Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a8c94c5-54d7-320b-8785-9917402a7352.roa
File:                     0a8c94c5-54d7-320b-8785-9917402a7352.roa (raw, json)
Hash identifier:          BGvi8DDEWPbmi3X5l8rasWkMh0RVKUMnt8SE9/ntbrY=
Subject key identifier:   57:4B:95:B2:04:72:6B:BE:72:B1:9F:7B:EC:B3:3E:FE:0A:7F:A1:E9
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E7BA99315924CB177379C480
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a8c94c5-54d7-320b-8785-9917402a7352.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     13335
IP address blocks:        162.158.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:99:31:59:24:cb:17:73:79:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=d74c420a-39f1-4dbe-83cb-73f09e1d7157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d1:b5:fc:a5:4f:3b:43:82:04:6a:e5:5b:b2:
                    02:a7:b4:f9:35:ee:f0:ee:03:37:10:af:a3:f3:db:
                    2f:55:e6:1d:e7:cf:08:49:e5:4f:be:79:53:f8:1d:
                    09:f5:14:c5:8f:54:a9:ab:a7:3e:b9:aa:29:5a:d9:
                    9d:9b:09:a9:33:ca:86:c3:6d:e1:d5:36:a7:97:ba:
                    6a:30:15:56:54:d0:77:95:4a:a7:01:c2:da:1c:86:
                    ef:57:a0:12:b9:f2:08:69:87:76:4a:a8:b7:91:38:
                    42:ad:f3:60:79:7e:7d:93:bd:97:73:7b:48:6d:0f:
                    2d:3e:70:83:5a:ba:c0:96:0c:33:03:db:2d:1b:21:
                    4e:32:1c:a0:84:57:ae:5b:ee:11:8f:1f:30:81:8c:
                    c9:9b:22:d6:1f:5d:6c:f0:d9:8c:ce:f2:5a:0c:4e:
                    b8:ce:55:10:97:fb:b4:32:fd:3d:be:9e:a6:1f:6c:
                    4a:0d:8e:1f:81:99:84:62:17:0a:20:18:83:f2:28:
                    bb:56:32:2b:98:a0:d4:3a:88:1c:f2:ab:dc:03:0a:
                    07:23:82:b5:ce:b1:e6:6a:25:61:fe:31:a2:78:29:
                    fd:26:60:7a:84:d9:68:24:5d:dc:cb:1e:56:56:27:
                    d2:26:71:3d:ff:f6:4a:85:51:46:6a:34:32:e5:0f:
                    1b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:4B:95:B2:04:72:6B:BE:72:B1:9F:7B:EC:B3:3E:FE:0A:7F:A1:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0a8c94c5-54d7-320b-8785-9917402a7352.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:3c:9d:be:be:6e:c5:fb:9e:14:3c:17:38:71:31:5b:12:28:
         83:94:7c:5e:8b:c0:a2:72:28:a2:68:0b:3b:8c:79:d5:48:a0:
         d0:6e:f1:b2:d4:a8:6d:87:d1:41:68:81:02:a9:34:91:4b:c8:
         34:3c:7d:cd:12:9b:fd:e7:c6:0a:39:86:3b:5c:c1:7f:a6:2c:
         eb:fc:cc:ba:d2:57:4d:33:0a:79:b4:94:35:63:7c:d7:1b:a7:
         ad:0c:bf:c5:4d:32:7b:f8:6c:1f:80:7a:cd:8a:0d:13:e7:17:
         c2:69:4c:37:86:ae:d8:a0:ac:93:df:46:b6:25:95:10:75:67:
         af:05:20:f9:85:15:cb:36:5f:0f:93:ea:3d:f0:5f:f8:73:a3:
         b3:8a:46:87:6e:c7:4a:1f:5d:ad:3d:d3:d8:18:85:b1:30:5b:
         d0:a5:c8:56:9e:0a:d6:b3:d7:ec:aa:be:c2:ba:17:b5:90:a7:
         14:bc:d9:79:ac:10:14:14:1e:3f:80:65:c7:b7:7f:d0:f0:60:
         3d:9a:c9:77:da:19:c4:a9:dc:a9:a3:79:82:22:30:1a:ce:ff:
         87:bb:f0:55:0c:f8:f0:57:71:90:db:72:0d:87:08:dd:2e:7d:
         c4:a5:00:44:e6:16:b1:d2:a0:d1:61:8a:5f:36:d6:09:55:f5:
         18:b6:13:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:47:55 2025 by rpki-client