Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3accd74f-0d9c-36f3-8fb1-74227a6ced2a.roa
File:                     3accd74f-0d9c-36f3-8fb1-74227a6ced2a.roa (raw, json)
Hash identifier:          KO64cCcz+EuI0fqpMHQU01C7A66oEZIVyyKD67Or5SE=
Subject key identifier:   21:D2:36:04:12:00:71:A3:9B:77:06:B8:D8:CA:55:1F:EF:DB:74:8E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC7110D041264E24B78D2B7E0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3accd74f-0d9c-36f3-8fb1-74227a6ced2a.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     13335
IP address blocks:        162.158.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:11:0d:04:12:64:e2:4b:78:d2:b7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=0016cccd-4e63-4b0a-b2a2-d09f74a6c52e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ed:28:f2:cc:31:5f:35:6a:df:98:eb:bb:04:
                    7d:e3:cc:4c:1a:45:b4:ba:45:4c:0d:8a:fb:d3:10:
                    4f:bf:04:af:42:ae:85:45:ca:1f:6f:3d:fb:ab:36:
                    54:62:4d:c0:d2:3b:77:97:d7:50:d2:11:9f:f1:60:
                    83:61:fa:a1:a9:3a:40:c6:0c:99:22:f9:c6:41:38:
                    c3:34:cb:f3:d7:b0:eb:29:be:0d:68:b7:05:9a:fb:
                    35:3e:5d:9c:e5:ce:8f:43:75:d8:9d:14:e9:c7:4d:
                    fb:f6:41:6f:73:90:98:59:fb:d3:f3:32:d8:eb:08:
                    8a:2f:04:5c:5c:ec:5a:ac:fd:46:24:97:ad:6c:b7:
                    b3:65:0c:83:43:a2:00:e3:57:21:68:53:61:13:e5:
                    5c:a2:97:09:17:e5:d8:31:f6:ae:05:14:3e:c2:cd:
                    55:24:22:82:8a:f0:2a:72:a1:09:e7:dc:80:fb:ab:
                    35:d3:1c:27:1d:36:ed:ab:f0:6d:06:f4:c0:84:d7:
                    47:8a:e0:20:06:ec:56:15:5c:bf:64:b4:3a:fd:32:
                    fe:06:b0:23:81:6c:ca:14:97:c3:05:ff:a7:d7:e5:
                    ae:f4:23:33:e6:f4:6b:08:c4:dc:f0:41:80:02:86:
                    7c:92:ce:0a:f9:31:91:f4:12:90:39:9c:18:06:3f:
                    4d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D2:36:04:12:00:71:A3:9B:77:06:B8:D8:CA:55:1F:EF:DB:74:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3accd74f-0d9c-36f3-8fb1-74227a6ced2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:6c:70:f5:8f:8b:37:29:9c:e1:2c:3a:67:68:30:a7:a1:0f:
         98:85:f8:71:bd:86:75:cf:7c:99:95:13:87:f2:95:67:6b:af:
         a2:0d:2a:53:65:12:68:ae:45:25:5c:49:e5:84:d9:14:c9:8d:
         5b:a9:c7:45:77:dd:fc:13:5a:c2:31:bf:0b:b0:ba:78:cc:f8:
         6d:2e:ef:f4:42:39:e1:91:80:8e:f7:27:b4:5a:cc:80:2a:e0:
         02:00:7a:e2:4f:31:73:30:f0:9b:08:48:13:59:6f:c6:31:2a:
         6a:5c:af:08:94:a9:69:36:d9:76:36:76:9e:b7:42:a4:ed:b8:
         c0:92:b0:72:f4:c8:74:db:a2:6d:9e:b5:3c:5d:09:02:2c:97:
         08:15:14:5c:7c:30:b9:f6:3a:3d:72:1f:42:57:ed:ba:59:c3:
         5b:f3:57:33:6e:cc:7e:5c:ff:d6:e2:3d:f3:f9:46:c4:45:20:
         63:ee:e7:62:e4:c3:25:ee:91:95:22:2d:85:21:3d:04:80:f0:
         e2:64:7e:a7:2e:f2:d1:85:f4:dd:b7:ec:46:8d:fc:15:fe:d7:
         77:47:5a:83:00:2c:4f:7a:c1:d8:74:5d:e8:42:ac:4b:45:c7:
         41:1a:6e:ee:1b:3b:c4:b4:da:60:c0:f2:14:15:b3:dc:79:01:
         7a:39:02:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:52:40 2025 by rpki-client