Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/29252ba4-4cad-3f90-8c63-d9c6af421df1.roa
File:                     29252ba4-4cad-3f90-8c63-d9c6af421df1.roa (raw, json)
Hash identifier:          HjPcpDv/COV5Gh80yoQQCbCnvjTJzwhw5ukswF0T4Ec=
Subject key identifier:   47:30:41:3B:00:95:2A:CA:CF:F8:63:DC:CB:95:80:CB:AB:AC:E2:25
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BA7CD0785AA1C113D736C2980
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/29252ba4-4cad-3f90-8c63-d9c6af421df1.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     13335
IP address blocks:        162.158.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cd:07:85:aa:1c:11:3d:73:6c:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=8ab8baff-0e3c-4d92-a768-a6e1e53090b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c4:3a:a2:c8:08:ce:89:79:93:d6:01:15:59:
                    60:36:32:d1:95:52:b8:58:b5:5a:94:a4:32:37:64:
                    d5:a3:5a:76:cc:f5:27:4a:3f:48:02:e2:12:85:04:
                    68:62:89:c4:88:8c:c7:a9:00:e7:34:19:1e:3a:bd:
                    ec:15:b7:0e:7f:0c:89:e4:31:63:44:c1:08:e1:17:
                    ea:22:8b:11:ad:48:93:82:68:92:68:5e:fc:1e:c1:
                    8a:79:1b:b6:f4:90:cb:48:05:14:42:03:59:ab:ad:
                    97:eb:e5:52:a6:6c:d1:18:fd:0f:ec:59:4b:57:67:
                    ee:10:ef:6b:91:1a:8b:a3:f0:96:33:1e:be:3b:c9:
                    bc:bd:03:f5:97:38:0c:7b:ff:c6:c3:3e:36:5e:e5:
                    9b:8e:35:99:e7:af:d7:34:ca:22:7f:f5:d3:86:15:
                    40:ea:7c:0d:ab:5f:7a:88:77:02:fa:84:7b:fd:23:
                    c6:64:a9:f6:44:c2:f7:75:35:c2:f8:14:de:fa:ec:
                    38:cb:95:6f:37:5c:ee:71:9e:46:9a:13:54:2e:87:
                    5b:a5:16:d9:84:94:2a:74:30:80:f6:aa:d7:58:0e:
                    d2:1b:fa:39:82:5a:64:72:15:14:0e:b4:27:d5:ad:
                    d6:84:b1:73:c5:f5:f6:aa:95:ba:57:8d:e3:c8:84:
                    49:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:30:41:3B:00:95:2A:CA:CF:F8:63:DC:CB:95:80:CB:AB:AC:E2:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/29252ba4-4cad-3f90-8c63-d9c6af421df1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:05:f6:d6:3e:96:fb:10:86:b9:99:33:2f:c8:dc:4c:96:35:
         81:a5:b5:47:53:c9:61:4f:00:95:be:3f:f5:29:af:24:e5:87:
         9b:f8:19:02:53:0c:fe:be:af:83:c6:0d:db:8a:fb:dc:b5:78:
         9b:c0:9f:1e:4b:7f:9b:83:2b:43:5d:6b:49:af:aa:49:9d:46:
         34:47:3c:2f:a4:4b:12:a1:f8:36:75:6b:c4:98:33:ef:52:66:
         0f:34:9c:c5:04:cb:6b:cc:72:07:37:dd:08:15:c4:c3:93:ff:
         65:2a:6c:c5:ab:ab:93:20:ce:64:e4:6f:ef:e4:3b:20:7f:9c:
         ab:ce:cd:a1:17:8d:46:25:f4:79:53:16:99:d3:24:ab:a2:d4:
         7e:88:7e:c1:ca:e9:76:d7:a7:aa:02:5e:26:1f:07:90:c8:2f:
         d2:41:62:77:dc:4e:19:99:06:39:76:06:d9:60:5c:30:60:21:
         a2:3c:b3:5f:ac:10:0b:64:e9:cd:d7:6f:dd:d6:c3:e9:8a:93:
         9e:a0:65:ae:f7:b6:03:f0:c4:c2:8d:36:05:e4:06:0f:70:28:
         23:92:a2:1b:8a:e3:eb:02:a0:eb:c4:52:97:4b:fb:f3:6a:c6:
         76:52:17:30:b2:06:3f:7e:c4:9c:26:33:90:d6:a3:56:ee:c0:
         91:42:23:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 12:30:39 2025 by rpki-client