Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dd2f8f1e-4f87-3845-8180-1cf640cccbe3.roa
File:                     dd2f8f1e-4f87-3845-8180-1cf640cccbe3.roa (raw, json)
Hash identifier:          31goN3N6Mh5m01ETBrWlvDth3Bvs5GEQEPChops0JWk=
Subject key identifier:   25:16:4A:6D:79:2E:39:2E:EE:07:27:86:11:04:A0:89:92:81:7A:84
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E4824AD5230BE564A2FDFC080
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dd2f8f1e-4f87-3845-8180-1cf640cccbe3.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     13335
IP address blocks:        162.158.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:ad:52:30:be:56:4a:2f:df:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=5b3cc51c-6dfb-44f7-91d5-2ad47f9f01b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9f:25:48:51:ee:d8:52:78:14:d6:3a:de:c0:
                    d3:2e:69:6f:9a:3a:55:cb:72:f3:62:3b:f4:34:80:
                    2d:56:37:13:8d:20:ab:5e:37:cb:d9:9a:80:2a:51:
                    8c:69:40:47:20:4c:f8:0c:1f:36:69:68:1b:79:bd:
                    a5:e9:64:18:85:7f:6d:0e:77:9f:cd:c9:e2:8e:d5:
                    1e:55:98:3a:71:2e:38:85:91:a3:7f:4b:f7:47:bc:
                    8d:95:69:dc:6d:ef:f8:39:2c:f1:62:ae:19:77:bd:
                    01:54:d8:2b:ed:d1:fb:a1:e9:6f:93:0a:c6:a1:0f:
                    69:20:6a:97:87:a6:21:88:8c:6e:cf:14:79:31:72:
                    32:0a:51:dc:c9:4e:e2:30:b3:bc:fc:d6:29:dd:c0:
                    e3:ae:b1:43:2d:7c:f7:8f:42:0f:7f:ad:88:f3:48:
                    e4:da:b3:b4:8b:44:92:fc:33:5d:1d:ae:a1:6c:de:
                    66:08:bf:1d:1d:c6:c0:26:c2:a3:b0:fd:94:ba:7b:
                    60:04:07:47:19:7d:3e:80:c6:21:aa:62:c1:e1:2d:
                    25:66:8e:5f:bf:9c:d8:ba:e1:f9:5a:b2:83:60:18:
                    db:a0:3b:88:f3:56:ec:17:50:2e:88:ef:d7:18:57:
                    5e:3a:1a:63:d4:6e:5e:70:c4:42:ae:c2:90:e0:30:
                    71:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:16:4A:6D:79:2E:39:2E:EE:07:27:86:11:04:A0:89:92:81:7A:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dd2f8f1e-4f87-3845-8180-1cf640cccbe3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:74:82:fc:79:f3:b8:76:cc:2d:bf:de:6a:89:a6:e6:3a:14:
         32:07:d3:5d:1a:f6:44:91:a2:f6:80:02:26:a8:62:35:57:79:
         c9:06:e5:83:9d:55:57:5d:3c:3a:6b:d6:c6:aa:9d:37:4c:90:
         71:d3:1b:54:b7:e9:c5:91:87:3f:9d:82:c5:f3:6e:f0:5d:6f:
         9d:1a:4d:2b:5c:df:3b:67:da:79:15:ea:d0:4e:3a:9d:2a:75:
         a9:7b:f7:f6:c5:84:96:0c:cc:4c:70:90:b3:ac:2d:94:2a:c5:
         7f:b4:c1:fb:ff:f8:10:c0:3b:9a:64:4c:c7:ed:7c:d6:97:dc:
         32:a7:5e:ee:83:69:cd:44:85:db:e2:97:f8:36:45:40:3c:e9:
         74:14:1e:b5:b7:89:92:54:f0:79:5f:b0:0f:38:2a:5d:83:ce:
         1a:8e:38:d0:9f:01:fe:9a:60:e5:7e:95:56:61:07:dd:8c:39:
         b6:e0:8f:a9:33:df:d2:ae:86:f4:7c:95:84:49:50:a4:1a:cf:
         9f:f0:07:d0:80:e8:41:6b:13:9f:18:a8:5b:af:a8:07:f2:9d:
         cb:d6:49:70:09:f3:08:54:cd:23:fb:dc:2a:9e:c8:bd:bf:b8:
         58:ee:6e:af:89:06:1e:35:42:62:32:62:a1:4b:13:cb:87:e5:
         41:4b:99:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:48:32 2026 by rpki-client