Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6108eafa-eded-3e17-8a63-57e1d49d256a.roa
File:                     6108eafa-eded-3e17-8a63-57e1d49d256a.roa (raw, json)
Hash identifier:          ToDjSpxay6+9z8GunWgGD11Me4XsPIK1LFn6AEtJUpE=
Subject key identifier:   C9:57:38:BA:53:88:00:D6:AC:2E:E3:0B:B5:40:C0:FA:31:4D:38:9C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D67DFE1E9E9C418A221B8B940
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6108eafa-eded-3e17-8a63-57e1d49d256a.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     13335
IP address blocks:        108.162.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:e1:e9:e9:c4:18:a2:21:b8:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=4679530e-dc71-4281-b524-526fcf2deaf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cd:c6:02:8e:16:ac:57:c3:97:39:a2:55:97:
                    3f:07:27:88:83:31:77:e5:cf:40:35:e0:b5:63:10:
                    78:fd:83:b2:c9:64:7c:c1:96:6c:69:04:7d:42:b4:
                    59:c3:9b:4d:f1:2d:71:37:cf:46:7b:43:ad:00:e3:
                    05:91:ac:72:79:c9:94:77:9f:e3:28:a3:11:cf:09:
                    11:1c:44:14:36:6c:31:69:2c:5a:b2:ec:d3:61:05:
                    53:8b:bd:97:b0:32:56:0f:cd:8f:05:3a:d4:1a:04:
                    7d:bf:e5:c5:f0:da:d8:d2:90:c6:54:07:96:04:62:
                    91:b4:5f:fd:3a:6c:30:cd:24:d1:64:f6:59:5f:a7:
                    a3:1b:72:9f:17:db:88:4e:db:f8:99:b4:27:c1:ba:
                    0c:72:22:10:dd:ba:08:ed:ea:70:8f:bd:09:e7:1d:
                    8d:a5:a3:0f:c5:ee:af:1c:17:b5:bb:32:55:69:3e:
                    cd:f1:2f:f7:22:ce:dc:b6:9f:87:dc:ae:f3:99:c5:
                    6f:ee:c0:1d:1b:69:9e:1f:39:e5:4f:44:04:4d:f5:
                    9c:73:eb:e1:90:50:c3:f7:c2:ef:fc:3e:86:3c:e0:
                    2e:79:f0:8e:f8:d2:a7:4e:88:22:5e:0e:5c:59:41:
                    25:c5:ce:ff:57:c8:3a:7d:b4:24:56:55:53:89:af:
                    a8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:57:38:BA:53:88:00:D6:AC:2E:E3:0B:B5:40:C0:FA:31:4D:38:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6108eafa-eded-3e17-8a63-57e1d49d256a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.162.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:8b:f7:09:b0:9e:70:fe:d6:e2:68:2b:57:78:0d:b5:5d:57:
         ab:a0:e5:53:7c:5e:16:91:04:c7:a4:eb:d0:9a:78:dc:dd:b5:
         fb:43:03:e7:05:97:4a:bd:31:09:d5:e0:b3:e2:07:9a:ba:e2:
         ba:08:95:0e:1e:31:a8:73:a2:0e:f5:8f:c3:14:33:ae:15:b5:
         1e:b4:7c:61:a4:da:4f:b2:27:db:2b:dc:14:61:c6:85:69:4f:
         d5:47:79:62:82:d1:9c:89:93:d8:1c:af:98:09:07:53:d3:44:
         db:0d:7c:66:3b:e1:74:71:ce:e8:e8:19:7a:dc:87:6f:0e:fb:
         73:6d:5f:4f:e3:5c:79:60:b0:96:3b:7b:9e:53:14:ea:c8:06:
         a9:86:ee:38:df:f6:f4:db:f9:82:a5:d3:68:4e:6e:bc:1d:97:
         ba:10:80:97:a6:3b:e9:43:9b:ad:49:e5:fc:ce:b3:2b:83:c2:
         18:a1:cb:9a:7c:50:de:82:07:cc:66:45:50:74:d1:0b:51:b7:
         90:48:34:95:08:7a:98:96:d3:cd:82:a8:a0:da:ba:44:d1:b4:
         fe:59:f6:a3:18:58:0b:04:d2:59:a4:28:da:8c:0a:f0:ba:01:
         ba:13:a6:c7:88:83:91:78:41:f3:8d:12:02:8d:a9:66:fd:30:
         2d:c3:8e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:34:50 2026 by rpki-client