Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49c0ac3a-99f4-31f9-a836-3bbab206f572.roa
File:                     49c0ac3a-99f4-31f9-a836-3bbab206f572.roa (raw, json)
Hash identifier:          PTAte3s04fRb7BcGOfZ42EnHXB7+SfZ6vQChV8JvNnM=
Subject key identifier:   12:68:C3:E1:10:D4:EA:1E:C7:71:55:6E:E7:71:CD:29:1F:7B:CF:00
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BA93287D440A368FA3F7D4480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49c0ac3a-99f4-31f9-a836-3bbab206f572.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     13335
IP address blocks:        162.158.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:87:d4:40:a3:68:fa:3f:7d:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=3123246e-594b-4040-8055-53dd167e9e2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ef:83:65:6d:53:61:bd:a1:94:1c:fc:d2:63:
                    ae:91:c3:e7:20:f1:ae:94:0c:74:9d:f3:26:0d:6c:
                    c6:ae:0e:2f:cc:48:f3:96:76:aa:0b:8b:ac:1d:de:
                    cf:10:86:18:1c:d2:65:57:5c:51:e9:6f:26:1a:ee:
                    fe:02:85:7d:1b:25:49:52:4c:f9:6f:6b:c2:91:7b:
                    c1:4a:a8:f0:45:53:54:b0:f9:ec:6b:aa:22:35:d9:
                    9e:6a:c9:e0:ca:d5:7f:f7:d7:01:05:03:48:8e:d3:
                    fb:07:b6:d9:48:10:a7:59:57:ac:8d:9e:d6:90:8d:
                    72:69:26:7a:11:43:02:aa:b4:16:12:fe:9c:62:97:
                    db:db:d3:55:6a:35:e9:9f:bc:fb:5b:40:82:7b:b1:
                    4c:08:31:f8:a9:60:25:48:1a:4c:24:58:c8:ed:9b:
                    06:3c:83:7d:29:fa:1b:e0:0a:f8:11:ca:6c:b6:0a:
                    5f:08:41:c6:d9:2f:84:6e:77:5e:ae:da:d2:53:1d:
                    c5:8d:b5:70:89:c9:42:97:cf:b5:5b:e8:19:ad:df:
                    c5:e6:c9:c5:0a:0f:05:30:bc:ae:e4:1d:a2:36:21:
                    4f:52:e4:d9:ee:4c:9c:ac:2f:b4:c0:1d:f2:9d:96:
                    98:8b:41:10:d2:c3:66:c4:af:01:c9:3d:55:a1:b0:
                    1e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:68:C3:E1:10:D4:EA:1E:C7:71:55:6E:E7:71:CD:29:1F:7B:CF:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49c0ac3a-99f4-31f9-a836-3bbab206f572.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:ad:6c:0c:e2:8c:68:3e:31:52:6d:db:ed:28:63:f0:b6:b6:
         e6:72:ba:ad:f7:94:f0:b6:e4:ad:7b:80:cd:2d:b0:37:5c:fd:
         74:ca:50:98:c4:ff:2c:e0:3d:0b:00:c8:ce:56:d2:02:ea:34:
         5b:35:35:b1:79:e1:e9:81:e4:90:7b:45:b6:e8:74:fb:67:77:
         13:5d:02:8c:5f:ef:a1:c4:28:b9:ca:53:c7:f5:81:a7:a0:f5:
         94:f6:c3:5c:ce:d6:22:26:73:0b:8b:c2:ec:44:1e:77:b2:45:
         d0:48:16:26:27:bc:68:27:b8:05:f3:c6:bf:00:a0:df:bc:eb:
         eb:47:d1:92:0f:c1:0c:0d:6b:f7:66:5b:64:45:a6:fd:03:d0:
         39:7e:11:cc:48:0a:0d:26:6d:d5:67:e6:96:57:2a:c6:94:14:
         40:eb:36:5f:9e:63:d1:f4:6b:91:02:b8:22:05:96:5c:b0:ea:
         69:c6:f5:f8:6a:7b:45:2f:58:c9:d5:ab:39:e7:92:96:5a:73:
         79:cc:36:05:d8:97:a3:ea:e2:68:c5:e6:90:5a:75:6b:08:91:
         3e:92:58:ef:ce:7c:82:f9:1f:97:8c:47:42:8a:b5:b3:41:2c:
         38:cf:f1:c4:8c:21:a5:56:e0:38:65:fb:49:a6:ab:77:66:b1:
         6b:4a:5e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 15:23:39 2025 by rpki-client