Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eeb9b639-479a-3173-986a-4388c7c49e9d.roa
File:                     eeb9b639-479a-3173-986a-4388c7c49e9d.roa (raw, json)
Hash identifier:          gL6SHKQhEThvL/9IYC1iyA3M/KPl+Qac2Ad/c0AXXj4=
Subject key identifier:   2D:3D:92:16:F1:78:5A:65:AA:EA:49:D4:B5:51:37:B2:D3:7D:5B:6A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D6AAA9D9E922244766D208400
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eeb9b639-479a-3173-986a-4388c7c49e9d.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     13335
IP address blocks:        162.158.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:9d:9e:92:22:44:76:6d:20:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=d798993c-f14e-4065-b766-29a3130063b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:95:19:01:3a:73:23:af:2b:51:09:ff:4d:75:
                    7b:66:eb:13:9e:36:40:b6:60:d9:eb:eb:ab:ea:02:
                    87:6a:c5:e1:07:cb:42:a9:49:18:0d:99:93:31:cb:
                    86:1d:9b:fd:d4:eb:c2:a7:03:15:b4:b5:4b:2e:2b:
                    97:91:ab:97:89:93:fa:5d:17:d3:aa:40:4a:81:01:
                    b0:4f:31:e6:52:6c:46:72:50:77:d4:7c:be:64:7a:
                    ee:d5:b2:68:21:64:d7:b8:98:73:c9:9b:27:31:f3:
                    56:6c:68:35:89:18:92:54:a9:65:67:f5:4d:7e:ca:
                    42:cf:a1:a3:bc:28:42:07:22:47:38:97:63:49:bd:
                    c8:47:9d:0d:84:29:e7:c3:6e:fa:60:44:02:b1:c6:
                    c6:5e:cf:60:b9:0c:06:88:02:f1:33:5f:9f:88:02:
                    c7:26:80:27:83:ef:0c:46:29:e4:c9:de:ea:9c:46:
                    82:e5:c2:ea:29:ce:a0:a2:8e:54:09:ad:f9:bd:ec:
                    2c:39:aa:f5:f3:d3:b1:2b:c0:bb:51:6c:c1:01:a9:
                    f2:d3:28:ad:76:48:dd:12:e2:11:d1:ed:58:25:a9:
                    8b:a4:e9:10:f9:ef:0b:2e:79:13:60:9a:2a:c8:0f:
                    19:c1:3e:4f:69:85:05:40:33:c2:77:ea:ec:50:17:
                    ce:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:3D:92:16:F1:78:5A:65:AA:EA:49:D4:B5:51:37:B2:D3:7D:5B:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eeb9b639-479a-3173-986a-4388c7c49e9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:73:e4:9a:e1:5f:a8:9e:68:84:68:bb:99:ff:cb:20:03:88:
         2c:f2:1e:46:0e:5c:8b:36:58:62:cb:0a:c6:56:03:95:5b:91:
         c6:99:77:65:aa:90:5c:c5:3f:44:56:cc:87:2b:46:89:40:fc:
         3b:08:86:1b:0c:62:f5:e6:f2:f1:08:a1:2f:9d:e5:75:bb:1e:
         2b:67:81:62:c6:88:f0:a5:4b:83:e6:09:7c:8b:9f:d0:6c:88:
         15:7a:a2:6f:67:30:16:56:bc:0a:42:10:13:4b:10:17:5b:3c:
         f1:bd:22:1f:fb:79:14:8d:ae:14:6d:d8:09:c2:39:60:34:4c:
         b2:22:2c:92:4b:a1:b0:2e:55:c0:ae:23:a5:67:87:b6:bd:35:
         8b:d9:ca:58:a9:a4:66:16:d1:93:f6:35:07:62:86:dc:df:91:
         06:88:a3:57:01:bb:bb:d6:8e:f4:6c:e9:8a:e1:78:16:92:b7:
         ba:b4:9a:5e:79:af:81:1a:05:cf:3c:0e:b1:45:af:77:2f:d6:
         b4:dd:a3:e8:2e:07:69:18:95:9c:ac:a6:48:03:ac:c9:72:af:
         0d:14:fe:05:a8:0e:54:13:68:0c:68:d4:3c:55:8b:08:5e:37:
         c6:f4:45:6b:73:8a:46:cd:b8:46:6e:af:3b:af:0b:54:13:0d:
         a4:49:cb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:53:21 2026 by rpki-client