Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2bfc4e39-8bfb-3563-a5d4-d48194d274ec.roa
File:                     2bfc4e39-8bfb-3563-a5d4-d48194d274ec.roa (raw, json)
Hash identifier:          id72mflVM1AXSOkPbzTAG7sfNXTyYPQT1hGU3y0QSys=
Subject key identifier:   C5:4B:7E:FB:F1:FD:52:00:58:1C:03:FA:A6:4B:8A:BB:67:7E:CD:2E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E4AEF58B79745B0FCBCC02800
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2bfc4e39-8bfb-3563-a5d4-d48194d274ec.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        162.159.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:58:b7:97:45:b0:fc:bc:c0:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=6318872c-1cd6-48eb-b117-664a841a4618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a2:57:c4:06:e6:dd:ca:c6:e6:f3:68:bf:1f:
                    ee:73:cc:60:e3:e4:cb:69:33:04:f1:c8:16:c0:34:
                    44:29:fa:f2:b5:2c:2b:2f:3d:01:d8:37:92:43:09:
                    67:a0:d5:c8:8f:dd:bb:55:9c:48:97:40:3d:72:3c:
                    4c:d7:2b:36:9c:b9:8f:e2:e5:3f:3a:6e:7a:d6:fe:
                    35:58:92:39:a8:ff:79:55:96:6c:a4:77:79:dd:fc:
                    55:07:6c:10:73:7a:c9:6f:27:70:87:3c:8d:cf:75:
                    d1:e9:e6:a4:75:29:85:f9:e1:7f:ee:22:f5:cd:df:
                    14:c3:30:50:d2:76:95:ed:e4:e6:a8:e3:f4:32:cc:
                    cf:32:10:02:59:3f:22:2a:2c:a9:c1:62:bf:82:6d:
                    4f:42:b8:b6:05:1b:48:73:d5:f0:fc:da:30:f5:b5:
                    df:ea:a6:44:e1:ce:cb:31:dd:9b:b2:c4:f8:5b:54:
                    b4:55:8a:ba:0f:6e:5a:16:91:1f:2d:c4:77:8b:f9:
                    3d:cb:0f:00:b2:b3:ac:eb:1c:70:ea:8d:97:dd:a8:
                    10:6f:26:42:b4:0a:17:53:c0:7a:05:26:c4:cb:64:
                    27:a1:fe:61:10:85:66:6a:d8:51:6f:32:eb:b5:02:
                    57:ba:dd:66:cb:8c:11:8b:ab:ca:9c:f2:a6:c4:74:
                    21:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:4B:7E:FB:F1:FD:52:00:58:1C:03:FA:A6:4B:8A:BB:67:7E:CD:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2bfc4e39-8bfb-3563-a5d4-d48194d274ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:fd:4c:53:4e:12:c0:30:30:fd:c7:4c:ff:16:c2:c7:c3:56:
         6c:e2:d4:e7:a7:da:61:ba:fd:8c:d0:09:58:36:1a:d2:c0:41:
         e5:58:dc:bc:1e:50:ae:df:f3:50:31:25:e6:a2:47:fe:1b:b8:
         5e:93:fd:db:f3:aa:44:af:bb:9b:6e:e3:c9:f3:09:96:f1:b7:
         7d:06:a6:6d:bc:19:c1:74:00:64:d9:01:c5:a4:c5:59:17:67:
         a0:12:a2:1c:91:6e:cc:71:dd:e2:eb:e4:41:af:4f:8e:27:b6:
         d8:5f:0e:79:e8:7d:4a:a1:ba:57:30:3a:10:82:d2:7c:4d:fc:
         f9:79:f4:91:a6:e7:de:c8:41:a0:bd:52:12:23:02:f4:03:f7:
         2a:3f:c0:a7:3f:65:63:2e:44:f9:aa:69:cd:ab:23:4f:25:43:
         a4:51:1c:fc:d5:19:d6:a7:e5:4d:54:b1:dd:da:3b:0a:2b:55:
         f3:1a:29:3a:44:53:31:3a:53:aa:f2:ef:77:81:3f:8a:82:96:
         a7:f5:df:28:7e:f9:95:a9:f5:60:03:a7:cd:e8:e6:f6:16:54:
         98:a5:74:a7:87:2a:c1:b2:ba:98:c4:84:f8:b6:d4:ee:ee:ea:
         bc:fb:9a:7b:c1:f5:ae:c4:3d:92:2d:ad:34:0f:1f:3d:58:b9:
         44:1b:4f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:20:50 2026 by rpki-client