Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/03dd40b5-db7e-3a02-aea3-fe9c14742319.roa
File:                     03dd40b5-db7e-3a02-aea3-fe9c14742319.roa (raw, json)
Hash identifier:          IgBeIvMQPf/JQaIX7QXB6CzuCz6gBmgRGZwM4QZoQP4=
Subject key identifier:   C2:4B:3A:8D:B2:75:2F:3D:C5:B4:38:E9:7F:EF:01:CA:C8:51:45:E7
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC71118EC4C03E3A6318E38A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/03dd40b5-db7e-3a02-aea3-fe9c14742319.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     13335
IP address blocks:        108.162.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:11:18:ec:4c:03:e3:a6:31:8e:38:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=39401bb9-cd5a-4198-a926-4cae30d91218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f6:1f:2c:41:3d:18:ad:bd:1b:80:73:bf:e4:
                    50:cd:d4:a5:28:cb:8e:8c:06:e7:62:7b:eb:42:a9:
                    24:df:5b:e4:18:ae:80:41:69:e0:4e:19:48:a5:52:
                    49:21:db:0f:46:8a:ef:94:2e:95:6b:9c:85:78:5f:
                    bc:3b:c7:f6:e1:83:fd:6f:56:a1:9a:03:2e:af:e2:
                    2b:ce:70:6f:75:ab:43:22:bf:bc:ea:b4:e8:a2:a3:
                    33:10:28:36:bc:d5:a2:5d:eb:82:c5:2a:45:37:6b:
                    4f:d0:ef:44:d6:a6:ae:b5:0e:d7:95:46:8e:32:cd:
                    66:c8:7d:90:77:0e:fa:e8:ac:36:33:fc:7b:7a:7a:
                    3b:ac:07:76:52:ca:03:9d:55:96:0a:3b:d7:92:64:
                    ed:9e:52:9d:5b:e5:59:51:a8:88:fa:d5:37:58:12:
                    90:82:dc:98:1c:e5:9a:8b:80:24:2d:b6:a1:e9:2a:
                    a4:b2:fa:7b:64:5d:04:b3:9a:21:e5:d4:dd:cf:fe:
                    b9:a7:81:fa:d0:4d:a6:11:1d:49:79:cc:0c:2e:fb:
                    47:8a:86:1d:ce:b1:87:f5:12:24:d0:95:e2:1c:50:
                    45:c5:bf:b8:c8:dd:91:f5:46:af:d7:82:e2:d3:03:
                    6f:d3:2f:3a:19:45:03:11:f7:aa:dd:a5:98:3f:66:
                    b6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4B:3A:8D:B2:75:2F:3D:C5:B4:38:E9:7F:EF:01:CA:C8:51:45:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/03dd40b5-db7e-3a02-aea3-fe9c14742319.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.162.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:41:71:04:45:53:ae:5e:c3:c6:dc:d8:8a:c2:30:80:14:69:
         ab:f3:9f:aa:9f:7d:98:f1:08:2c:73:88:d4:18:66:8d:c1:72:
         ef:3e:4b:21:c3:4e:de:7e:a9:56:28:ed:14:86:aa:ba:1c:88:
         90:da:6a:40:81:f2:34:04:0f:e3:b8:11:fe:f6:8d:2d:c3:ef:
         40:cb:b4:8b:4f:7a:4c:1d:78:3c:b1:d7:5a:f2:eb:50:87:19:
         00:d1:4a:b6:40:ce:06:1e:dc:27:3b:61:67:30:45:10:cd:a8:
         08:69:ed:2c:00:de:a2:87:4e:ea:7b:90:2b:3c:06:5c:1c:54:
         a6:34:5b:6f:e5:e9:c1:af:c2:0a:fe:54:2b:37:0b:07:ea:04:
         71:d5:f6:c7:a8:4a:0d:3e:2d:9e:1e:1f:dd:f3:30:bf:85:77:
         10:97:13:8d:b4:76:0a:2c:e4:30:08:32:cd:2b:55:3a:4a:dd:
         ae:8e:ae:aa:ce:1c:9e:55:b1:18:d7:22:b1:db:b6:9b:a6:1b:
         5a:96:f6:13:1c:a3:aa:a0:9a:91:70:a5:f7:0d:6b:30:94:a3:
         df:2e:6c:40:4b:2b:0d:5d:79:1a:bd:79:3c:0d:a2:a0:4e:14:
         0c:89:31:cb:26:35:82:7c:c5:43:df:c2:fc:9c:4e:6a:c5:ce:
         78:ba:86:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:53:45 2025 by rpki-client