Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3e9db569-05fd-3df0-b509-e6860a391bfb.roa
File:                     3e9db569-05fd-3df0-b509-e6860a391bfb.roa (raw, json)
Hash identifier:          BnKsFdvowQ4HI477supYMhRCVdffqIRhuwKDdioNfbc=
Subject key identifier:   06:B4:2F:57:E4:20:E2:24:B1:62:FE:66:18:D9:8F:A1:73:E7:B0:2E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858490881817A76AAACABB41EF300
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3e9db569-05fd-3df0-b509-e6860a391bfb.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     13335
IP address blocks:        162.158.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:81:7a:76:aa:ac:ab:b4:1e:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=ab910374-41a7-4d87-b72c-f618431798cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6b:e6:71:d8:56:b7:e2:a6:be:b7:ee:a0:7b:
                    5c:3c:31:0f:d0:53:ab:49:a3:f0:a7:95:a3:c9:84:
                    d6:14:6c:f2:ea:0e:09:06:a0:8f:a3:18:8b:99:ee:
                    08:ad:cc:a1:e7:80:7b:b5:c3:b0:de:58:a3:42:2d:
                    b1:04:b5:ca:7a:9a:98:e7:7d:da:69:1b:9d:5b:60:
                    e9:82:fe:a5:75:e2:db:ee:ad:c8:f4:aa:06:c3:8e:
                    25:cd:d3:6e:8d:29:9a:60:7a:c5:e6:53:a0:cd:af:
                    b4:aa:aa:1f:3f:2a:10:81:5f:d1:1b:87:83:45:ae:
                    d1:fc:16:be:1f:d5:8e:4b:b7:74:d6:db:f7:4a:68:
                    df:6a:9c:85:66:ef:46:4d:c4:64:e0:97:21:67:ca:
                    92:0b:70:c0:7e:c0:8b:9e:f3:22:c2:c9:d2:fa:ee:
                    cd:7f:06:9a:ae:03:62:ae:14:ba:dc:e7:e6:b3:4b:
                    ad:48:7b:26:d3:74:a9:97:d3:2d:a1:54:85:a3:bb:
                    ae:df:ab:c9:da:75:c7:86:04:27:bf:c6:9e:9e:31:
                    5a:70:48:69:60:56:e2:8d:90:2d:80:86:4d:82:9a:
                    03:7f:ab:d8:4f:ad:25:e4:8f:88:4a:0d:12:df:69:
                    f1:fb:fc:16:58:fc:9f:88:ab:c8:fa:98:66:03:65:
                    cf:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B4:2F:57:E4:20:E2:24:B1:62:FE:66:18:D9:8F:A1:73:E7:B0:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3e9db569-05fd-3df0-b509-e6860a391bfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:fa:e2:b4:e9:73:b4:d1:5b:94:f5:bb:81:7d:05:c6:f8:59:
         5b:19:49:b0:93:19:99:f7:9a:9c:79:21:1c:58:f1:77:73:96:
         9f:e3:af:7a:09:76:53:10:7e:73:3c:b8:66:b9:45:f7:b4:7f:
         47:1c:bd:dc:02:2d:58:3f:bf:e9:22:d0:99:4a:9d:71:ef:b0:
         85:ff:28:2b:53:80:28:11:68:4e:88:ae:1c:60:3d:00:80:d6:
         72:77:54:13:db:53:0b:14:4d:ee:ef:40:e1:36:0b:52:af:fb:
         b0:e5:25:da:3b:82:cd:ef:c8:58:0c:d6:ce:50:a9:70:cb:79:
         ec:cc:cd:98:b2:53:4b:9f:32:1e:3a:38:2a:aa:64:c2:03:30:
         e9:9e:0f:db:e0:44:84:19:67:7d:b7:bb:ea:d0:56:fb:81:95:
         b3:8e:31:49:c0:fa:fe:df:77:4c:7d:44:74:65:72:94:7c:5d:
         2f:07:38:9a:b7:9d:64:59:5f:e0:e2:f3:8c:c5:f9:e9:9e:74:
         c4:d7:e7:93:66:48:cd:e5:c5:a0:bb:07:9d:3c:0c:23:94:d9:
         b4:fd:82:64:97:1e:17:b8:8c:d6:9a:27:e7:b8:7d:81:96:ab:
         46:fe:1a:0c:01:b3:0f:b0:42:9e:59:aa:f3:f2:65:ce:83:88:
         5e:8c:88:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:48:57 2025 by rpki-client