Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/567f2d94-6b4f-306b-aec2-27343ea9093c.roa
File:                     567f2d94-6b4f-306b-aec2-27343ea9093c.roa (raw, json)
Hash identifier:          cd1K9RtgLoILqQa/NApKfw7rcQ6BbREArDxsircq2w4=
Subject key identifier:   38:43:22:5F:7F:C0:1A:31:66:EF:C8:E2:49:EE:E2:AE:9C:8A:9A:D5
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BA9327AA03E517324BA4F3700
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/567f2d94-6b4f-306b-aec2-27343ea9093c.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     13335
IP address blocks:        162.158.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:7a:a0:3e:51:73:24:ba:4f:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=17324215-2861-46a5-b23a-c0e96b242572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a4:5d:2c:a3:84:91:b8:84:27:fd:06:09:5c:
                    b5:10:83:cb:6b:23:5f:fc:19:73:85:0d:da:81:a0:
                    e1:94:ea:9d:d1:bc:d5:b2:23:c6:d0:d2:dd:12:2d:
                    a9:d5:af:d8:75:1c:e9:6d:8d:74:df:f8:f1:b6:b2:
                    ea:70:2e:06:5d:05:77:5e:3a:3f:6a:8e:09:54:45:
                    c6:57:33:4d:e5:f2:e5:51:48:b1:db:d8:dc:e7:aa:
                    bd:ac:e2:08:19:10:18:8d:fb:a9:19:90:91:ff:15:
                    f7:1a:f7:f1:e9:25:cd:31:71:80:92:79:63:91:90:
                    70:b7:92:bd:e5:ce:55:25:d6:0f:45:60:16:f5:c2:
                    9a:c5:20:cd:dd:ce:51:f0:fa:00:b8:83:a6:e0:7d:
                    f0:8d:b1:63:ba:96:3f:bb:90:49:ce:56:a9:23:27:
                    6d:4b:df:b5:e2:05:ff:73:b3:3e:86:fb:4b:ac:98:
                    ad:4d:3d:4d:f5:92:d8:8c:2e:3e:a9:98:bd:b1:32:
                    12:5b:e8:10:71:bd:b6:54:18:6d:b6:18:8d:b0:07:
                    e4:5d:a4:11:df:da:81:af:5c:59:01:36:ee:a6:83:
                    c3:da:2a:b3:ae:fd:ec:cb:91:20:dc:0f:78:4f:0a:
                    10:8c:da:11:5e:0f:65:52:5f:78:8b:19:90:9a:f4:
                    0f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:43:22:5F:7F:C0:1A:31:66:EF:C8:E2:49:EE:E2:AE:9C:8A:9A:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/567f2d94-6b4f-306b-aec2-27343ea9093c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:7f:fe:a6:1f:6a:2c:45:13:ac:3d:22:ec:da:6f:1e:60:4c:
         78:b7:25:a4:3b:68:68:3f:e2:4f:6b:f5:5f:98:76:91:82:30:
         a9:f2:42:be:c1:6e:42:1e:b8:66:1d:0c:59:86:b7:7d:6b:d7:
         65:f1:39:86:33:9d:b2:d0:a7:06:0c:d0:61:ff:4e:52:50:c5:
         2e:5a:ea:08:36:56:35:41:87:7d:a3:9c:8b:c3:1c:f1:96:84:
         80:26:99:48:0e:12:1b:47:46:10:b2:fa:6b:64:9a:1d:77:52:
         d1:4a:a8:dd:a3:79:a3:10:fc:9a:00:21:52:a2:6f:d0:01:f2:
         b0:1e:ac:e9:8d:db:50:4f:fd:65:93:b4:56:0e:9f:a4:fb:10:
         c2:2a:c2:f3:6a:a6:a5:f8:eb:06:c4:aa:30:ad:d3:a7:40:00:
         21:a4:01:81:af:3d:c1:3b:63:38:e7:41:0d:41:88:e2:39:a0:
         a3:37:4e:b6:58:0c:ad:bf:e5:15:c0:87:c4:fb:93:2a:2b:71:
         4a:bf:10:2c:de:0d:c5:43:ca:81:ac:f6:ba:38:ed:ac:40:b1:
         b8:1c:cd:9a:cd:e4:ae:c8:85:62:85:14:f2:ab:32:07:bb:d5:
         aa:5f:13:cf:8f:1d:d9:c0:cb:4c:1b:0c:97:be:46:a9:43:d6:
         e0:bb:29:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 10:00:50 2025 by rpki-client