99:ed:78:ba:cb:3c:f2:c2:0c:63:6c:b1:30:56:bc:cf:
         d8:3b:6c:df:8b:37:6f:9c:05:e0:8d:23:c6:05:8d:40:25:ac:
         9e:f3:ca:ac:51:00:a5:5d:e2:95:ae:c3:bc:6d:b7:3b:3d:4f:
         cc:c8:8b:cf:f0:2c:07:a8:1f:54:4f:3b:1e:ef:fa:b1:3f:18:
         e1:57:30:9a:48:ac:3d:51:66:be:dc:63:15:2d:c8:72:df:d9:
         1f:f4:96:3b:fb:31:42:57:8a:7a:41:17:4f:88:75:a5:0f:ef:
         5a:ab:8b:17:54:92:13:59:cf:0d:0d:f6:51:31:80:3b:32:5e:
         aa:27:77:8d:a0:c3:4a:f1:76:ec:e7:20:38:81:ab:bc:07:34:
         ca:98:52:67:9a:fb:0b:81:16:42:53:bd:d5:4c:92:29:2c:04:
         a0:27:79:cf:16:e7:81:8d:a8:ca:0a:42:f0:7a:0e:fb:51:5a:
         26:8a:5a:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu79GhSAJcMgKJ2zoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MTEwMzA2MTYxOVoXDTI2MDIwMTA2MTYxOVowLzEtMCsGA1UEAxMk
ZDI3YmNjMzQtODhhNi00MmE5LTk3ZjEtOWUwNzMyZmUyNzBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqip09fUIoaEZSj8lToxKEJZXRKKDboMGO+JN
kglUqbqoKZRen0ximWIqw76O0Vgk3SQdZ5Q6ICtJPQdRtI/Ev1GeYBqdyGaTD0u5
nwrkBUsmkqNxO7hgQQnhwnbw3syOc1T7jIpg6V2nhjAUjqP74/t5awWzGZIpa3cx
Gxw5XsSO7W2bfJUVYq0kZuso2w/WlyHfZtGzywWmabamAzClkOynIKSkjqjTt24S
J+Wlz8mI1MGpqhnaPx207jBxbzam2/XJOmo2hfpS/zV+o5f4ntLacf3ee9kZGh1A
XCWb8xRd0YmMUS0mP+nNTfUHPDDMhUOVwgq95FRuww4n3kBLBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPB2fuAfm3Sz4U70ui61N303zpSQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzRkNWYwNGYtMjc1Ni0z
ZjFiLTkyZGYtOTQ5OGFjMTY4YzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop9uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABpVHn4y0dw6mDyMtPsLldgTZ8RrlpgnEHyhRWgFZ5YGbfLmf092hrfh
pngeYusUBkmmXOl95dCnFHUuIrdxJl6N2uelBmQDLv1jme14uss88sIMY2yxMFa8
z9g7bN+LN2+cBeCNI8YFjUAlrJ7zyqxRAKVd4pWuw7xttzs9T8zIi8/wLAeoH1RP
Ox7v+rE/GOFXMJpIrD1RZr7cYxUtyHLf2R/0ljv7MUJXinpBF0+IdaUP71qrixdU
khNZzw0N9lExgDsyXqond42gw0rxduznIDiBq7wHNMqYUmea+wuBFkJTvdVMkiks
BKAnec8W54GNqMoKQvB6DvtRWiaKWiY=
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:37:57 2025 by rpki-client