Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd5aeeb0-153c-30cc-a81c-765912ec7034.roa
File:                     fd5aeeb0-153c-30cc-a81c-765912ec7034.roa (raw, json)
Hash identifier:          Tc+ne3kMQ+2EvxFpeaTXcGuFh8qMxbRPRycgD3asyXc=
Subject key identifier:   89:69:BA:A8:E2:ED:96:31:CA:49:9B:67:B5:5D:5C:E8:0A:43:2B:D2
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E7BA8F4CAC12CEC1B363B300
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd5aeeb0-153c-30cc-a81c-765912ec7034.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     13335
IP address blocks:        162.158.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:8f:4c:ac:12:ce:c1:b3:63:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=63c0634f-adcf-4abf-8a9b-c9c636a8fb0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:09:42:eb:e7:59:95:73:74:b0:70:b1:79:11:
                    ae:74:00:aa:e1:60:31:c6:61:20:c3:9f:bd:7f:37:
                    df:b9:5e:3e:f2:75:9e:c4:96:8f:52:9b:6b:ad:1b:
                    e8:35:7f:f8:93:1d:9c:ba:7e:80:86:26:33:46:27:
                    de:8d:88:78:99:a2:1b:2c:c9:1a:85:b1:c0:4c:fb:
                    63:fc:fa:0a:44:c3:72:b1:e3:e9:c4:63:50:a0:85:
                    2d:d7:47:48:be:aa:21:32:ca:4c:dd:5d:32:0a:9f:
                    e3:9d:8e:75:a3:7a:56:d2:9e:ff:9b:d3:ce:73:9c:
                    62:15:ec:0f:ca:80:f8:02:aa:ec:c9:62:0d:aa:94:
                    04:01:6c:51:79:11:3c:5e:5d:84:9a:ce:a2:cc:4b:
                    2c:08:f2:df:ba:fd:66:df:66:22:ec:a5:24:e0:e0:
                    6c:47:c1:45:7c:49:bf:4c:f1:8c:ab:a3:7b:95:82:
                    7f:84:24:f6:25:2f:61:9f:55:3d:00:ed:5b:dd:b8:
                    1d:b1:a3:2b:66:35:62:d2:45:2b:b3:6b:1f:1e:92:
                    ee:b5:9c:8c:eb:5b:4f:43:23:63:88:61:29:bb:33:
                    a4:c5:d5:a1:4e:02:b2:72:81:f0:4e:35:e9:85:ad:
                    ba:5e:60:fa:ac:8c:f1:19:47:58:98:33:59:5e:55:
                    34:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:69:BA:A8:E2:ED:96:31:CA:49:9B:67:B5:5D:5C:E8:0A:43:2B:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd5aeeb0-153c-30cc-a81c-765912ec7034.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:68:68:35:6c:ba:d3:37:1c:e1:41:89:9d:e1:74:b8:a4:4a:
         81:8f:29:a7:ba:6a:ff:01:56:1f:b7:e7:a6:61:c3:85:6d:ef:
         b0:aa:0d:e2:5c:b0:d4:6b:cb:3d:1a:68:7b:53:e8:fd:d5:71:
         93:b1:82:f3:de:e2:c6:19:28:7c:0e:e5:e1:11:4e:5e:46:b2:
         33:f9:91:47:61:6b:b3:e0:da:c6:6c:10:d6:c3:7d:ed:9a:e1:
         5c:d3:35:2f:3b:e6:11:2c:b8:59:74:6b:2a:3b:c3:1f:98:25:
         74:ec:e1:80:af:b7:1a:10:9e:28:dc:0b:37:0a:f5:ce:32:72:
         42:5a:b1:22:5e:2b:eb:fb:e3:1a:9c:03:50:26:5c:4d:cb:8c:
         10:8e:77:6c:41:58:14:92:88:ae:e6:ac:73:04:44:cd:e0:c8:
         e3:59:f2:f3:4f:6f:78:70:40:7f:99:79:52:01:28:a6:da:a5:
         7c:c6:e5:1f:36:55:ad:cd:ea:1b:58:77:11:e1:83:35:e6:6e:
         17:cf:73:be:dd:7c:7a:3a:75:66:e9:b7:57:48:6f:cc:95:e4:
         ab:ba:aa:59:b3:8d:54:15:fa:ee:bf:52:c0:32:c9:28:34:18:
         80:26:e2:0e:07:36:1c:59:cd:95:d0:76:91:e6:d6:12:5f:7f:
         ab:fa:a9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:36:33 2025 by rpki-client