Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d6ab781c-7b82-3007-9e0a-3484ad3b9c26.roa
File:                     d6ab781c-7b82-3007-9e0a-3484ad3b9c26.roa (raw, json)
Hash identifier:          G3OuUpKR3CTPdwJjGCSOQt1gg93eKc+mw/9VU6mgin4=
Subject key identifier:   03:5D:C1:48:18:6E:84:18:07:09:AC:9F:71:A0:9C:CD:E8:DF:29:3A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D0D427C5D586DD14179AC4780
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d6ab781c-7b82-3007-9e0a-3484ad3b9c26.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     395747
IP address blocks:        162.159.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:7c:5d:58:6d:d1:41:79:ac:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=4edf6a84-2be0-447e-b8f1-a272c85b118b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7c:7c:c0:b9:4f:cd:e4:fd:89:cb:01:02:ce:
                    6f:f7:cb:55:52:a0:8a:3f:ec:1b:3c:2f:8e:d1:8d:
                    7d:5b:bb:c5:61:8a:c7:81:91:96:ff:4a:40:79:d8:
                    5c:29:07:03:14:9b:8e:68:3e:33:99:47:67:6c:5e:
                    45:23:06:5f:93:d2:b7:7f:bc:7c:3d:2d:ae:67:c8:
                    de:ca:c9:fc:fe:7f:31:03:9c:0c:e3:a1:83:86:d9:
                    02:c6:73:07:bb:5c:bb:68:47:67:cf:08:cb:9a:7b:
                    4b:a2:b9:1e:cb:eb:fa:a6:16:b8:63:e5:27:0c:b1:
                    dd:88:74:af:ed:36:aa:83:67:4e:a9:bd:f7:2f:8f:
                    8c:d0:9d:b5:ac:01:ea:36:47:7e:bd:19:e3:6d:15:
                    45:13:f1:6c:57:bd:28:00:70:5a:d3:02:85:9b:63:
                    a4:00:b0:9e:80:29:af:50:74:2e:0b:5d:fe:38:c2:
                    7d:2d:43:32:b2:b3:30:48:72:14:1b:ad:06:3a:f8:
                    b8:e3:0f:6f:4a:be:1e:be:87:0a:40:3a:71:db:f4:
                    6b:31:0f:3b:09:f4:57:93:b6:ce:b0:5d:e5:bb:19:
                    9d:36:da:dc:88:8e:e0:38:25:a6:3f:f7:b1:49:32:
                    ae:29:36:65:5e:63:b3:12:4c:76:83:eb:e2:64:12:
                    dd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5D:C1:48:18:6E:84:18:07:09:AC:9F:71:A0:9C:CD:E8:DF:29:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d6ab781c-7b82-3007-9e0a-3484ad3b9c26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:fe:39:b1:6b:a5:40:a7:b4:e8:17:5b:18:f1:c7:20:f6:13:
         48:d6:82:c3:bf:64:64:d3:c4:ac:53:5c:25:0a:52:3f:3f:eb:
         e3:d8:14:c6:17:6e:00:7c:68:9d:54:a6:a0:98:13:f5:25:bf:
         8c:58:85:e0:c5:71:c5:a7:c2:e4:3c:72:1d:48:a3:68:4e:07:
         a1:ce:f0:9f:4b:bf:81:ea:ad:ff:a0:b1:0d:fe:b9:d6:a7:dc:
         38:09:c6:36:ae:ff:9a:7c:87:75:9a:e0:db:f7:a9:1b:2f:78:
         7e:86:f7:7c:09:a3:6a:f7:0f:6d:ea:ea:28:9a:48:70:ec:d0:
         7e:f8:9c:ad:87:be:78:df:11:90:a0:a1:1f:ec:99:db:8f:0a:
         6d:d5:48:05:af:36:b1:c6:f7:61:42:a2:5b:76:86:92:d8:d0:
         3f:c6:7c:11:46:f4:6d:6a:a7:e8:29:df:a8:db:4d:29:86:a1:
         07:91:a3:1c:be:55:3a:b6:92:ab:a6:a3:9f:64:50:60:3f:e8:
         07:93:fa:ea:7f:1b:43:2a:5c:f1:7e:9f:ee:66:b0:76:0c:11:
         55:de:64:99:f3:65:30:eb:89:a2:49:5e:56:36:dd:a7:9d:6b:
         7a:d4:14:0f:ee:30:ab:91:2c:ed:f1:e4:9d:b0:a7:02:a3:0d:
         cb:b6:be:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:50:52 2026 by rpki-client