Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dbc43273-d575-3ab7-abe1-e5a54a96d902.roa
File:                     dbc43273-d575-3ab7-abe1-e5a54a96d902.roa (raw, json)
Hash identifier:          ExpzNyf3fsPtC76cluvTNW6uVX1tsFyNb2K7NqSZkP8=
Subject key identifier:   C0:33:08:49:5C:33:6E:E1:7B:B9:C9:16:C4:29:A4:F4:EC:E5:19:21
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584F7A4D954E8FACABE3EBF9C380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dbc43273-d575-3ab7-abe1-e5a54a96d902.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     13335
IP address blocks:        162.158.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4d:95:4e:8f:ac:ab:e3:eb:f9:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=39cecc60-dd07-48c9-97a8-99c613135c2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:64:03:9d:65:1b:a2:ef:36:6d:a5:42:0a:52:
                    70:76:79:0d:27:b2:96:3a:0a:b7:97:d0:74:07:08:
                    1e:c5:b5:e9:f1:a6:46:67:a1:2e:6b:c3:b3:de:18:
                    d4:52:cd:aa:1e:b4:3a:4c:79:49:65:c2:27:2f:1e:
                    e3:c2:a1:d8:bf:6c:85:e9:03:4b:20:18:36:4d:89:
                    a5:8f:56:da:fa:08:a1:99:b3:a9:16:f4:1d:8e:36:
                    7d:73:7a:7b:5d:bd:7e:3b:15:ab:73:a8:12:f6:05:
                    fd:a7:9c:47:f1:36:a0:fa:3f:e3:d4:b0:23:90:94:
                    39:55:ed:50:db:e5:72:65:19:dc:88:0b:3f:53:96:
                    34:f3:51:80:92:d0:fe:f9:d1:2d:7c:af:f5:25:56:
                    fc:44:e8:30:43:67:e6:f9:d6:1d:73:5a:c9:49:3e:
                    59:25:c1:03:ff:f1:55:02:16:5a:9a:6e:9c:2a:cf:
                    7d:ca:f3:c8:1f:3f:5a:5d:de:a0:45:e5:ae:e7:af:
                    8c:57:e5:41:d6:6f:5f:12:40:bc:da:23:b0:cb:6f:
                    5b:01:f2:53:e5:74:8d:6b:ce:37:73:ed:49:9f:19:
                    73:f3:98:b5:59:5d:34:6f:22:92:25:76:42:71:a2:
                    5c:96:4d:0e:e3:94:49:7d:b1:8a:53:b7:fb:9b:97:
                    97:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:33:08:49:5C:33:6E:E1:7B:B9:C9:16:C4:29:A4:F4:EC:E5:19:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dbc43273-d575-3ab7-abe1-e5a54a96d902.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:a3:3b:aa:94:57:e9:de:90:fa:47:3b:f8:de:cb:17:0c:3d:
         bf:d9:7d:2e:c5:e4:3a:09:81:52:c2:c5:4d:cf:b8:49:cc:fe:
         58:da:bf:3f:e8:07:97:22:dd:c4:c5:de:b9:e8:22:01:d2:51:
         a0:ab:76:9d:26:f5:1b:3b:bf:32:9a:49:41:cd:40:65:9d:56:
         df:35:00:6c:31:3a:12:7b:36:26:64:df:6b:c2:70:0f:9e:01:
         40:c2:fe:bf:c2:1e:58:7d:5a:31:60:93:5a:30:38:59:cc:b4:
         28:3e:00:50:4f:16:18:72:20:c5:d3:ee:14:44:64:c5:ed:d5:
         cb:f0:55:e1:ab:ff:09:e3:63:ea:bb:79:d6:e9:5d:3f:9c:f1:
         61:f6:69:48:7c:f3:a4:1e:b9:d3:35:42:98:9d:35:dd:d7:1f:
         74:c4:73:07:40:e0:f4:8c:67:0b:bd:0f:9c:9b:ce:22:09:45:
         ea:47:61:d9:79:99:57:25:12:62:11:e7:87:10:26:5d:65:7e:
         b2:14:a3:12:14:78:b2:5a:f8:e3:ab:23:d3:95:cd:af:2e:cf:
         31:34:c5:3d:3d:39:2d:2b:1a:c1:50:5e:bf:20:15:8e:a5:5e:
         59:af:5b:73:e6:4b:21:65:26:1f:26:41:7e:47:ef:22:72:ed:
         17:82:f5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:05:30 2026 by rpki-client