Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/303de2bd-cddb-39e6-9eda-0df1b956c6d8.roa
File:                     303de2bd-cddb-39e6-9eda-0df1b956c6d8.roa (raw, json)
Hash identifier:          z2qknLTFTz2ZsV2reENAsnaSErgzvIav1pyzztLdRL0=
Subject key identifier:   2F:B2:26:F9:A3:D9:56:F5:00:39:63:DD:49:0C:8C:94:D0:19:9B:3D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E7BA9C78899F9B647622B840
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/303de2bd-cddb-39e6-9eda-0df1b956c6d8.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     13335
IP address blocks:        162.159.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:9c:78:89:9f:9b:64:76:22:b8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=bddf46a2-ed35-4169-b1c8-5c6fee4ae7af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:54:0f:6d:e8:19:cf:eb:5b:9c:2b:c3:40:e5:
                    ea:c0:fe:fe:aa:a1:f5:b1:3c:f8:39:91:c6:50:ab:
                    be:db:0e:be:c0:65:d2:e7:23:d5:dc:02:c3:39:cb:
                    c2:e4:3b:f1:90:ca:cc:6b:ae:72:01:2f:7d:6d:d8:
                    98:34:f0:c3:d8:25:56:9b:0c:4f:ce:99:a8:d6:bb:
                    7b:7a:d8:51:2e:96:21:07:ed:b2:98:9e:c3:65:ad:
                    42:4f:60:18:be:b5:c7:00:64:d8:c3:d2:71:7f:a2:
                    b2:95:74:73:7e:f0:03:d5:37:20:1a:7c:17:a8:b5:
                    df:29:c0:19:8e:5b:8b:fe:2c:90:05:8d:44:e6:df:
                    0f:b9:c7:45:93:75:e6:f3:51:04:e5:ab:bc:fe:90:
                    60:13:19:2f:9c:af:5e:01:be:d6:9a:7e:71:61:85:
                    63:60:1e:be:6b:8e:54:69:ee:19:95:8d:8b:ea:8e:
                    97:36:bc:7b:e4:f2:f3:eb:e8:78:c7:6b:54:2a:78:
                    e7:38:e3:bd:40:0f:10:43:5d:69:28:ba:29:1c:e5:
                    36:23:4f:72:55:7b:25:c9:ba:6e:20:3d:dc:13:e6:
                    ba:34:f9:42:30:24:2c:09:b9:77:18:48:13:4a:dd:
                    69:86:01:71:5f:95:02:10:32:8f:4f:c9:47:fb:d1:
                    9d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B2:26:F9:A3:D9:56:F5:00:39:63:DD:49:0C:8C:94:D0:19:9B:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/303de2bd-cddb-39e6-9eda-0df1b956c6d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:ef:e7:26:8c:df:d3:d1:14:1e:81:a3:71:4f:18:d8:2c:55:
         63:24:46:f0:d4:11:ec:23:2c:62:83:1d:ee:3e:1d:3b:7f:83:
         98:87:da:a9:df:40:2f:5e:7a:c1:b7:ad:bd:fc:bf:17:bc:55:
         3e:47:19:b5:2d:14:02:db:cc:55:6f:b7:01:7c:e0:6f:28:8b:
         45:56:23:e0:18:ab:cd:6e:6c:b5:02:c2:db:21:97:4c:1f:91:
         d4:92:32:55:55:27:ff:a6:96:d6:91:f8:d4:19:ca:9d:28:8a:
         a4:d1:ed:d0:5a:ac:71:bd:55:a5:ee:67:45:78:15:be:5f:0d:
         d0:ba:e5:5d:53:5d:42:6e:e9:64:b7:61:45:26:24:4d:96:4d:
         fb:c5:53:11:c7:26:9f:d0:1d:33:68:c1:b1:0e:d8:ba:cd:19:
         ee:12:93:03:c1:4f:8d:10:aa:d9:0e:5d:12:ca:3a:5a:8d:1f:
         8b:b2:97:d6:87:99:6e:24:b3:4b:f3:33:19:fe:dc:4e:69:25:
         be:3e:d2:9a:92:bf:44:eb:dd:cf:bc:2f:47:e2:99:48:82:cc:
         ee:97:0d:d8:75:a0:50:97:43:45:55:a7:27:a0:4a:a3:5e:0b:
         0c:bb:19:cf:1b:9f:b4:fa:ff:05:71:95:8d:f3:c5:93:d2:84:
         6a:b8:90:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnupx4iZ+bZHYiuEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk
YmRkZjQ2YTItZWQzNS00MTY5LWIxYzgtNWM2ZmVlNGFlN2FmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9VQPbegZz+tbnCvDQOXqwP7+qqH1sTz4OZHG
UKu+2w6+wGXS5yPV3ALDOcvC5DvxkMrMa65yAS99bdiYNPDD2CVWmwxPzpmo1rt7
ethRLpYhB+2ymJ7DZa1CT2AYvrXHAGTYw9Jxf6KylXRzfvAD1TcgGnwXqLXfKcAZ
jluL/iyQBY1E5t8PucdFk3Xm81EE5au8/pBgExkvnK9eAb7Wmn5xYYVjYB6+a45U
ae4ZlY2L6o6XNrx75PLz6+h4x2tUKnjnOOO9QA8QQ11pKLopHOU2I09yVXslybpu
ID3cE+a6NPlCMCQsCbl3GEgTSt1phgFxX5UCEDKPT8lH+9GdmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC+yJvmj2Vb1ADlj3UkMjJTQGZs9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzAzZGUyYmQtY2RkYi0z
OWU2LTllZGEtMGRmMWI5NTZjNmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEop8wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL/v5yaM39PRFB6Bo3FPGNgsVWMkRvDUEewjLGKDHe4+HTt/g5iH2qnf
QC9eesG3rb38vxe8VT5HGbUtFALbzFVvtwF84G8oi0VWI+AYq81ubLUCwtshl0wf
kdSSMlVVJ/+mltaR+NQZyp0oiqTR7dBarHG9VaXuZ0V4Fb5fDdC65V1TXUJu6WS3
YUUmJE2WTfvFUxHHJp/QHTNowbEO2LrNGe4SkwPBT40QqtkOXRLKOlqNH4uyl9aH
mW4ks0vzMxn+3E5pJb4+0pqSv0Tr3c+8L0fimUiCzO6XDdh1oFCXQ0VVpyegSqNe
Cwy7Gc8bn7T6/wVxlY3zxZPShGq4kAU=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:57:29 2025 by rpki-client