Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a8fcf0bd-92ec-3fd7-9fa0-e5b02bbf84a7.roa
File:                     a8fcf0bd-92ec-3fd7-9fa0-e5b02bbf84a7.roa (raw, json)
Hash identifier:          G8593ruCZjjC6/U6aaKlutGwWPSqr2t+lWix3KC/wiU=
Subject key identifier:   E8:D1:9A:12:93:75:F7:AC:4E:73:3E:27:BD:28:B3:72:27:12:6D:50
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584F7E7DBA6DAB7BF237C2B0D500
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a8fcf0bd-92ec-3fd7-9fa0-e5b02bbf84a7.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     13335
IP address blocks:        162.159.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:ba:6d:ab:7b:f2:37:c2:b0:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=99c250b2-29e1-4719-b881-a984895b8200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:47:ce:68:49:40:0f:69:57:08:f9:81:a6:47:
                    82:45:25:f6:53:eb:18:24:73:0f:bb:8c:7a:d6:af:
                    8e:d4:a2:4c:7e:b2:f6:61:dc:d0:e3:1e:fc:0d:2f:
                    d5:a7:4e:93:b9:7b:1a:c9:a2:5b:c9:dc:06:40:dc:
                    bf:fa:74:de:96:d0:2c:ed:ce:85:14:a8:48:9a:97:
                    a1:7f:38:2c:99:18:8f:55:8d:10:a5:42:25:02:58:
                    55:0c:49:c7:3e:73:45:35:3f:f5:7a:36:dc:de:ce:
                    2c:93:f0:6c:b2:f1:b8:ac:b3:64:f1:78:24:48:f4:
                    02:e6:7b:82:24:1c:03:a8:51:8a:8c:ba:52:36:e8:
                    f3:70:1f:a3:ae:f6:c3:05:80:03:a4:c7:8e:2c:e2:
                    30:2c:a8:22:87:6a:50:f1:b0:ed:95:37:08:d1:8b:
                    b4:b6:f1:80:f9:58:15:ce:d0:9f:6a:76:ac:59:ab:
                    3e:d1:39:e4:45:ec:b9:68:05:d7:77:7c:ac:5a:f2:
                    de:6b:4c:9e:95:d6:f5:3b:01:dc:0e:38:1d:9c:b4:
                    08:a3:f6:da:0b:71:65:74:6a:da:ad:16:fb:77:8f:
                    f3:0f:dd:90:d7:50:3a:8e:2d:47:07:1f:dd:69:71:
                    cf:f3:81:31:34:ee:d5:53:07:80:4d:29:3d:b5:bd:
                    45:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D1:9A:12:93:75:F7:AC:4E:73:3E:27:BD:28:B3:72:27:12:6D:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a8fcf0bd-92ec-3fd7-9fa0-e5b02bbf84a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:b6:cb:dd:b0:9a:3e:60:2e:cc:69:05:21:e8:df:52:c4:12:
         8e:c4:b2:c2:fe:8c:65:00:c3:cb:e2:ea:a3:a8:e9:1b:8c:73:
         61:67:42:8d:ff:7f:6a:ed:0d:95:fd:33:83:b0:0b:60:31:f4:
         ac:09:17:34:0b:70:f6:c0:70:27:fb:e9:4b:6c:e1:24:14:7c:
         b5:ac:34:a9:29:60:b6:ba:81:43:ae:e4:b9:a3:f1:76:0c:a7:
         03:05:2b:29:24:a5:96:fc:12:5b:b4:d4:2e:e6:44:2b:d6:2e:
         68:7e:b9:b1:2b:17:25:ae:57:b4:f4:d2:24:40:08:a4:f1:78:
         2c:30:c3:7d:6a:48:59:61:e9:9d:f9:b3:2e:c3:84:37:ed:c2:
         85:7e:09:2f:d8:97:48:f7:7d:5c:f8:f7:2a:07:47:e6:12:58:
         19:60:de:7f:1e:fb:fb:e6:b8:9c:d7:66:15:f7:2c:cd:25:d5:
         6c:9e:71:3f:2d:0d:cc:4d:c5:5c:8b:2e:52:3b:40:f3:7d:1a:
         11:a6:a5:af:9d:f2:c8:28:5e:17:bd:24:7d:79:e4:b9:f2:ad:
         17:f1:9e:72:5b:49:50:cd:e8:61:a6:c7:2f:6d:33:e5:8a:ce:
         ee:2b:ff:a8:e6:5b:f8:d4:4c:3c:ac:b0:c4:60:5b:1f:a8:1a:
         45:93:8b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:14:22 2026 by rpki-client