Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2b5216ac-e8d0-3b80-8f3c-d7deab80a2b3.roa
File:                     2b5216ac-e8d0-3b80-8f3c-d7deab80a2b3.roa (raw, json)
Hash identifier:          QwZNcA5odWPttBO7SCrIjHs9E07qankWjPtl1//oogg=
Subject key identifier:   E3:C8:75:4E:DE:98:15:37:05:66:35:3F:5E:F6:EF:D6:42:73:2F:5F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858473AD9D45B82AF6D21E089C740
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2b5216ac-e8d0-3b80-8f3c-d7deab80a2b3.roa
Signing time:             Sun 15 Sep 2024 12:00:00 +0000
ROA not before:           Sun 15 Sep 2024 12:00:00 +0000
ROA not after:            Fri 19 Dec 2025 05:00:00 +0000
asID:                     13335
IP address blocks:        162.158.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:d9:d4:5b:82:af:6d:21:e0:89:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 15 12:00:00 2024 GMT
            Not After : Dec 19 05:00:00 2025 GMT
        Subject: CN=5320b889-d533-4fcd-a79f-75e8ed088afb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0a:1e:5d:21:3a:c7:d7:91:b2:49:97:57:fe:
                    d0:43:1c:00:dd:83:12:1d:34:fb:e1:a9:ef:42:8c:
                    ff:85:ce:66:ee:7b:b4:9f:a0:d2:51:24:2c:32:4f:
                    79:30:51:ca:ef:45:ea:d4:49:c5:57:58:fb:a8:d0:
                    0d:dc:3c:30:18:b6:fd:74:df:75:84:50:46:0a:69:
                    61:f0:98:9d:c4:7a:22:bc:5b:a8:2d:79:29:c2:29:
                    ec:d9:1c:c9:fc:20:6b:5c:08:37:e1:0a:3d:79:c4:
                    e8:25:f3:79:a9:bc:1b:62:78:1f:78:66:25:03:70:
                    78:9c:f1:9e:cb:2d:68:4b:be:29:28:ad:89:b2:1d:
                    86:ee:1b:0f:dd:c0:78:b6:69:16:10:4e:8e:c0:f9:
                    3e:a4:f8:58:59:6d:7e:42:31:80:60:f0:a1:5a:97:
                    7c:6b:11:44:b2:ef:1d:95:e6:7b:62:07:a5:72:37:
                    37:89:3b:c8:c8:21:c7:12:ef:49:3d:a6:2d:cb:53:
                    2b:aa:f2:08:21:16:44:31:0a:2b:de:3f:3e:a1:85:
                    6c:6b:2b:1d:99:d7:96:89:a5:74:10:86:34:ec:94:
                    77:53:04:df:f2:9b:d1:e1:57:49:9b:80:04:d7:38:
                    96:28:47:18:36:b4:75:35:cd:25:c5:79:36:5a:06:
                    bb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C8:75:4E:DE:98:15:37:05:66:35:3F:5E:F6:EF:D6:42:73:2F:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2b5216ac-e8d0-3b80-8f3c-d7deab80a2b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:f1:08:40:53:fb:1e:42:d8:ec:e6:d0:dc:e8:c7:61:4e:cc:
         82:76:53:b1:a6:5d:06:1b:ff:28:f9:fa:3f:94:57:ec:8d:da:
         86:11:ba:3c:e9:98:d8:7c:bb:9d:56:ca:1f:07:6f:ef:8b:5b:
         f9:9b:c7:b1:19:fc:11:d1:2c:e0:94:91:f0:5e:24:22:ec:ca:
         0a:c3:7c:86:b2:d5:e1:da:1f:0c:9e:00:da:ad:ba:cd:bf:8c:
         9a:89:a6:f8:cd:d3:f2:3e:29:66:47:3c:7e:fa:73:10:14:d9:
         05:56:bf:44:20:1f:bf:cc:13:c4:e8:6c:8f:e7:6e:b8:15:2e:
         88:2c:ea:62:f3:48:90:17:f9:87:e0:f1:57:44:a1:73:4f:6a:
         5d:c8:b3:c6:4c:23:a4:88:26:dd:88:8a:c1:62:1d:cb:cc:91:
         bd:4f:05:01:4d:12:1b:84:ad:86:ee:69:d0:fa:09:f8:3c:36:
         cc:6d:20:f0:64:6f:d7:35:c8:28:78:ee:41:37:dd:88:a0:92:
         7f:61:8e:7f:ae:a4:8e:79:21:45:20:e0:0a:5d:15:00:44:af:
         d3:fd:4a:b6:f1:c6:c5:1a:fc:09:05:b3:60:ea:bc:46:22:74:
         e0:fc:1f:47:52:7d:2d:56:1a:b9:36:e0:b2:cf:77:f3:76:07:
         a2:ce:d0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:01:01 2024 by rpki-client on console-ams.rpki-client.org