Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/37ba4f99-90e2-31b0-8fa4-dc985da994d1.roa
File:                     37ba4f99-90e2-31b0-8fa4-dc985da994d1.roa (raw, json)
Hash identifier:          z83NBXijgyhqeVCkgJyXUgvOR2hFoNNx9SXqvP5SQUs=
Subject key identifier:   76:A0:83:D0:09:47:F4:0E:9F:F6:52:76:C1:6A:2B:53:B3:4E:FD:9F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D0647B76FC406315D074C7C00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/37ba4f99-90e2-31b0-8fa4-dc985da994d1.roa
Signing time:             Sun 01 Mar 2026 14:00:41 +0000
ROA not before:           Sun 01 Mar 2026 14:00:41 +0000
ROA not after:            Sat 30 May 2026 13:00:41 +0000
asID:                     13335
IP address blocks:        162.158.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:06:47:b7:6f:c4:06:31:5d:07:4c:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  1 14:00:41 2026 GMT
            Not After : May 30 13:00:41 2026 GMT
        Subject: CN=8fead455-59b7-4ac7-8b77-6512d80cf933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d0:d5:b1:7c:dd:67:d7:5f:19:2e:16:bc:bf:
                    37:72:02:68:bf:bc:a6:99:34:46:bb:c0:55:7c:fa:
                    10:be:64:40:c4:db:a8:89:85:2d:4c:9d:75:00:b1:
                    07:47:d3:73:bb:e5:66:63:33:3f:4b:42:61:6e:8c:
                    b4:21:19:32:7e:33:68:b1:00:0d:92:19:08:8b:48:
                    75:47:34:60:e2:a2:32:5b:f0:da:39:e0:7c:73:2e:
                    40:1f:20:31:c8:56:a0:83:4e:52:6e:7c:c7:8f:c4:
                    34:f7:b4:c0:ea:df:4e:30:f3:c0:4c:49:a2:7b:73:
                    cd:ab:04:01:92:a7:df:cd:2a:ea:a3:76:76:94:d4:
                    da:99:82:d1:70:23:64:b8:eb:9e:34:84:16:a4:36:
                    53:ee:06:06:64:70:8f:33:9e:42:03:e9:34:85:9c:
                    2a:8e:45:3e:e4:47:bc:0d:c7:15:74:cb:05:7b:c9:
                    c2:d4:33:4c:33:e2:60:7b:7e:93:b7:d6:36:81:f7:
                    92:47:a5:fb:44:35:b4:65:4e:48:48:cb:38:a5:33:
                    8c:3a:d3:f7:4c:53:ec:bb:20:d2:0a:a2:f9:d9:e6:
                    9d:f6:a9:13:f0:63:dd:6f:4a:d5:84:c7:56:10:b4:
                    67:6f:2c:29:9c:e2:d2:9c:15:39:d8:39:30:2a:48:
                    af:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A0:83:D0:09:47:F4:0E:9F:F6:52:76:C1:6A:2B:53:B3:4E:FD:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/37ba4f99-90e2-31b0-8fa4-dc985da994d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:f1:65:69:7e:1d:44:3b:ae:b8:a8:7f:bb:b8:86:5b:a7:31:
         b2:9a:68:77:55:f6:5c:3d:dc:fd:ae:18:77:a2:e6:0a:88:c1:
         9f:02:e3:e7:6a:f4:a3:ab:ca:33:8b:25:bc:45:81:fe:c9:b8:
         f7:8f:f8:4c:eb:e0:d0:76:06:ea:d7:aa:43:b3:2a:f6:fa:1b:
         89:e8:14:ec:b1:04:f9:80:d7:12:1c:43:24:83:e6:db:a4:d5:
         ed:0e:61:72:91:5b:4e:19:0c:12:a6:a5:da:35:d2:f8:ce:a8:
         be:14:83:2c:56:48:15:1b:8d:b2:ad:83:a1:15:3f:d1:ee:67:
         c1:18:10:50:d3:0f:6a:3a:51:e2:2f:59:89:95:b8:bc:b4:bc:
         23:91:a8:97:3b:7c:36:e3:40:84:10:15:57:71:f5:7f:fe:a9:
         70:7f:fc:1e:b9:81:7f:a3:39:27:23:20:01:f5:22:43:76:a8:
         a2:75:8a:e6:32:5c:82:ad:24:58:7a:16:a7:1b:61:c3:80:46:
         9d:69:82:af:0c:8d:8e:01:2a:0d:91:08:fa:30:98:60:45:c2:
         d5:03:32:47:9b:c5:26:a9:da:d0:68:e1:1d:52:df:58:71:27:
         e8:59:74:ec:5c:df:fb:5b:da:ae:c6:4e:1e:e1:bb:54:c8:65:
         44:a3:45:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:04:57 2026 by rpki-client