Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eae72766-5033-3973-b18c-4680c96eadd7.roa
File:                     eae72766-5033-3973-b18c-4680c96eadd7.roa (raw, json)
Hash identifier:          pVkO4pCuD/m/N8DcPUZK+UU+EV2HQkBU0y4KfVKP8ns=
Subject key identifier:   72:E6:F6:FF:3C:10:BB:37:11:39:97:3C:5B:0A:00:1C:51:B7:9D:58
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC87672AB43274B596A99DC80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eae72766-5033-3973-b18c-4680c96eadd7.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        162.159.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:72:ab:43:27:4b:59:6a:99:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=8a4c4759-65b6-4999-a7c8-2497e84c7b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6c:4d:e8:d9:aa:c1:61:08:05:fe:ca:a7:4f:
                    6d:7c:93:29:33:89:3f:11:bb:6b:81:aa:db:ef:9f:
                    79:f8:04:aa:f2:11:0a:d5:d9:61:4d:c9:4a:22:89:
                    85:84:6c:8e:62:c0:33:a4:18:ba:83:41:33:dd:8c:
                    e5:d9:e4:9a:b6:6e:1d:d9:67:8e:0c:2d:6d:0a:6b:
                    06:9f:fe:11:19:b5:d1:a7:fe:8c:7d:09:30:df:31:
                    12:0e:1e:d6:21:93:60:b6:72:9b:40:4d:3a:9f:4c:
                    27:94:fe:05:96:4e:84:80:b9:84:35:72:b5:16:62:
                    dd:0d:40:51:fb:c6:6d:0f:92:99:1f:56:16:0f:9e:
                    09:03:42:7a:35:16:25:25:8b:25:f9:b2:03:47:de:
                    d5:e5:4b:83:fd:16:d6:30:bc:1b:12:b1:e4:45:9c:
                    80:e0:0b:46:a3:9c:93:3d:cd:5c:f6:06:46:d4:00:
                    fd:10:9c:71:6c:eb:96:9a:40:10:50:45:01:49:10:
                    c7:e9:b1:25:78:74:50:65:1a:6e:92:ed:21:8e:c8:
                    b7:c9:7d:a0:cc:84:eb:ce:4c:e6:34:e0:2c:fd:f7:
                    00:1b:f4:5a:54:64:59:92:c6:66:b3:22:97:9c:28:
                    e2:c6:01:7f:72:da:5e:50:39:7e:50:a3:b4:34:f3:
                    d0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E6:F6:FF:3C:10:BB:37:11:39:97:3C:5B:0A:00:1C:51:B7:9D:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eae72766-5033-3973-b18c-4680c96eadd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:eb:3e:5b:52:5f:46:ff:69:b4:c0:9c:18:7c:ea:eb:9d:dd:
         8a:44:8d:48:e8:f8:ca:8e:a4:ad:3c:24:67:1f:b2:40:0a:44:
         72:46:73:30:16:3e:b6:65:d4:69:30:eb:05:96:e1:aa:34:43:
         49:1d:34:a8:72:64:05:cc:a9:b8:2c:4a:6c:e9:22:58:2b:5c:
         f8:66:23:9e:06:a8:bc:03:31:cf:21:c9:67:07:ba:ee:af:a6:
         22:24:94:6d:90:0c:77:e7:8b:e1:7d:18:5e:86:6a:4a:07:39:
         02:1d:1a:b9:15:6c:d6:99:e3:48:12:b3:ee:6b:1f:84:f0:30:
         20:5a:00:e2:03:44:b9:1e:5f:7c:16:29:a4:b1:17:ee:11:28:
         d8:2b:6b:04:3a:2f:bc:6f:8c:4d:41:44:93:c8:a6:ea:52:8d:
         eb:e6:26:ca:86:25:39:64:37:67:b4:db:f8:74:2d:3e:cb:58:
         a3:47:3a:3e:00:d9:1e:a4:87:87:68:3e:d5:22:6d:8b:31:58:
         78:15:57:f1:7d:f8:45:5e:13:a7:d8:aa:1b:07:78:86:08:05:
         b6:03:0f:97:a4:45:d5:fb:ee:cd:7d:bc:7f:f6:70:25:a0:45:
         cf:0d:37:64:04:53:75:00:d8:6b:41:86:9f:80:e7:ce:3e:c7:
         55:88:77:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:12:01 2025 by rpki-client