Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ed5865bc-56ad-32da-b5e8-3a020dbe9cba.roa
File:                     ed5865bc-56ad-32da-b5e8-3a020dbe9cba.roa (raw, json)
Hash identifier:          w0apfFVVwmdsRlOpD36IzONVHPEPVAeD3TFAcgDzMWM=
Subject key identifier:   8E:9E:1A:8B:BF:46:55:3D:AF:7C:BA:A3:24:03:5A:D5:2A:0C:6E:FD
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D67DFF0E4BD9F1BE7439EBB00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ed5865bc-56ad-32da-b5e8-3a020dbe9cba.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     13335
IP address blocks:        162.158.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:f0:e4:bd:9f:1b:e7:43:9e:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=326bc2bb-99fa-4401-a028-75836cd234ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bb:7e:ce:71:75:66:a3:db:6f:73:89:c1:62:
                    71:0b:d5:a0:a1:b4:2c:11:a9:8c:86:9f:f2:cf:28:
                    93:1f:42:16:b8:d3:4f:9a:33:b3:23:e0:d5:1a:53:
                    5f:c7:fb:ab:1e:01:04:35:37:b7:9b:14:7b:45:99:
                    b9:28:ef:74:a9:1d:8b:60:45:ff:d9:9f:81:b7:d7:
                    54:ad:ef:08:a7:92:47:e1:06:37:de:1d:5c:4c:f0:
                    0d:b8:82:aa:b6:86:e2:69:67:dc:c8:40:bc:68:bb:
                    44:4e:c8:5d:e7:3a:b9:e2:2c:1f:ba:93:a8:a2:d1:
                    a3:5a:a4:81:7d:5f:77:53:15:d0:3c:c5:27:85:3f:
                    f7:72:f1:64:fa:04:de:97:72:4c:8f:12:7e:9c:36:
                    96:c8:60:c7:79:3c:92:4b:8f:48:2c:ce:34:89:3d:
                    3c:d6:aa:40:21:3f:96:76:49:b0:04:59:2d:f3:0a:
                    80:f3:d9:a1:05:62:dd:a6:c0:33:6d:2b:07:23:0d:
                    89:1a:99:2c:e7:2f:ef:32:2e:4c:47:7f:57:ec:78:
                    77:23:35:b5:86:10:e4:9b:de:34:c2:92:e5:30:d5:
                    a6:08:64:87:61:da:c4:5f:4a:ea:b6:8f:24:f4:06:
                    11:8c:f0:c4:f9:28:6b:90:a8:3f:14:27:7e:c1:7d:
                    63:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9E:1A:8B:BF:46:55:3D:AF:7C:BA:A3:24:03:5A:D5:2A:0C:6E:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ed5865bc-56ad-32da-b5e8-3a020dbe9cba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:97:5b:b0:bc:a5:f8:65:30:04:b3:f9:ad:49:c1:11:34:47:
         af:03:7b:ce:3c:c3:73:e4:7f:34:ec:6d:8a:31:42:fc:2e:75:
         eb:0d:0a:e6:35:d4:8d:2d:24:7f:25:a9:db:5f:02:e6:ce:5a:
         08:c6:64:28:7d:08:d3:f7:c7:f4:0e:3b:e0:22:50:af:7d:db:
         a4:48:99:5f:fa:3c:18:26:55:fc:b8:36:bd:d5:a7:40:81:f2:
         14:2e:b8:97:fe:c1:02:63:a1:15:11:1d:e2:b3:34:43:32:bb:
         1f:23:3c:f2:9c:a7:c8:68:fd:54:8f:07:04:a1:f2:56:7d:dd:
         f6:5f:dd:64:64:59:e2:1c:09:f3:2e:71:d0:11:01:8c:57:53:
         4f:15:3f:45:39:89:73:a4:5b:13:68:59:46:49:ba:93:b0:61:
         fa:80:33:06:35:15:3c:ac:fe:f9:f5:b5:e5:65:91:ae:38:b0:
         57:c0:7e:dd:d9:a9:e4:bb:d8:e5:55:88:20:88:e8:72:65:41:
         6c:33:b2:78:38:0c:b7:ba:7c:11:a7:40:ee:9b:a2:99:6c:c4:
         91:ff:f3:0d:d1:15:90:e5:97:71:70:7e:a0:3d:34:95:1b:7d:
         91:26:c0:1f:d5:40:d9:e9:b7:b9:27:a7:de:f0:79:30:08:c1:
         e0:22:1c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:33:35 2026 by rpki-client