Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2808619c-16ee-3e82-9d58-7a5a3b512409.roa
File:                     2808619c-16ee-3e82-9d58-7a5a3b512409.roa (raw, json)
Hash identifier:          GtsJTcnsgoKgj7wfgQ57CJj2Ffhop6hbboZZ4NHjuQU=
Subject key identifier:   95:68:EC:0B:8E:BF:66:B6:EA:0F:CF:73:58:96:EA:4A:62:2E:50:7C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849F71534809FA2DAD1574F25C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2808619c-16ee-3e82-9d58-7a5a3b512409.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     395747
IP address blocks:        162.159.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:34:80:9f:a2:da:d1:57:4f:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=cf4a91c3-7423-4b70-b4f6-60712a1e0cac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c0:ba:66:8f:12:06:43:12:0e:94:59:70:42:
                    33:2e:b2:47:a2:1f:90:25:ac:e7:0d:94:4e:a6:b1:
                    14:9e:fb:9f:95:21:9a:9e:19:19:bc:e8:e9:8a:b7:
                    18:76:b4:7e:7a:ff:f2:07:0f:2f:e3:e5:f4:ba:9f:
                    1f:6a:6f:91:a0:85:b3:d6:b0:d8:6e:27:38:ba:2b:
                    18:89:59:a5:a4:cf:d8:3c:41:b1:d3:f4:55:93:15:
                    a8:17:2c:f3:e5:82:e5:91:69:2b:8c:57:ef:55:c8:
                    0a:82:5b:78:ec:b5:69:c9:29:87:48:6c:16:d0:3c:
                    ce:ae:07:bb:49:fa:84:87:15:ee:0c:79:90:f0:f4:
                    26:66:91:1f:6a:56:82:5d:ce:0a:da:d0:16:58:b6:
                    64:a1:f0:f5:b3:dc:4c:27:a5:08:1b:f7:99:f8:62:
                    54:23:79:00:a8:ae:ba:3f:9d:35:d5:e2:46:99:ef:
                    38:20:d9:85:56:9f:7a:df:f1:67:ec:b8:17:7d:95:
                    d7:1e:86:56:8d:70:ce:fe:a9:e9:d0:d1:db:50:0d:
                    1d:37:9c:05:6b:83:e8:6a:dc:0b:8f:8c:4e:ac:0d:
                    97:ef:2a:94:bb:19:65:f8:f9:09:47:97:0e:74:ef:
                    4f:82:ba:a4:ac:87:7b:8e:3e:24:ad:23:02:f7:cf:
                    2c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:68:EC:0B:8E:BF:66:B6:EA:0F:CF:73:58:96:EA:4A:62:2E:50:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2808619c-16ee-3e82-9d58-7a5a3b512409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:81:22:6d:0f:a6:18:e8:74:bd:0e:9f:d4:e9:54:92:da:0f:
         80:4b:31:c1:f4:2b:d8:7b:30:2e:fe:ee:b2:54:08:c8:c5:20:
         ae:9a:b9:a4:c7:61:c6:a2:e4:bc:3c:f4:8f:73:93:c8:08:8c:
         af:99:bb:ec:64:fd:16:2c:58:0d:16:78:83:0f:fa:b1:c5:d4:
         33:33:23:8d:8b:18:41:b8:8e:c9:4d:6f:e3:16:14:22:23:f6:
         27:c5:40:f6:3e:47:b1:2d:86:b7:d0:2a:d2:62:02:23:c1:65:
         c0:eb:d5:3c:03:d3:10:19:d2:15:dd:f7:93:8d:b4:ed:4b:b0:
         0a:63:d6:00:26:ef:11:27:6d:fd:17:52:32:2d:5b:6f:55:21:
         d4:8a:d5:01:29:f8:8c:61:ce:e9:49:3c:80:ce:ee:12:79:3d:
         e2:21:85:54:a4:e7:0f:56:53:db:13:4a:dc:76:57:79:0b:c5:
         fa:9b:23:a8:f4:1d:2d:ba:61:4f:a3:77:c5:b1:95:5f:4a:21:
         2a:c2:e0:79:38:11:38:1e:a2:11:9c:2f:d2:e1:6b:c1:6b:d1:
         de:3b:b4:6a:8a:a4:61:de:e7:d2:39:04:4c:ca:ce:22:bf:5e:
         7e:5d:19:12:5d:d8:99:55:db:3a:10:25:d0:44:ee:8d:f1:d2:
         bc:28:97:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:20:41 2025 by rpki-client