Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00fa07ac-4fcb-39af-8e54-7d48c48dfef0.roa
File:                     00fa07ac-4fcb-39af-8e54-7d48c48dfef0.roa (raw, json)
Hash identifier:          BwPkAbPlfKa0nnMFMGjuiwk6yWoGW6EvAhahrtbBGRw=
Subject key identifier:   3D:57:2B:89:32:91:CA:D1:99:4E:26:A3:09:D8:85:18:4E:51:6A:00
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC5ABA13029353FE2903A0A80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00fa07ac-4fcb-39af-8e54-7d48c48dfef0.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        162.158.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:a1:30:29:35:3f:e2:90:3a:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=316e2b96-d90b-47be-aa4b-1a4756e27bb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:5a:40:a7:73:e5:54:ec:34:4b:8e:50:08:c3:
                    8a:e0:9f:55:00:ae:30:da:5e:ce:3d:10:9b:3c:9a:
                    79:58:51:11:04:dd:e1:b1:27:64:60:50:5e:76:13:
                    32:56:89:94:db:bf:35:91:4b:50:9a:78:24:05:c5:
                    b7:b2:46:05:27:c4:b4:30:44:c5:5e:d9:43:7c:1b:
                    99:fe:45:8d:a8:61:d8:2a:5b:27:37:22:be:ab:0c:
                    ef:69:db:70:48:4a:e1:d7:c6:05:c9:98:e4:27:a6:
                    50:a6:95:3b:9f:54:2f:72:a4:05:69:3c:78:24:4d:
                    29:39:eb:8f:89:09:5e:65:12:b7:bf:56:76:eb:fa:
                    60:df:a8:1e:1d:6e:ff:fc:eb:62:7f:d0:f6:54:56:
                    32:be:f1:24:ed:45:39:f9:b2:41:d0:65:a9:a1:0e:
                    c0:a1:e8:82:86:10:e6:35:22:ee:41:b5:8a:3a:a4:
                    e9:e5:39:53:7f:3a:1f:30:d3:78:26:14:49:52:b4:
                    51:ce:ed:5b:41:60:e5:d9:cd:3d:11:75:e5:b6:c8:
                    02:48:9e:b2:58:ac:8e:cd:c4:27:63:93:15:4f:2b:
                    f2:f2:43:eb:e9:33:4b:1e:11:55:24:aa:af:42:68:
                    6f:ad:83:2d:b1:a4:e0:e0:46:6c:86:1e:b6:57:54:
                    e3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:57:2B:89:32:91:CA:D1:99:4E:26:A3:09:D8:85:18:4E:51:6A:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00fa07ac-4fcb-39af-8e54-7d48c48dfef0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:59:f7:61:1f:82:27:a9:b8:13:f7:ee:d2:dc:a3:60:3d:00:
         e2:e3:9d:5c:19:a1:b7:f6:6b:76:75:1a:6c:5f:a6:ea:20:0f:
         1d:f9:63:a2:d3:b4:2d:51:d8:0d:8e:2c:23:67:93:81:8e:26:
         df:a1:da:c8:2f:37:96:8d:d9:cf:a3:65:55:85:bb:c9:5f:f8:
         b6:db:4d:5a:fb:4d:64:1c:a4:aa:3b:69:59:1a:6e:fb:5c:10:
         4c:32:1f:eb:4a:a0:75:b3:88:eb:2c:69:69:ef:b7:9c:97:e6:
         b6:38:72:83:59:84:f0:eb:1e:76:f3:50:7b:0a:ac:ff:50:05:
         20:b2:ee:0e:cb:3a:87:8d:40:e2:50:14:44:4a:c0:fb:78:57:
         dd:1f:02:1e:d6:75:12:d3:87:47:64:bb:e3:22:04:6c:02:fd:
         2f:f5:4d:42:dc:53:a1:92:f4:a4:8c:2a:ce:28:73:85:6f:2a:
         b7:9a:65:a8:39:55:6b:39:ee:dc:2b:b6:5e:b8:1a:e8:ee:9f:
         93:61:d8:d0:b1:bc:53:e3:f4:39:26:db:36:9f:69:83:57:b0:
         ac:48:05:07:b6:e7:41:12:97:dd:06:38:3a:ba:df:e6:b1:3e:
         50:7b:db:6b:1b:e5:07:2a:05:fe:17:d5:dd:d4:19:92:8f:1b:
         70:d5:bf:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq6EwKTU/4pA6CoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk
MzE2ZTJiOTYtZDkwYi00N2JlLWFhNGItMWE0NzU2ZTI3YmI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9VpAp3PlVOw0S45QCMOK4J9VAK4w2l7OPRCb
PJp5WFERBN3hsSdkYFBedhMyVomU2781kUtQmngkBcW3skYFJ8S0METFXtlDfBuZ
/kWNqGHYKlsnNyK+qwzvadtwSErh18YFyZjkJ6ZQppU7n1QvcqQFaTx4JE0pOeuP
iQleZRK3v1Z26/pg36geHW7//Otif9D2VFYyvvEk7UU5+bJB0GWpoQ7AoeiChhDm
NSLuQbWKOqTp5TlTfzofMNN4JhRJUrRRzu1bQWDl2c09EXXltsgCSJ6yWKyOzcQn
Y5MVTyvy8kPr6TNLHhFVJKqvQmhvrYMtsaTg4EZshh62V1TjmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD1XK4kykcrRmU4mownYhRhOUWoAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDBmYTA3YWMtNGZjYi0z
OWFmLThlNTQtN2Q0OGM0OGRmZWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop4pMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGxZ92EfgiepuBP37tLco2A9AOLjnVwZobf2a3Z1GmxfpuogDx35Y6LT
tC1R2A2OLCNnk4GOJt+h2sgvN5aN2c+jZVWFu8lf+LbbTVr7TWQcpKo7aVkabvtc
EEwyH+tKoHWziOssaWnvt5yX5rY4coNZhPDrHnbzUHsKrP9QBSCy7g7LOoeNQOJQ
FERKwPt4V90fAh7WdRLTh0dku+MiBGwC/S/1TULcU6GS9KSMKs4oc4VvKreaZag5
VWs57twrtl64Gujun5Nh2NCxvFPj9Dkm2zafaYNXsKxIBQe250ESl90GODq63+ax
PlB722sb5QcqBf4X1d3UGZKPG3DVv9I=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:11:36 2025 by rpki-client