Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/366d3ed8-8ca5-35d7-a8e2-6f098a23c486.roa
File:                     366d3ed8-8ca5-35d7-a8e2-6f098a23c486.roa (raw, json)
Hash identifier:          rDmgBsJPf8eo1vQX7YynHu19OX24uBxpqHN947SoVWM=
Subject key identifier:   F0:0D:59:AD:43:0D:EC:7B:FC:3E:E8:AB:E5:A8:FE:9F:96:EF:52:CA
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E655008FAF48989B560B7580
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/366d3ed8-8ca5-35d7-a8e2-6f098a23c486.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     13335
IP address blocks:        162.158.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:55:00:8f:af:48:98:9b:56:0b:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=9ad45cf6-cf96-4d16-b9f4-622a8b1db418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ae:b2:6a:67:10:30:7a:fb:a2:12:d3:80:50:
                    b8:66:bc:78:71:cb:ca:55:08:3b:69:ff:c2:5d:2b:
                    3c:7d:03:2e:ea:a2:01:81:84:2c:04:e2:45:76:42:
                    44:2b:fc:98:3b:97:ec:8f:13:18:59:6e:18:7e:be:
                    ac:4c:c3:d9:7f:02:e0:d1:cb:b8:de:98:ab:ae:b8:
                    e2:3c:a6:ab:53:05:57:12:cf:c8:27:1d:83:29:4f:
                    c5:e5:1c:45:37:1c:6b:84:99:a3:82:f9:78:bd:1a:
                    7d:40:d3:84:ef:86:23:85:76:2c:2f:73:dd:d9:0f:
                    66:fc:d3:43:91:c4:be:0d:63:73:85:3a:f8:e5:56:
                    3a:ea:30:52:7f:98:be:2a:09:f4:4a:9a:87:4f:2a:
                    16:36:96:bc:77:23:24:1c:04:0b:f9:ad:c9:82:9e:
                    22:cb:06:94:3b:e1:fb:39:8b:55:17:4c:d6:fd:23:
                    b3:aa:3d:3a:48:22:9b:08:b4:31:77:3b:16:d4:67:
                    45:10:b9:4c:15:11:2e:d0:34:6f:37:e2:c3:24:74:
                    e3:8b:61:87:32:6b:23:39:ab:f7:25:9c:8f:7d:b9:
                    9c:7d:08:d5:55:c5:22:4f:26:b9:78:45:2c:33:44:
                    05:95:73:03:c7:10:66:b9:db:8f:06:d9:7a:9a:b4:
                    fd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:0D:59:AD:43:0D:EC:7B:FC:3E:E8:AB:E5:A8:FE:9F:96:EF:52:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/366d3ed8-8ca5-35d7-a8e2-6f098a23c486.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:39:3d:ab:33:58:69:0a:2a:5e:0f:9b:4b:5b:f9:53:2d:e8:
         11:36:1a:31:58:ab:47:b0:4a:c1:c3:6d:5b:44:87:45:c4:7d:
         70:14:c8:a5:bc:3d:83:53:53:40:e4:9a:f7:46:ad:02:ed:f5:
         f6:77:96:fe:24:a7:bf:90:d7:81:e4:69:c9:83:06:cc:db:92:
         90:71:47:09:05:1a:73:90:b8:2e:92:b2:af:42:84:87:21:07:
         95:76:cf:98:d2:d6:e9:e3:0f:d2:90:44:74:7a:0d:f8:ce:4d:
         d6:df:18:b9:2d:6a:69:f8:25:49:0b:2d:63:5e:a1:40:a1:75:
         0b:95:6d:87:41:02:5c:0f:ea:5f:a3:d8:b3:a8:71:43:2c:16:
         45:34:84:a1:6c:d1:50:f3:ec:54:ab:4a:6d:77:62:9d:1d:95:
         9d:f8:26:90:a0:57:b0:c2:4b:fd:38:be:f6:6b:f7:2a:cd:af:
         9c:04:38:7e:be:04:0c:3d:2c:19:7f:ec:18:24:b0:81:9c:78:
         38:37:71:1e:de:31:ea:42:db:9b:3b:92:e0:84:6f:67:ac:a0:
         46:48:13:33:35:24:72:4f:bf:dc:99:a4:4a:c9:6d:e2:4f:4f:
         9a:0f:08:0c:3e:f8:ee:c5:e7:22:a8:89:31:35:fd:44:49:00:
         2a:22:b2:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVQCPr0iYm1YLdYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk
OWFkNDVjZjYtY2Y5Ni00ZDE2LWI5ZjQtNjIyYThiMWRiNDE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn66yamcQMHr7ohLTgFC4Zrx4ccvKVQg7af/C
XSs8fQMu6qIBgYQsBOJFdkJEK/yYO5fsjxMYWW4Yfr6sTMPZfwLg0cu43pirrrji
PKarUwVXEs/IJx2DKU/F5RxFNxxrhJmjgvl4vRp9QNOE74YjhXYsL3Pd2Q9m/NND
kcS+DWNzhTr45VY66jBSf5i+Kgn0SpqHTyoWNpa8dyMkHAQL+a3Jgp4iywaUO+H7
OYtVF0zW/SOzqj06SCKbCLQxdzsW1GdFELlMFREu0DRvN+LDJHTji2GHMmsjOav3
JZyPfbmcfQjVVcUiTya5eEUsM0QFlXMDxxBmuduPBtl6mrT9KQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPANWa1DDex7/D7oq+Wo/p+W71LKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzY2ZDNlZDgtOGNhNS0z
NWQ3LWE4ZTItNmYwOThhMjNjNDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop6cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL45PaszWGkKKl4Pm0tb+VMt6BE2GjFYq0ewSsHDbVtEh0XEfXAUyKW8
PYNTU0DkmvdGrQLt9fZ3lv4kp7+Q14HkacmDBszbkpBxRwkFGnOQuC6Ssq9ChIch
B5V2z5jS1unjD9KQRHR6DfjOTdbfGLktamn4JUkLLWNeoUChdQuVbYdBAlwP6l+j
2LOocUMsFkU0hKFs0VDz7FSrSm13Yp0dlZ34JpCgV7DCS/04vvZr9yrNr5wEOH6+
BAw9LBl/7BgksIGceDg3cR7eMepC25s7kuCEb2esoEZIEzM1JHJPv9yZpErJbeJP
T5oPCAw++O7F5yKoiTE1/URJACoistA=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:34:24 2025 by rpki-client