Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e0e52beb-e7ac-3673-bcd1-175651c0369c.roa
File:                     e0e52beb-e7ac-3673-bcd1-175651c0369c.roa (raw, json)
Hash identifier:          n1SxzTXAcF2pytzc13sURYick5Cb2DWelLhqAP5DXZQ=
Subject key identifier:   71:A5:D4:0A:0A:95:1F:7C:F6:65:2B:C4:D6:58:E0:21:F0:E1:D5:5B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC711018362174CD60B38EF80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e0e52beb-e7ac-3673-bcd1-175651c0369c.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     13335
IP address blocks:        162.158.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:11:01:83:62:17:4c:d6:0b:38:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=b046b86b-ec77-4750-b5a1-ce3eeb628954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:01:5a:4d:eb:1c:01:e5:86:92:fe:ce:46:df:
                    87:6e:48:96:e0:12:cc:9f:aa:4d:2c:51:68:77:12:
                    38:44:05:24:b6:70:2a:19:10:09:88:b0:3f:c9:e3:
                    e0:44:91:ff:3b:60:a8:99:74:1b:9c:94:22:0b:a4:
                    a3:d8:65:88:2f:63:bc:ac:05:94:a1:75:bd:28:aa:
                    f1:67:47:4e:e0:1a:db:08:e9:0e:dd:07:fa:3f:c0:
                    3f:f7:5b:53:7c:e5:8b:17:8a:24:af:dc:36:53:ef:
                    4e:29:37:27:9e:5c:7a:26:46:0d:77:10:71:08:81:
                    fb:4b:26:ee:41:5f:25:23:ca:46:57:4a:82:14:76:
                    17:1f:6b:3c:f4:7d:fd:30:56:0d:e7:c0:25:0c:6c:
                    d6:b8:58:fa:e8:b8:9e:b4:95:94:5b:f1:61:0a:97:
                    9e:06:99:18:3f:87:33:e4:59:a5:78:83:58:2e:2f:
                    5b:be:76:f4:d8:2a:f9:bb:c6:7a:02:16:5f:03:22:
                    34:8b:80:b8:b0:6d:80:50:e4:28:0e:ae:8e:48:c8:
                    f3:c6:4d:be:6e:93:71:0e:84:f9:b9:98:23:71:b3:
                    56:42:68:87:fa:81:e4:1a:a4:ee:e6:bd:79:dc:16:
                    ee:fe:3d:28:e2:45:f8:b1:07:0c:88:83:3c:90:f4:
                    93:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A5:D4:0A:0A:95:1F:7C:F6:65:2B:C4:D6:58:E0:21:F0:E1:D5:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e0e52beb-e7ac-3673-bcd1-175651c0369c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:be:c0:82:32:0c:17:86:27:b6:45:1a:95:63:2b:c4:8d:eb:
         f2:d0:75:0b:68:29:2e:ed:82:84:e7:ab:f2:42:fe:76:a6:6f:
         4c:f6:29:12:77:1f:24:ab:95:e3:9d:73:15:34:7b:79:a3:7c:
         1e:44:84:8d:73:68:19:18:3e:03:b0:a7:9b:82:ad:9c:1c:97:
         c4:03:f0:11:2d:98:28:e4:e7:b6:6a:56:9c:31:6a:80:14:cc:
         fc:a2:c9:50:ff:20:d7:21:75:dd:01:42:6d:0c:35:56:6a:09:
         09:19:78:32:94:d8:e0:71:6a:67:93:b7:81:90:ea:a4:22:fa:
         82:f3:f8:e4:1b:56:ce:c7:46:17:44:6a:85:9f:9f:5f:36:69:
         1c:66:24:e4:63:ae:56:25:e2:e2:ff:63:e5:97:a2:a3:9c:78:
         72:66:33:1a:21:71:4e:fa:09:d4:3e:0d:88:70:a9:d2:71:62:
         83:50:c8:23:30:59:ac:b5:4c:81:40:0f:36:e7:d2:f3:1c:c6:
         87:26:0d:fc:a1:0f:9b:b4:1e:b5:da:4a:b1:c4:fb:0e:57:cb:
         74:aa:d5:44:03:33:56:9b:2c:f9:24:ad:23:52:42:0a:da:34:
         55:c8:d7:01:ef:d4:df:c6:3d:a3:38:8b:46:f5:76:b1:79:a9:
         f1:19:59:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:33:05 2025 by rpki-client