Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8676040c-4694-381a-a446-f7656cb4e9b9.roa
File:                     8676040c-4694-381a-a446-f7656cb4e9b9.roa (raw, json)
Hash identifier:          tjcOWcnfVYpPkEnM4dmWCx4nvcEnaY3j14OtpO0fIRo=
Subject key identifier:   3D:E1:0C:9D:78:A4:91:E3:8B:9F:4B:AD:A1:F3:A5:C6:54:BE:56:57
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E4AEF5858BEBF099431406B80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8676040c-4694-381a-a446-f7656cb4e9b9.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        162.159.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:58:58:be:bf:09:94:31:40:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=5d0b3bdb-54c3-42e8-a5d8-2469df25e21c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9e:25:d4:6e:5d:a1:1b:35:9b:04:74:61:a6:
                    b6:98:f4:4f:75:7e:b4:7c:6d:69:d7:f5:83:76:30:
                    8f:29:a1:bb:39:88:67:e2:34:b2:05:05:12:d4:83:
                    65:d0:f3:c3:a2:08:48:1f:f4:c2:8b:cd:28:ad:58:
                    31:81:ea:53:24:26:12:f0:ea:53:24:20:8b:d3:ff:
                    da:ce:91:b0:be:36:05:36:6f:c6:3a:df:f0:c3:29:
                    67:4c:1b:f0:3d:b5:67:3e:f5:ec:f2:06:cc:9c:26:
                    cd:c3:7d:46:98:62:02:60:7e:fb:90:87:75:bb:de:
                    54:c6:4f:de:a4:2e:9b:84:78:3b:52:aa:97:9e:05:
                    24:5d:84:cc:e3:a0:1b:5a:eb:76:6c:d9:d4:1f:fc:
                    a7:6f:0e:7e:86:e3:48:e4:69:75:5e:aa:4a:ae:cc:
                    57:92:0b:e6:01:0a:13:18:dc:23:43:be:ce:be:6c:
                    2c:99:f8:2f:2c:76:de:16:42:d7:0b:03:b1:23:12:
                    a4:9a:02:7b:58:b3:e2:65:75:70:a0:26:20:cd:22:
                    26:3c:50:80:c1:65:f5:b9:3c:52:23:f3:ad:46:16:
                    de:65:93:96:06:bb:ec:65:3e:50:31:61:a4:66:07:
                    f5:01:cb:95:5d:fd:3f:e6:f0:2e:d1:10:a2:4a:49:
                    d1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E1:0C:9D:78:A4:91:E3:8B:9F:4B:AD:A1:F3:A5:C6:54:BE:56:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8676040c-4694-381a-a446-f7656cb4e9b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:d9:79:1d:f7:b2:26:06:ce:60:5e:3f:99:25:e4:38:6f:02:
         f6:4c:2d:a0:5c:f2:28:28:6a:3e:1f:3e:3c:73:32:fb:d2:6e:
         53:d1:56:53:c2:3b:5a:e9:bd:f5:fd:47:4a:aa:bc:bd:32:73:
         6d:14:9b:49:b9:42:7b:fd:ee:d5:05:48:b5:b0:09:4f:cb:11:
         9b:ed:bb:e9:21:37:d3:7a:f0:f5:35:a6:51:a3:32:aa:47:27:
         a6:bc:f6:af:ad:d1:52:ce:48:35:1d:20:37:57:38:de:28:84:
         4e:6c:69:ff:01:fd:80:59:bd:0e:f7:d5:e4:ac:24:fc:20:e5:
         bd:66:2a:e1:92:af:98:81:66:51:19:3b:92:b8:92:cc:43:8e:
         b7:c8:e2:26:78:35:39:5c:d4:56:d6:80:d4:9f:bc:e0:b4:fb:
         14:03:19:ee:8e:ba:21:14:b1:39:4d:7b:28:13:4f:8f:65:e6:
         4a:0c:2f:60:ed:39:f3:03:d0:ac:d6:ce:f5:4c:0c:e8:68:9a:
         8b:55:72:84:81:37:43:0d:68:a2:43:1a:46:70:4a:12:6d:b7:
         20:40:d0:08:c4:7e:30:a4:25:2a:37:9e:fe:53:29:b2:5c:fb:
         ba:e3:b0:62:42:da:58:f1:2f:b5:92:6c:5e:66:f9:7b:24:df:
         5a:46:6a:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K71hYvr8JlDFAa4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk
NWQwYjNiZGItNTRjMy00MmU4LWE1ZDgtMjQ2OWRmMjVlMjFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZ4l1G5doRs1mwR0Yaa2mPRPdX60fG1p1/WD
djCPKaG7OYhn4jSyBQUS1INl0PPDoghIH/TCi80orVgxgepTJCYS8OpTJCCL0//a
zpGwvjYFNm/GOt/wwylnTBvwPbVnPvXs8gbMnCbNw31GmGICYH77kId1u95Uxk/e
pC6bhHg7UqqXngUkXYTM46AbWut2bNnUH/ynbw5+huNI5Gl1XqpKrsxXkgvmAQoT
GNwjQ77OvmwsmfgvLHbeFkLXCwOxIxKkmgJ7WLPiZXVwoCYgzSImPFCAwWX1uTxS
I/OtRhbeZZOWBrvsZT5QMWGkZgf1AcuVXf0/5vAu0RCiSknRfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD3hDJ14pJHji59LraHzpcZUvlZXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODY3NjA0MGMtNDY5NC0z
ODFhLWE0NDYtZjc2NTZjYjRlOWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop9RMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL/ZeR33siYGzmBeP5kl5DhvAvZMLaBc8igoaj4fPjxzMvvSblPRVlPC
O1rpvfX9R0qqvL0yc20Um0m5Qnv97tUFSLWwCU/LEZvtu+khN9N68PU1plGjMqpH
J6a89q+t0VLOSDUdIDdXON4ohE5saf8B/YBZvQ731eSsJPwg5b1mKuGSr5iBZlEZ
O5K4ksxDjrfI4iZ4NTlc1FbWgNSfvOC0+xQDGe6OuiEUsTlNeygTT49l5koML2Dt
OfMD0KzWzvVMDOhomotVcoSBN0MNaKJDGkZwShJttyBA0AjEfjCkJSo3nv5TKbJc
+7rjsGJC2ljxL7WSbF5m+Xsk31pGauM=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:04:36 2026 by rpki-client