Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/47a008e5-d2c9-309b-a69c-5ceb169d394a.roa
File:                     47a008e5-d2c9-309b-a69c-5ceb169d394a.roa (raw, json)
Hash identifier:          tu2KmdWmmjKoOR/t6EuDJrfqZaVkFRCOnwLMnXH6VUY=
Subject key identifier:   D1:2F:6D:B3:91:61:D6:B7:FD:CA:86:8C:C7:E0:A8:84:19:FF:FA:9D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849088184058B8F9EF393BDAB80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/47a008e5-d2c9-309b-a69c-5ceb169d394a.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     13335
IP address blocks:        162.158.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:84:05:8b:8f:9e:f3:93:bd:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=845b974c-d57c-4cd0-ae7b-a5d0120b6a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:29:46:21:50:a2:6d:f1:5e:7b:59:75:94:39:
                    cf:e0:f8:96:dc:aa:b5:2f:52:41:00:c5:49:4d:d5:
                    67:8d:94:1e:37:0d:1d:e2:87:66:1a:97:e2:98:3d:
                    7c:02:87:34:4c:4b:8f:9e:8f:a4:62:a0:b7:9c:97:
                    00:7a:19:40:59:e2:a3:a5:52:bc:4d:ad:ef:62:7b:
                    7d:57:ee:87:bc:05:9d:a6:3d:10:f9:78:1e:52:0d:
                    67:22:4b:51:e1:0f:a7:77:9f:c3:f5:f8:46:4c:06:
                    50:85:8e:1b:86:b6:4f:79:54:f6:f1:d6:99:ad:d7:
                    b0:bc:9d:62:0f:de:2e:a2:e9:fc:78:ee:cf:dd:35:
                    0a:cc:d2:26:08:16:33:03:9e:6b:bd:e8:77:00:d0:
                    79:4d:22:66:a9:6f:8e:dc:7c:e8:b7:1f:66:a4:e8:
                    7e:98:9f:41:0f:7d:9a:ee:85:99:47:74:89:9a:9e:
                    a1:c2:c2:45:27:f6:29:8d:cf:f7:29:03:68:a3:50:
                    cc:da:a8:2a:54:5d:ad:88:c8:56:03:7e:ec:4b:45:
                    48:4a:8e:1d:d2:be:0a:2f:f6:24:21:3a:26:58:cc:
                    09:a3:0a:78:1c:e7:c5:85:66:8a:5d:1c:b2:f0:ef:
                    81:01:dd:f0:f3:58:6a:6a:27:58:ff:b9:66:64:07:
                    1b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2F:6D:B3:91:61:D6:B7:FD:CA:86:8C:C7:E0:A8:84:19:FF:FA:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/47a008e5-d2c9-309b-a69c-5ceb169d394a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:8f:90:3d:ae:c4:ef:f5:aa:4c:d9:79:4c:22:cf:ef:aa:c1:
         e9:c2:be:cc:69:64:03:50:84:5d:99:c6:87:60:9f:6b:66:06:
         ac:07:bf:c9:40:fa:e9:7d:42:b7:cb:69:79:17:cd:18:79:66:
         eb:75:b6:56:5a:47:3e:dc:cd:80:ad:05:c9:69:ea:21:44:d7:
         94:89:3b:70:cf:ca:27:3b:77:b4:e9:2f:56:70:bd:e0:2f:1b:
         da:4e:4b:32:cc:99:fc:08:67:d5:ed:01:a7:b8:79:ee:c0:f4:
         45:85:d2:1e:fd:04:f0:34:8f:1c:0d:40:f9:9b:99:79:13:11:
         f5:0b:07:2d:2c:d7:bc:30:75:7c:68:43:90:88:ca:24:36:05:
         77:29:6b:7e:bc:16:56:84:70:d1:f6:cb:fb:c7:87:7b:48:bb:
         dd:03:35:cc:07:36:dc:51:d5:0a:de:d8:ca:25:df:c8:0f:ee:
         3a:bd:9b:84:ae:1e:99:36:1e:78:79:3b:9c:29:2b:64:45:2f:
         02:b8:24:b6:3b:79:ce:a2:70:56:1e:1c:ab:9f:77:a9:79:41:
         83:f0:9d:ab:79:8b:bc:51:22:5b:8d:f1:0f:9c:48:dc:5d:ec:
         99:9c:b7:cd:43:83:b1:68:08:c7:1f:08:8c:4f:b8:3b:eb:de:
         2a:69:5b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:39:44 2025 by rpki-client