Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4b64bea7-db39-30eb-b714-064408c0fbf9.roa
File:                     4b64bea7-db39-30eb-b714-064408c0fbf9.roa (raw, json)
Hash identifier:          gBsBN32AhOnxMTJneRkv0AbHq03TmFrJzLOmqxGfaQs=
Subject key identifier:   FA:A2:89:11:D5:5B:85:89:9E:21:84:9B:3F:F2:C3:E1:78:C3:54:2F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EED5226EBB4591210F5DBDC00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4b64bea7-db39-30eb-b714-064408c0fbf9.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        162.158.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:26:eb:b4:59:12:10:f5:db:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=94e42dfb-39e3-408d-9b24-6310a96354f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2a:d6:9c:f2:bb:fb:5d:60:5a:f1:6f:3b:1b:
                    78:7f:60:00:3e:09:58:b7:59:c1:03:43:64:a1:77:
                    9b:fc:a2:c9:5f:fe:22:f1:28:cc:e1:5a:5b:ad:61:
                    3c:04:db:7a:64:b8:99:51:86:fd:b1:86:93:9c:9f:
                    3b:be:c6:66:03:12:22:fa:59:79:a5:cf:b9:f7:68:
                    df:bd:12:5b:fe:5a:a3:a4:7d:19:9d:ba:f0:a0:15:
                    45:c5:01:75:b0:ba:d2:6c:6e:8a:f7:48:d3:61:3f:
                    15:04:02:d1:78:a4:01:da:fe:3a:17:57:b1:83:2a:
                    61:8b:98:53:a1:f2:fa:74:5e:b9:9f:09:2a:f6:49:
                    bd:72:a6:15:e9:13:15:1f:80:98:40:3c:14:ed:60:
                    7b:64:14:26:a8:37:74:45:64:88:aa:89:a3:7e:4b:
                    a3:0c:f7:38:67:40:e8:7f:73:f5:c1:f2:9d:65:b7:
                    61:10:b4:b2:78:3b:9f:58:98:e7:b7:7b:92:86:40:
                    57:46:8b:ef:14:0c:18:b2:b0:87:93:b1:bc:3c:1f:
                    78:ae:46:5b:47:99:61:31:fb:85:31:57:aa:3c:de:
                    7d:d5:c3:33:68:49:fe:0b:87:f8:2d:81:c0:b7:98:
                    43:bb:31:b3:65:c5:bb:ea:7e:f5:f8:4b:9f:db:d6:
                    d7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A2:89:11:D5:5B:85:89:9E:21:84:9B:3F:F2:C3:E1:78:C3:54:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4b64bea7-db39-30eb-b714-064408c0fbf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:d0:d5:97:15:3a:93:9c:92:8b:bc:61:ec:d1:3a:f5:13:bf:
         8b:b6:ec:50:44:7e:3e:1e:98:6a:0a:ee:86:37:a6:3f:d4:aa:
         8f:c1:71:6f:23:ad:15:40:7e:86:c8:63:63:19:95:7a:5f:1d:
         60:59:e3:77:0b:66:0f:7e:6b:9f:69:dc:b3:f2:ac:87:93:17:
         16:72:09:bf:e4:3f:29:b9:73:11:ba:49:c5:db:a6:8b:e7:fd:
         13:92:6c:3e:42:7f:b5:5d:2d:43:a6:bb:25:8d:14:04:ee:67:
         38:51:e9:56:36:38:e3:86:ac:03:3d:06:01:ea:4f:d1:1b:a5:
         fe:11:b6:25:d3:f2:84:aa:cc:f2:6a:c0:70:02:0d:8a:51:92:
         60:0d:5c:84:cd:cc:03:ba:91:68:d2:3f:2c:2a:75:32:9f:09:
         71:f1:e3:74:a9:39:c5:29:72:90:65:9e:2a:84:05:07:01:14:
         f5:85:3a:37:5a:93:e8:66:a8:f7:41:bf:63:4f:f9:52:a1:fd:
         84:c2:2d:3f:ff:2b:f5:3b:42:9f:65:78:59:06:19:35:c4:c2:
         fc:cd:13:73:f0:26:8b:7e:97:cc:b2:3b:31:0a:24:b3:73:d0:
         08:09:60:14:e4:49:a9:09:a6:d4:a8:34:5a:f4:cb:09:9f:49:
         c3:08:70:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:12:44 2026 by rpki-client