Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8c43847a-437e-3536-8a40-3c39eda254d9.roa
File:                     8c43847a-437e-3536-8a40-3c39eda254d9.roa (raw, json)
Hash identifier:          CLqAtr1sI//F6ZINB9o42rgcXYEpgmJPph3rxOgA2wg=
Subject key identifier:   34:40:B2:76:C8:33:F6:F5:EB:AE:5B:76:A8:16:D9:F6:DE:D6:E2:8B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584F8DD8839682B1992AF9BC8800
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8c43847a-437e-3536-8a40-3c39eda254d9.roa
Signing time:             Mon 19 Oct 2026 13:00:12 +0000
ROA not before:           Mon 19 Oct 2026 13:00:12 +0000
ROA not after:            Sun 17 Jan 2027 14:00:12 +0000
asID:                     13335
IP address blocks:        162.158.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8d:d8:83:96:82:b1:99:2a:f9:bc:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 19 13:00:12 2026 GMT
            Not After : Jan 17 14:00:12 2027 GMT
        Subject: CN=e7c697c3-9ec0-4cea-aa34-80059276bfee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:8a:97:ae:20:e3:60:2e:22:14:43:1d:28:82:
                    c4:fa:1e:37:f4:d0:f3:00:8e:63:6d:a6:64:6b:af:
                    27:8d:f4:72:b7:a0:4b:0e:f3:f2:ca:80:58:4b:76:
                    b0:c2:09:f6:84:cf:50:4e:d0:1e:08:57:2e:78:fc:
                    7d:aa:df:fa:c7:58:84:0e:c5:48:09:61:f3:ef:65:
                    b4:7f:d9:d8:39:b2:51:e4:10:98:1b:d1:f4:a1:e2:
                    80:28:45:3e:48:fe:fe:14:7f:97:24:54:e8:6e:74:
                    69:8f:c7:0a:84:3f:f2:6d:18:96:00:b0:1b:9e:4a:
                    7c:23:12:4c:72:37:14:7b:55:2b:51:db:8c:2d:10:
                    a4:59:fd:5a:16:47:c1:49:01:6a:c1:5e:4e:4a:49:
                    38:4c:1a:30:1d:06:04:46:77:f4:29:77:79:de:f4:
                    78:c5:be:5d:42:96:da:c7:02:eb:2a:2e:6a:5c:76:
                    77:2e:1a:39:a8:6e:14:59:62:69:cb:8e:4e:e8:ba:
                    78:eb:d4:72:9a:8d:bc:b3:da:8e:8c:29:fc:67:5b:
                    6a:82:38:fe:91:59:bf:53:bb:fa:cf:e4:1e:98:0a:
                    96:7a:5c:15:69:06:b6:42:ea:19:11:a4:10:01:b1:
                    70:53:2c:d7:00:18:2c:b8:d6:05:63:f8:6d:71:f2:
                    86:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:40:B2:76:C8:33:F6:F5:EB:AE:5B:76:A8:16:D9:F6:DE:D6:E2:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8c43847a-437e-3536-8a40-3c39eda254d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:8b:50:d2:e7:f9:a3:1a:7e:7e:88:29:b9:b0:64:c3:ad:a5:
         6e:68:62:33:d8:4a:85:9d:9f:58:eb:16:cc:9e:22:88:8c:a9:
         cd:ec:fb:73:70:9f:20:31:ae:19:0d:bf:71:8a:60:17:ef:07:
         c4:6b:95:24:c2:00:67:5d:ec:c4:13:39:c9:20:ad:a2:b5:65:
         88:10:28:55:db:02:e0:9b:d6:98:a4:6e:4f:a5:cf:ac:3f:b6:
         b8:d1:47:15:f9:52:82:ef:5d:38:04:b8:bd:f5:91:39:b5:bf:
         7d:b2:73:60:d0:94:19:f2:de:16:e8:ae:34:eb:dd:c4:bf:50:
         60:2b:54:b4:83:a3:b5:6a:20:8e:03:ab:81:d6:ca:59:b0:de:
         6a:4d:44:93:cf:96:08:cd:6f:a7:f5:cc:4a:d7:f3:ea:83:af:
         ff:ec:34:4d:af:43:20:45:db:8f:39:7a:7a:3b:1a:fa:44:39:
         30:d7:77:6d:3b:5b:b3:ec:e1:1c:71:83:92:03:d3:00:da:35:
         a7:0d:55:3a:2b:a4:40:08:ca:40:3b:1e:d5:2a:75:9b:31:54:
         e4:7e:9c:2f:38:18:98:df:76:ed:5a:29:bc:54:48:8d:fc:38:
         40:4b:f9:6d:5d:85:da:24:ac:6d:5d:75:30:50:ed:7a:bf:c0:
         d7:86:6e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 21:00:56 2026 by rpki-client