Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2acf0419-32e5-3dc1-a81a-0dcaa7db850c.roa
File:                     2acf0419-32e5-3dc1-a81a-0dcaa7db850c.roa (raw, json)
Hash identifier:          L4+R9ydrdiOOXRerVKHTBBPBBgZDdKxy6vpEqj0II00=
Subject key identifier:   FD:A1:D1:D2:68:E1:3B:D6:31:76:B1:34:D6:A9:9E:49:CF:E9:12:70
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E65500821CC6CA0092518DC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2acf0419-32e5-3dc1-a81a-0dcaa7db850c.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     13335
IP address blocks:        162.158.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:55:00:82:1c:c6:ca:00:92:51:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=92eb3f73-cd76-4245-ba58-348c33911dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4c:d2:63:dd:4a:72:52:9f:73:91:41:1a:8f:
                    2a:2a:7b:75:1c:d8:b8:47:79:07:84:30:c0:24:f2:
                    ac:0b:29:ea:b7:74:43:07:eb:74:2b:fc:ae:6b:d1:
                    00:96:3e:9d:ce:6a:a8:a6:cc:08:70:ec:d6:5a:f6:
                    e9:97:e1:43:39:a8:47:1d:88:1d:68:b2:28:71:06:
                    66:e2:1f:f0:ef:a9:10:eb:ec:68:19:90:8e:45:b8:
                    68:f7:28:99:e6:cf:43:a4:2f:97:a3:bc:e2:c2:74:
                    ac:3a:91:a9:58:4f:ae:99:d6:15:05:bd:26:8b:c5:
                    f0:0d:72:18:58:08:8d:ec:7e:22:f0:d4:4d:92:f8:
                    31:24:7c:43:2b:1f:6f:87:2c:ba:4e:55:83:4b:7f:
                    38:75:02:ab:bc:56:c5:7e:0e:ac:e0:2a:7e:dd:5b:
                    ab:7c:e6:ba:10:bb:75:7e:20:c2:5a:74:b2:10:8c:
                    9b:c0:09:d8:bc:92:3c:a5:7d:df:2b:99:c4:b9:76:
                    44:2b:55:b6:41:72:68:e8:5a:13:b9:92:f0:6c:ea:
                    c7:be:e8:9c:76:d8:dc:a6:1a:41:2c:69:8a:07:e7:
                    ae:ed:d5:7b:11:60:14:d1:d1:5e:d5:27:1c:79:ef:
                    43:16:1f:98:8a:d1:a7:f3:b6:a9:92:c8:18:e3:b3:
                    32:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A1:D1:D2:68:E1:3B:D6:31:76:B1:34:D6:A9:9E:49:CF:E9:12:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2acf0419-32e5-3dc1-a81a-0dcaa7db850c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:fc:09:ff:f4:26:0e:03:82:22:86:e2:37:95:da:79:ff:c1:
         dc:0a:41:8d:02:72:86:33:ea:a6:ba:fc:2d:32:11:1d:09:22:
         81:6b:08:94:25:65:3e:66:34:47:6a:37:7d:63:d9:97:5c:4a:
         de:fa:70:43:fc:3b:d5:1a:0b:35:f2:86:b9:c1:18:bf:07:71:
         b9:ab:b5:73:65:1d:07:a5:b8:f3:ad:1c:83:09:87:cc:aa:c9:
         6c:79:dc:06:7b:1b:af:97:61:7e:10:9a:38:ee:13:43:92:7f:
         28:d9:68:6d:72:39:78:b4:42:e8:d4:5a:bf:53:6f:58:5e:0f:
         8b:c4:76:c4:86:1d:33:db:3f:96:fb:c0:53:af:f4:ad:1d:c1:
         95:83:2c:22:e0:29:f0:4c:0a:1d:d7:f1:10:19:67:5d:de:d9:
         1b:7f:91:37:61:2e:8f:14:14:29:86:7c:23:60:05:25:c9:14:
         95:9d:2b:98:bf:50:62:f0:bd:85:0f:45:f1:e6:fa:f8:bd:d0:
         7d:0e:db:5e:f7:35:28:4e:0f:56:32:f6:03:27:cc:a5:7d:a2:
         5d:08:ce:25:42:58:cc:f6:8f:12:87:67:14:a7:91:84:10:4f:
         67:a7:07:c9:a6:2e:b1:76:b5:63:61:1b:90:cd:e0:ba:cb:c5:
         41:47:53:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:29:46 2025 by rpki-client