Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ed5865bc-56ad-32da-b5e8-3a020dbe9cba.roa
File:                     ed5865bc-56ad-32da-b5e8-3a020dbe9cba.roa (raw, json)
Hash identifier:          KRs4Wv1F6WMAmIMVSdDD1XcyIE1QwQc7IN4IEd6TxW8=
Subject key identifier:   8C:D8:0F:34:01:E1:58:52:C9:36:54:E7:BE:7F:91:F7:B9:87:C9:D1
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EEA878296C20379864555EC40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ed5865bc-56ad-32da-b5e8-3a020dbe9cba.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        162.158.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:82:96:c2:03:79:86:45:55:ec:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=bf4608f4-525a-4aac-9f00-9d1ac32a3b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:22:c8:80:5a:53:32:a3:ca:54:ab:f5:bc:eb:
                    cb:2c:90:27:dc:df:d4:7a:84:a0:fa:07:26:e0:c4:
                    df:27:c2:6e:8b:70:03:74:41:bd:9e:5f:16:01:2d:
                    ae:89:3f:7d:64:99:27:54:9b:21:f9:31:bf:b6:cd:
                    f2:a2:c2:29:d1:6d:78:c8:4d:79:e8:d0:d6:3c:1c:
                    1b:31:19:82:f8:ef:b9:16:5e:02:7e:29:3c:0a:33:
                    61:a2:6f:48:3f:90:f4:09:c3:3d:de:44:37:61:d4:
                    20:62:11:16:f6:f3:32:23:05:3f:ea:d7:df:01:45:
                    86:7d:7b:fb:cd:98:83:34:88:c2:53:b1:b9:19:58:
                    1c:01:20:41:5e:2a:2a:d0:d6:21:42:05:93:fb:4a:
                    03:45:97:7c:53:d9:26:53:3a:ac:40:17:55:21:9f:
                    35:08:59:df:33:4c:fa:15:8a:49:97:69:db:0c:cb:
                    88:08:fa:79:8c:99:43:5f:0f:06:64:37:78:d4:ad:
                    be:b2:88:ae:cf:c3:2d:6f:89:08:ba:26:f5:df:9b:
                    2b:26:7c:e1:95:64:04:f8:7d:22:39:24:c3:23:f4:
                    71:4a:a5:8c:1b:eb:a4:93:67:fd:b1:7d:2e:ff:98:
                    5d:02:28:f0:a0:f0:0d:55:99:23:6f:17:e7:f4:d8:
                    d7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D8:0F:34:01:E1:58:52:C9:36:54:E7:BE:7F:91:F7:B9:87:C9:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ed5865bc-56ad-32da-b5e8-3a020dbe9cba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:07:05:51:29:d9:ad:80:f6:69:19:bd:cf:b0:62:ea:53:05:
         e7:a7:b5:51:18:f9:bf:04:86:b5:9c:db:d7:bb:bb:2c:ea:1f:
         05:84:9a:20:f9:3e:93:e5:9e:90:3d:d8:4e:9f:76:51:fc:8a:
         31:cc:86:83:d1:63:20:79:b2:32:7f:34:78:35:33:a6:e7:0b:
         19:e0:cf:17:6c:af:7a:f5:4c:3e:3d:0a:4a:62:b6:37:bf:70:
         e9:e7:56:49:24:b7:1b:80:fa:bf:4d:65:44:cf:1c:e6:d2:cc:
         39:d1:cd:4d:31:18:f5:aa:56:03:eb:14:de:38:c5:bd:62:4a:
         f7:b6:46:d2:49:32:60:df:6b:06:33:0f:11:4a:1a:14:f2:bd:
         f2:b8:cc:5e:ad:dd:f2:81:ef:33:d4:da:0c:dd:ca:a5:71:65:
         8f:07:a5:0d:e1:0b:cb:da:47:74:ad:60:40:42:73:e3:28:19:
         36:b8:d1:99:49:03:dd:db:36:86:ed:a9:d2:3e:7b:db:8c:81:
         cd:56:25:b0:34:8e:fa:1f:94:0a:15:dd:f6:e7:47:90:d3:f5:
         86:46:85:33:09:27:90:b2:16:04:47:ba:65:95:b5:b6:83:9b:
         35:fe:01:b2:46:10:b0:23:fb:cf:95:21:80:2a:77:0e:ce:eb:
         00:cf:4b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:18:31 2026 by rpki-client