Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49c0ac3a-99f4-31f9-a836-3bbab206f572.roa
File:                     49c0ac3a-99f4-31f9-a836-3bbab206f572.roa (raw, json)
Hash identifier:          1d7FQCNNqLhvIW5tjudrmf15T5ytT46Q+J9g3QLr5LY=
Subject key identifier:   9F:B6:EA:78:1C:6B:CF:5C:04:C1:D1:2C:AA:AF:E8:30:3D:BE:07:01
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E7BA9A7E364587ED89269340
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49c0ac3a-99f4-31f9-a836-3bbab206f572.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     13335
IP address blocks:        162.158.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:9a:7e:36:45:87:ed:89:26:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=ff62b091-aa71-4515-9cff-4cb2b27b40ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6d:bc:4a:e0:07:6f:cd:04:7a:e8:ed:65:0f:
                    b9:8b:bf:bd:34:ee:ee:34:29:40:79:80:0a:85:0f:
                    a3:83:b3:b0:80:87:90:14:5f:4e:73:7a:59:e2:ff:
                    34:ca:3f:07:3e:13:d6:88:50:1b:3c:f6:1f:2e:26:
                    a0:37:9e:55:29:9d:e3:5e:e0:d0:26:a4:35:46:d7:
                    8f:9d:77:16:03:af:32:96:19:56:bf:b8:e3:a8:bc:
                    a7:f9:6d:4d:d1:ed:05:39:89:4c:5a:95:c9:73:01:
                    54:16:7d:10:73:43:f5:bf:b9:d7:39:0a:82:3a:82:
                    14:2f:fb:a8:44:6c:b0:68:ac:25:69:eb:cc:ad:8b:
                    ab:fa:e6:21:75:c4:1b:63:b1:f8:4f:d1:a4:e2:1d:
                    f9:93:ba:51:cf:78:11:9b:35:c6:26:18:58:10:ca:
                    db:f6:37:79:46:25:b2:d9:9f:49:bc:6d:d0:43:36:
                    2b:5d:c9:42:0c:08:72:ce:56:f9:7d:6b:06:0e:46:
                    1c:4f:51:21:c0:e5:7a:76:54:25:25:1b:09:39:d4:
                    49:dc:71:f7:c2:dc:cd:28:42:22:3c:a0:35:6a:f1:
                    78:cc:66:9d:f7:f8:3a:fb:3c:cc:22:01:27:b8:fa:
                    66:6e:e2:f0:5f:42:d0:a7:c1:2a:21:41:b6:c2:b7:
                    da:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B6:EA:78:1C:6B:CF:5C:04:C1:D1:2C:AA:AF:E8:30:3D:BE:07:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49c0ac3a-99f4-31f9-a836-3bbab206f572.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:e7:b9:6d:e2:4e:0a:96:70:05:d5:09:43:d5:fc:1b:3d:52:
         e8:69:14:4e:65:b4:0c:a8:1e:81:ee:5b:44:03:95:eb:d5:2a:
         6c:5e:23:45:4a:3b:36:e3:3f:89:d1:0d:60:86:f4:78:6a:e9:
         08:56:9c:86:03:06:14:7a:75:06:f2:61:3e:ac:4d:38:09:f0:
         a3:5f:a5:6c:6f:29:14:27:57:3d:da:99:04:aa:d1:ff:e5:5d:
         02:c5:45:a6:ce:ff:f2:07:23:e4:67:d6:a1:09:59:fc:9c:27:
         3c:6c:62:ed:66:a9:77:54:44:1d:78:49:ee:bd:40:2a:ad:a1:
         be:35:2f:df:d6:ea:d1:f7:d5:35:b1:d8:02:ef:af:11:6b:b6:
         80:30:2c:d3:49:bf:cd:ec:44:f8:2c:b7:e0:96:a6:1e:9a:0b:
         c2:9c:94:69:9c:66:2c:8f:d4:11:2a:ee:ca:a3:a9:5a:b2:88:
         eb:7c:6a:28:88:5d:b8:3d:99:ee:44:f4:06:d1:77:d4:dc:8b:
         06:ac:12:1b:6d:f4:fc:19:ee:d0:b6:6f:4b:ec:07:91:f0:5b:
         f7:1f:0a:05:d1:6f:12:14:de:fa:cd:54:4c:96:38:8c:ab:02:
         96:83:61:47:bd:23:d0:9f:56:70:41:6b:76:ec:bc:05:18:1b:
         88:9d:09:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:45:24 2025 by rpki-client