Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/12dcc1a0-0575-3221-92eb-413f6f6f2106.roa
File:                     12dcc1a0-0575-3221-92eb-413f6f6f2106.roa (raw, json)
Hash identifier:          ekmq7taChKRD3mlOh8LHvSwcz8JDix5SW8zGiy3dITE=
Subject key identifier:   0C:F3:E2:75:E4:1E:EB:5C:D3:E6:02:57:AB:A8:1F:97:C8:AB:DC:5C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E7BA908D0C0EC520E81306C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/12dcc1a0-0575-3221-92eb-413f6f6f2106.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     13335
IP address blocks:        162.159.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:90:8d:0c:0e:c5:20:e8:13:06:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=2f3118d6-995d-4d71-bcd8-ce61d4b0f446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e0:cf:46:f5:10:7d:27:11:d7:aa:d0:9a:4d:
                    bd:cc:38:08:eb:26:0e:cd:6d:66:c2:e3:8b:60:c6:
                    39:a9:28:30:43:1d:d3:af:62:cb:f0:50:2d:31:64:
                    1b:ff:c4:bd:6f:e3:47:79:bf:13:d3:43:41:81:21:
                    70:b3:5c:7e:8a:53:2e:bb:66:02:48:b1:d2:73:c7:
                    10:ed:66:07:43:94:ec:77:a7:7c:80:85:75:a0:bc:
                    47:d5:c0:bb:42:e7:ff:06:4d:63:e9:17:f3:9f:a2:
                    e6:c1:cc:b2:29:ed:4d:af:a5:b6:6b:f9:85:cf:71:
                    9b:7f:8e:4a:37:e3:11:e8:a3:81:0a:2a:be:39:c7:
                    3c:a8:79:33:74:87:ae:42:f8:17:8a:c9:de:db:2e:
                    32:72:11:99:cc:66:f7:ca:39:25:cb:0f:d3:fa:8b:
                    18:de:fb:05:db:56:52:81:b4:26:3a:c2:d0:9f:b0:
                    5d:ef:7d:80:64:95:bd:96:13:82:76:31:13:3e:71:
                    44:d3:24:5c:f2:f5:bb:58:42:17:97:75:f1:81:59:
                    b6:1a:ab:c7:eb:4a:a4:08:66:06:8d:73:45:63:82:
                    e5:5f:22:bb:23:27:57:8f:c7:7c:b8:8d:92:0f:39:
                    8b:63:00:3a:16:6a:6d:e3:71:95:f3:80:21:0e:d4:
                    e8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F3:E2:75:E4:1E:EB:5C:D3:E6:02:57:AB:A8:1F:97:C8:AB:DC:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/12dcc1a0-0575-3221-92eb-413f6f6f2106.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:d3:77:aa:1f:e7:53:ae:a3:aa:c1:d5:51:5e:07:7f:ff:85:
         6b:69:c8:4a:b6:01:09:65:d9:b7:ca:39:7b:e2:ef:dd:9c:63:
         d6:13:7d:ae:63:13:29:e4:f1:64:0e:f9:41:4b:47:d5:b4:0a:
         1b:11:d9:0c:11:75:b6:47:84:c1:f9:cc:e5:9c:60:20:13:1f:
         e9:c9:cb:9a:cb:00:aa:38:0e:76:7c:d9:b5:77:c8:49:68:2b:
         f5:68:09:01:88:f6:01:18:2b:6f:6e:9a:9c:76:a0:2a:b6:b9:
         02:43:4a:5f:52:2d:4e:3e:71:14:48:6d:9c:04:4a:5f:9b:f3:
         e4:7c:de:30:c4:80:40:bc:8b:95:97:5a:67:6a:1e:44:e0:a4:
         d6:27:82:b3:5f:98:56:d6:06:da:0f:0d:66:02:a2:65:e5:b9:
         b5:cc:a4:13:e4:1b:57:ed:d7:05:e6:4f:e9:49:57:1a:21:52:
         7a:cd:38:2b:b2:cd:f0:bd:75:61:6c:c2:07:4b:c0:d0:4f:bd:
         da:cc:db:3f:3b:17:4c:21:e6:a5:04:fc:f8:33:e6:6e:a8:c4:
         48:db:3c:f7:e0:6e:07:57:b1:2d:6f:8d:4b:43:b1:80:06:ea:
         44:25:42:35:2c:b6:bb:64:a3:bb:77:1c:d8:86:5e:97:61:25:
         34:ac:79:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:28:06 2025 by rpki-client