Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49c0ac3a-99f4-31f9-a836-3bbab206f572.roa
File:                     49c0ac3a-99f4-31f9-a836-3bbab206f572.roa (raw, json)
Hash identifier:          66y41t350H1j+Hi3pc0+QHuP/NlUBZYjJPAnqb+qLp4=
Subject key identifier:   A1:A5:DF:7B:31:C6:09:24:AC:8D:03:8A:C7:E7:81:DF:1F:43:EB:7B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584908818443DD6DB265E1A23500
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49c0ac3a-99f4-31f9-a836-3bbab206f572.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     13335
IP address blocks:        162.158.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:84:43:dd:6d:b2:65:e1:a2:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=590604e2-47e7-4768-8190-81169bc90956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6f:58:85:49:71:23:9e:6a:a9:e0:d3:5c:e1:
                    2c:5f:4a:a6:11:2e:d2:cc:e7:aa:02:a5:76:56:e4:
                    2c:75:77:ee:0f:81:1a:dc:53:c0:35:ae:a4:c4:55:
                    22:2c:12:22:a2:7b:92:76:73:3e:e1:82:e6:49:d6:
                    57:1c:1d:c9:b2:cb:2c:04:03:c3:71:13:24:f0:83:
                    5c:ae:bd:28:6f:9e:28:d4:46:6f:9e:3e:a8:60:cb:
                    3c:05:e6:75:1d:88:e2:8c:f8:aa:95:e0:4f:3a:f4:
                    d9:cf:05:d2:da:88:09:ca:ea:83:c5:5c:4c:06:e8:
                    d2:57:9a:8c:bf:04:03:68:3a:f2:e0:25:9c:1a:97:
                    f5:ad:3a:20:3c:8d:5a:f1:0a:3b:72:4c:32:d4:3a:
                    e3:7a:d0:4b:3e:ba:60:53:b6:4b:05:4b:5e:a3:16:
                    6e:18:07:3e:76:15:da:78:e2:f5:85:e5:e3:47:07:
                    e4:4f:75:e4:b4:bf:0d:f2:fd:4c:e3:11:56:71:3c:
                    7c:5b:5e:33:ed:32:70:60:a5:d3:90:93:5d:67:ab:
                    98:24:3a:a9:97:6d:31:83:c9:e3:bb:f0:80:26:08:
                    2d:5e:98:3c:3f:cc:41:c5:92:2c:4d:00:f1:0f:51:
                    1a:9f:f7:f5:a9:64:4b:a8:b9:df:2f:3e:bc:55:e6:
                    07:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A5:DF:7B:31:C6:09:24:AC:8D:03:8A:C7:E7:81:DF:1F:43:EB:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49c0ac3a-99f4-31f9-a836-3bbab206f572.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:da:50:28:d1:bb:91:ab:07:61:e3:c0:96:b4:2c:5c:9f:0b:
         27:26:ae:6d:3b:03:3a:b8:6b:77:e7:dc:b9:94:66:ff:7b:dd:
         f4:52:25:69:cf:5f:b0:b5:fa:09:04:46:7b:7f:d6:75:91:6b:
         8c:55:8c:7b:78:6c:5d:8b:3d:62:3d:7b:8a:1c:49:84:b3:7e:
         c1:8e:10:32:19:be:02:5f:ca:2c:00:a9:38:63:f1:19:66:0c:
         19:38:2a:d9:eb:69:2d:37:d6:91:44:93:f7:19:0c:35:30:5a:
         b5:32:a0:bc:8d:d6:a3:7d:4d:24:ab:38:03:ba:f6:6d:51:a2:
         b1:42:a3:55:6d:7e:44:4d:55:80:ee:ee:eb:af:7a:f5:95:49:
         fd:fd:25:71:9c:09:e7:92:88:9e:be:7f:a6:f7:71:7c:cc:6a:
         75:cb:23:eb:7b:03:a9:d3:8f:80:db:d1:f7:3e:2a:13:8e:c9:
         b4:4b:fd:0d:12:5d:9d:d3:42:bb:13:7e:e2:b1:50:dc:d6:bb:
         68:a9:92:24:a5:45:0b:e3:9e:23:1f:b3:8d:70:9f:9c:d3:07:
         61:78:78:7f:8d:22:ae:7b:97:52:28:6a:35:06:d5:f1:af:9a:
         e0:b6:a8:ce:2a:9a:2b:c0:ca:bd:cf:48:83:b2:d6:92:e3:47:
         df:69:5b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:54:43 2025 by rpki-client