Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de8a8a85-0a6a-32f7-89ed-9c2e3e04275e.roa
File:                     de8a8a85-0a6a-32f7-89ed-9c2e3e04275e.roa (raw, json)
Hash identifier:          8IBSkse75ApMt81c6WteeQHa16e5D6HvsCUGjb91dTQ=
Subject key identifier:   7D:58:71:07:7D:4A:68:CF:FE:BD:A1:10:40:8C:F9:A8:51:93:10:DE
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EEA8773B684D9C9EBEB9E1380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de8a8a85-0a6a-32f7-89ed-9c2e3e04275e.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        108.162.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:73:b6:84:d9:c9:eb:eb:9e:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=553416a6-9b9c-4a92-8968-003556b5bf3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c1:d9:07:f4:09:ef:c0:91:cf:39:9c:10:d7:
                    f2:c1:a2:86:10:a7:22:60:27:96:3b:1e:8f:ad:06:
                    dc:87:03:38:fb:37:b2:21:94:1d:5b:67:fb:6a:92:
                    33:df:82:dc:73:82:ad:d1:b6:ef:75:8c:72:32:78:
                    eb:cc:97:5a:cf:6d:4f:c1:dc:c7:19:6f:d7:37:fb:
                    42:2f:09:e6:f9:b2:6f:d8:93:7a:36:23:08:9d:31:
                    2f:98:7e:59:a6:a3:f0:ee:cd:b5:f8:94:e6:9b:6a:
                    6d:e7:4e:e0:04:2c:ff:b3:d4:1b:4b:ea:5e:36:1a:
                    9f:e7:80:30:64:82:07:a8:81:c8:3b:95:33:bb:4b:
                    a0:66:9b:21:7d:16:72:fb:38:76:7b:74:d5:de:3d:
                    fd:bb:68:c7:53:b4:60:a4:7f:73:20:7f:e7:d0:a7:
                    b5:0b:98:56:61:19:df:60:64:7c:21:ed:52:74:fa:
                    6c:68:e6:58:f4:26:f1:f7:61:62:2f:52:6d:2b:b3:
                    0e:d7:b9:be:7e:66:7a:e2:87:a7:c5:6d:01:bf:e0:
                    21:8b:7c:7e:f1:0f:71:f7:02:e3:b1:45:79:0a:2d:
                    24:c1:8b:74:2d:4d:d5:90:86:72:e3:c5:60:a7:b0:
                    92:fc:76:5f:0a:11:82:fc:b4:aa:31:d8:2d:8d:7e:
                    f2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:58:71:07:7D:4A:68:CF:FE:BD:A1:10:40:8C:F9:A8:51:93:10:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de8a8a85-0a6a-32f7-89ed-9c2e3e04275e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.162.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:13:b7:c0:0b:98:d0:03:82:82:65:6f:13:7f:4e:31:70:2d:
         02:6e:37:c3:82:9a:16:b3:a2:b7:db:ef:84:f4:75:cf:44:d3:
         74:3c:8f:43:e9:a2:9e:48:e1:8b:41:91:45:c6:bc:58:e5:a7:
         1f:5e:1b:89:3c:d8:53:71:88:0c:58:e3:7b:96:21:3c:b4:8f:
         72:d6:81:95:f9:02:c2:28:cf:00:0b:37:1f:1f:81:37:3d:69:
         4c:ed:86:e7:25:ba:23:32:45:8f:4c:0f:2d:ba:b4:86:bd:42:
         4f:7a:a7:05:12:43:91:17:95:ca:4f:7b:8b:b3:de:1a:44:77:
         8f:98:7b:d0:90:ad:04:48:ad:6d:db:7f:fa:b5:6d:83:8b:e7:
         a8:fd:26:c5:84:a6:09:4c:c7:13:b5:cd:8e:04:87:85:6e:61:
         85:f4:71:fa:b0:b5:c5:8c:79:12:d2:40:d5:c1:64:55:ef:a3:
         f8:66:79:b9:78:97:d4:c5:5c:0f:d9:50:87:73:68:18:c2:f9:
         ea:2b:87:6f:09:3e:fd:6a:33:94:62:66:f5:22:ce:dc:30:46:
         e5:12:b7:8f:3b:e5:70:4e:67:a7:23:11:e9:90:08:41:3c:99:
         db:37:29:c0:4a:0d:73:c6:f5:9e:bf:07:3e:9d:7d:12:b0:1e:
         45:ba:ae:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:05:14 2026 by rpki-client