Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00fa07ac-4fcb-39af-8e54-7d48c48dfef0.roa
File:                     00fa07ac-4fcb-39af-8e54-7d48c48dfef0.roa (raw, json)
Hash identifier:          Fhfgp2cGLjSmzD38gaJ8SZJjUjXf7fmFGlZIhh4xpJc=
Subject key identifier:   BD:51:4E:0C:A3:95:C3:FE:EA:11:43:EB:A4:4C:14:FF:9D:96:30:9B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E4EFCF50F4B08B9BE191BA20
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00fa07ac-4fcb-39af-8e54-7d48c48dfef0.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     13335
IP address blocks:        162.158.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:cf:50:f4:b0:8b:9b:e1:91:ba:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=b39f1023-c7f4-411a-9bfb-6c6998761101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f6:63:4b:38:e7:41:b0:e4:16:3e:ab:fc:4e:
                    5a:5b:81:ec:2e:6c:c1:c1:f1:90:c8:69:66:a4:4a:
                    d1:0d:d3:f2:67:df:08:f2:ef:2c:e8:bd:83:07:f4:
                    f7:f5:30:3d:c1:20:42:09:9e:97:c5:b0:13:48:4f:
                    3a:ca:98:3e:1b:b4:38:09:79:7a:9c:dc:6d:67:fa:
                    81:a5:11:75:6b:59:d1:8c:1a:b0:b7:83:46:69:9b:
                    8f:b5:41:ae:ca:75:bb:94:f3:6e:42:d1:3d:50:c2:
                    52:77:d0:ef:74:99:7f:35:25:4d:44:f0:a1:87:84:
                    8f:9e:4d:57:96:29:de:f6:52:bd:f0:6c:2a:de:56:
                    96:2a:db:d4:fd:a6:81:fe:c0:7f:82:92:30:0b:30:
                    ba:f7:61:1e:e2:9e:a2:78:02:16:e8:a1:00:9a:e3:
                    4a:7e:52:73:8e:c9:80:e8:3b:65:76:a1:e4:9f:25:
                    a7:b1:8b:54:9e:43:e7:d6:cf:a9:13:49:38:f2:ca:
                    99:ee:c9:02:4c:d6:65:ac:52:c1:fa:5f:54:d7:b4:
                    3e:15:76:2b:c4:67:a7:b8:50:6b:20:54:fd:f1:e5:
                    46:76:de:6d:13:b9:5f:42:87:a7:b0:f5:09:3d:d8:
                    50:d2:f1:bd:74:2a:3c:63:03:4b:41:04:4d:06:88:
                    22:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:51:4E:0C:A3:95:C3:FE:EA:11:43:EB:A4:4C:14:FF:9D:96:30:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00fa07ac-4fcb-39af-8e54-7d48c48dfef0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:1a:a1:33:47:10:4b:59:8a:f4:fd:84:3b:02:46:84:c5:11:
         a5:a1:54:aa:40:e6:70:c8:bb:6b:ed:27:dc:fb:0f:5c:a4:d4:
         ee:c7:dc:9d:9b:75:1b:71:ac:3b:6e:79:85:ed:aa:e7:45:6f:
         04:9b:bc:e9:3e:0c:16:49:97:65:c0:f4:ff:22:41:6b:a6:0e:
         c9:cf:f2:c3:43:c4:bd:fd:dc:7a:c4:6b:24:44:3b:7d:7d:cc:
         08:2f:5e:70:ea:db:59:c6:2f:de:d8:80:98:eb:5d:74:b4:a3:
         d5:03:31:f6:6b:10:0c:c0:b9:05:19:a4:4c:5b:ba:e6:15:0a:
         a6:c4:82:fa:bd:c1:d8:22:bf:df:3a:7a:4e:a5:3a:79:24:c9:
         a3:d7:49:14:13:f4:80:e8:c1:90:83:ac:b3:42:a1:28:a6:fa:
         8e:e7:f7:83:7a:fe:59:6b:31:5f:9c:fd:d8:28:18:e9:ca:76:
         26:a3:9f:9b:42:4f:04:05:47:ca:89:74:76:e9:e6:97:68:ac:
         d4:30:d6:82:b4:8e:20:0d:f7:58:98:69:e0:8d:59:f7:f3:2b:
         d8:a1:5d:c9:35:e1:f2:5e:01:b8:76:78:5b:a9:39:7c:c1:e7:
         ea:8a:ed:bd:d3:0e:f2:43:72:38:ee:a2:f8:85:9e:76:6c:7b:
         7e:5b:8d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:52:40 2025 by rpki-client