Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b4f0dc91-2af4-320c-8c65-a25d373d5b2c.roa
File:                     b4f0dc91-2af4-320c-8c65-a25d373d5b2c.roa (raw, json)
Hash identifier:          q+eKbTTlfgj7PsHVB7yOyOPYrLU7yvlQV7ov3AszywQ=
Subject key identifier:   BA:C4:DF:9E:57:93:B3:79:8F:53:EF:D2:F9:02:5E:CA:42:BC:CA:3D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584DAC45947792403EABEE2CE540
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b4f0dc91-2af4-320c-8c65-a25d373d5b2c.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     13335
IP address blocks:        162.159.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:94:77:92:40:3e:ab:ee:2c:e5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=24a4ed81-29eb-42db-bba1-89dc8d964975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5a:76:56:1e:2b:fe:ac:67:72:a2:7c:2f:c6:
                    5f:70:d0:71:b6:fd:88:1b:76:18:7e:15:39:45:63:
                    c4:6d:df:77:13:57:d1:6f:a2:6b:a3:1e:13:88:32:
                    76:70:e9:b8:33:b6:5f:31:e7:6b:dd:ff:0a:73:6f:
                    e8:a3:ef:11:ec:21:23:4f:cd:ac:4d:ea:32:38:27:
                    bb:80:35:ef:cd:36:b4:24:d9:c7:01:0a:67:fe:2d:
                    61:c6:c5:97:15:ab:a3:c6:a5:41:93:d2:c1:68:8f:
                    90:af:f6:6d:48:93:6d:9c:ed:3e:03:5e:36:ad:c9:
                    40:24:d9:0d:d3:21:6b:71:e9:af:f5:c3:c1:0f:4f:
                    37:9b:1b:28:b9:28:b7:3b:d4:c9:4b:ee:9a:f1:4f:
                    2a:a6:38:05:d2:ac:ab:70:80:29:6b:91:dc:21:30:
                    f3:f6:08:2e:c9:38:6f:0c:cd:de:bd:c1:88:73:63:
                    ef:d2:4d:b1:91:61:c9:08:dd:db:98:6c:1e:63:fa:
                    17:aa:cd:dd:89:0a:14:16:d6:cc:2d:f2:06:18:e7:
                    36:ae:e2:77:9b:8c:a9:73:d8:04:00:39:3c:36:07:
                    e4:b2:f9:3d:c9:9e:a8:4c:8b:27:81:16:74:51:43:
                    ad:6d:ad:dc:55:9b:35:29:6c:0b:24:b1:3b:11:69:
                    c2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C4:DF:9E:57:93:B3:79:8F:53:EF:D2:F9:02:5E:CA:42:BC:CA:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b4f0dc91-2af4-320c-8c65-a25d373d5b2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:ca:38:02:b6:27:b0:ab:0a:b7:ff:72:2a:02:45:84:14:7c:
         e0:9f:90:f8:64:ca:3c:1d:f3:d1:4d:69:17:17:e4:d1:f0:da:
         3e:57:03:b1:c2:20:6e:23:92:c3:e9:3b:43:5d:dc:dc:55:41:
         1f:35:86:76:23:8f:0d:5a:ad:55:64:07:b0:5a:13:4a:fc:15:
         99:4b:88:a5:ef:50:f8:a3:86:3c:65:3b:a4:ba:23:d0:54:3c:
         03:80:8e:e8:8c:e7:23:d8:6f:59:9e:f4:ee:c9:a3:4f:6f:d9:
         1f:78:fa:18:f9:da:1d:37:99:7c:9c:c7:df:e3:47:5c:41:32:
         4f:df:ad:bd:04:59:1d:c8:87:14:a5:2e:2e:5e:05:85:99:fb:
         66:e8:d6:7f:5e:4e:b4:8d:32:31:3e:49:72:fa:06:d4:b1:64:
         9c:6a:bf:11:a5:26:1e:2c:01:f5:a4:4f:b5:3f:dd:4c:12:f4:
         c8:46:c0:f5:28:c6:64:dc:bc:fa:80:5d:e4:dd:88:0f:3f:06:
         90:97:50:79:dc:82:97:a8:17:60:88:0f:3c:10:fe:c6:2c:c2:
         87:da:82:a9:ef:c4:d9:b2:47:e2:67:77:e0:d2:24:b7:2f:03:
         0a:45:96:1d:1d:fc:01:48:81:f1:28:06:75:50:4c:3d:87:78:
         30:3b:6d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:27:10 2026 by rpki-client