Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/996e5e92-df4a-31c3-b37d-8b65af97cbc1.roa
File:                     996e5e92-df4a-31c3-b37d-8b65af97cbc1.roa (raw, json)
Hash identifier:          ds8VO2A5i95BPCWNPf/R5yJysgQgVEhA3CIyPaIRTVA=
Subject key identifier:   B2:E3:D0:55:B5:53:6E:CE:74:30:20:DF:DD:A2:28:C3:A9:D6:23:80
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D852FD09BDDEE4F26B5784580
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/996e5e92-df4a-31c3-b37d-8b65af97cbc1.roa
Signing time:             Thu 16 Apr 2026 01:00:23 +0000
ROA not before:           Thu 16 Apr 2026 01:00:23 +0000
ROA not after:            Wed 15 Jul 2026 01:00:23 +0000
asID:                     13335
IP address blocks:        162.159.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:85:2f:d0:9b:dd:ee:4f:26:b5:78:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr 16 01:00:23 2026 GMT
            Not After : Jul 15 01:00:23 2026 GMT
        Subject: CN=3f9da401-28cc-4913-a69b-9c5a4acd9c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:32:67:d3:de:e1:18:3f:ee:0e:74:f3:4c:67:
                    ce:f7:63:ea:1d:21:55:fb:59:c3:f5:84:38:5d:3d:
                    21:0a:5c:69:02:74:0e:96:72:5d:f6:7c:8c:64:78:
                    dd:04:2a:4f:79:af:12:2b:3e:10:71:24:31:f0:1c:
                    10:d3:2e:0c:3b:68:6c:ef:a6:b3:1d:2a:b4:d1:41:
                    5e:9b:fa:dd:bc:2a:e6:fc:32:f3:52:4a:ac:99:fa:
                    00:86:26:f2:0c:65:31:f8:50:d8:21:0d:0f:93:9e:
                    ad:1a:54:a9:5c:40:23:b7:6a:cb:db:ea:55:7f:03:
                    3b:37:58:a0:96:5f:5d:78:f9:d7:60:4e:4f:f0:4f:
                    1a:c1:64:9c:97:f9:f5:12:3d:7b:7f:39:0d:0c:20:
                    62:55:7a:6d:aa:1b:58:ae:ee:3b:0d:99:f6:78:11:
                    79:d0:29:e8:44:2e:21:06:59:ea:db:91:54:fe:92:
                    5d:d3:bd:cf:bf:bf:19:65:27:40:e5:93:67:ec:5e:
                    bf:a0:54:49:ce:49:51:71:29:8e:60:52:85:2a:7a:
                    80:d3:e1:48:f3:c3:8d:6c:49:f3:51:1b:76:81:1c:
                    ed:fd:3d:fc:f9:d2:31:cc:0a:e6:8d:db:8c:fe:2c:
                    03:a6:75:f3:1f:c5:72:66:34:d1:b8:52:95:8e:5c:
                    8d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E3:D0:55:B5:53:6E:CE:74:30:20:DF:DD:A2:28:C3:A9:D6:23:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/996e5e92-df4a-31c3-b37d-8b65af97cbc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:f6:78:dc:6f:b7:00:df:c6:c1:09:74:0c:33:83:ff:f3:43:
         3f:62:53:f0:cf:4b:94:c9:a0:30:a8:42:39:60:98:f9:ff:39:
         f8:d4:94:a0:ff:ab:af:28:5e:ff:83:36:d9:c7:fd:cc:5e:bb:
         91:b7:5f:77:84:5b:0a:e5:fd:84:fe:6d:4d:f9:df:4d:ce:10:
         93:22:03:79:8f:53:79:8b:b1:10:ac:d4:db:8e:d4:75:de:66:
         49:d4:7f:cd:ed:33:0b:eb:7b:95:89:02:6f:7c:7d:f5:28:49:
         97:3f:df:29:e2:5b:32:a2:3e:2b:93:1c:bb:37:72:f2:e4:87:
         7c:4b:4d:55:68:e5:b7:d7:46:48:d3:78:02:ac:bd:e3:c1:00:
         6d:b3:d7:e3:e4:04:38:25:95:a5:3c:55:79:8d:68:91:9f:2b:
         dc:4e:6c:1a:51:d8:f2:7d:59:42:33:e5:5a:67:eb:82:fd:a3:
         ba:34:38:17:39:b2:91:ac:7a:7a:15:e5:4a:1f:5a:2e:30:cc:
         35:8c:d4:30:99:a2:38:ce:5e:9c:30:14:8d:54:14:a6:dd:b2:
         75:8b:1f:20:27:79:ff:37:0a:85:e4:e4:f4:85:21:20:19:73:
         84:d8:0a:aa:8b:ad:7a:7d:e0:07:9a:82:fe:46:01:4b:63:bc:
         66:31:16:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:19:09 2026 by rpki-client