Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/755a72b2-297b-3165-9e6b-32805159032d.roa
File:                     755a72b2-297b-3165-9e6b-32805159032d.roa (raw, json)
Hash identifier:          PNQndl3AXp0oV1RtURVY8k9QOdaxYZMVqh89KBQlaS4=
Subject key identifier:   02:89:A2:EB:F5:30:2D:C2:DA:4E:38:89:B1:25:45:C0:39:83:A3:AC
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858473AE7D5E95340577BDAEDE1A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/755a72b2-297b-3165-9e6b-32805159032d.roa
Signing time:             Sun 15 Sep 2024 12:00:00 +0000
ROA not before:           Sun 15 Sep 2024 12:00:00 +0000
ROA not after:            Fri 19 Dec 2025 05:00:00 +0000
asID:                     13335
IP address blocks:        162.158.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:e7:d5:e9:53:40:57:7b:da:ed:e1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 15 12:00:00 2024 GMT
            Not After : Dec 19 05:00:00 2025 GMT
        Subject: CN=0f9c5003-d071-474a-b19a-c08237b77b82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:93:ad:40:49:fd:05:59:a3:75:10:5b:b7:a2:
                    fb:a2:8a:34:50:3a:3f:3d:13:83:d9:6c:f9:38:a5:
                    5c:e4:cf:ee:ca:d0:dd:3e:25:5b:70:40:bf:4a:21:
                    1c:fc:a5:60:83:c0:cf:3f:94:f3:26:f3:fd:57:ac:
                    6d:6d:5d:ef:21:95:bb:03:a6:a2:6a:28:62:95:31:
                    73:df:f1:be:1b:b6:6b:e9:a0:a4:c8:bf:3e:9a:83:
                    c2:ce:1b:5c:6e:08:f7:6f:44:97:55:c2:77:7f:56:
                    6c:be:2a:fb:2d:e9:87:80:7c:3b:bb:67:e6:42:47:
                    2a:95:c9:fb:dc:de:c9:d3:9e:41:0f:41:cf:73:5c:
                    53:f8:ee:53:91:f1:1a:f6:b2:79:75:ec:e9:f2:30:
                    f4:58:d2:92:84:e8:6b:85:a0:c6:db:0a:78:a8:92:
                    da:68:56:17:0b:83:df:ec:6f:cd:a5:af:60:5f:54:
                    d2:0b:9e:63:22:b7:74:9a:b1:03:d2:a9:a3:9c:f1:
                    70:ff:26:77:5f:9d:84:f4:bd:da:5d:80:88:b6:8d:
                    82:00:df:c8:9e:21:0f:8c:63:d1:6b:7c:59:17:61:
                    fe:0f:0a:31:e5:9e:1b:2d:6b:b5:4f:aa:70:82:34:
                    9c:47:4e:4d:c6:5b:83:84:64:38:2d:a0:7a:c4:cd:
                    b4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:89:A2:EB:F5:30:2D:C2:DA:4E:38:89:B1:25:45:C0:39:83:A3:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/755a72b2-297b-3165-9e6b-32805159032d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:8b:8d:5b:cd:cd:6a:3b:11:24:0c:d7:36:80:1a:54:05:fd:
         17:35:17:d3:52:a9:7f:62:26:4b:25:da:d6:47:a0:a0:3b:2b:
         96:fb:cd:75:94:e2:86:60:59:c5:f7:73:fc:b9:8b:5e:9b:4f:
         d1:52:9f:f4:08:de:df:85:29:a0:fc:a9:97:41:c0:15:96:d2:
         f9:0f:69:8a:21:de:e4:4e:a7:fc:bc:50:53:b4:e5:97:61:d0:
         39:b1:f5:34:63:1d:af:50:9f:30:31:e3:16:74:d2:e8:7e:f0:
         63:1a:6a:80:87:4c:29:15:3a:65:84:a1:9e:88:47:90:12:6a:
         85:30:52:e7:76:3a:53:5c:3e:eb:ec:9a:40:db:f4:cc:00:e1:
         de:7d:e0:39:8f:58:ff:ce:88:02:d6:56:7d:6f:80:6b:96:c6:
         de:11:2f:89:05:27:d9:57:d1:ad:e9:96:f1:1a:a8:da:29:36:
         1b:7b:45:cf:c7:6a:12:c9:91:b5:b9:d7:a4:ac:09:cb:13:4e:
         0c:be:a8:37:a2:a5:8a:ac:46:09:0e:39:a4:5f:6a:c0:80:2c:
         19:3a:de:a4:e5:b5:67:0c:0f:dd:71:8d:59:1d:23:04:a3:f9:
         19:1c:d6:fa:56:35:3f:09:ab:88:cd:52:bf:5d:ff:ab:8f:69:
         2a:d5:ec:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc659XpU0BXe9rt4aAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MDkxNTEyMDAwMFoXDTI1MTIxOTA1MDAwMFowLzEtMCsGA1UEAxMk
MGY5YzUwMDMtZDA3MS00NzRhLWIxOWEtYzA4MjM3Yjc3YjgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJOtQEn9BVmjdRBbt6L7ooo0UDo/PROD2Wz5
OKVc5M/uytDdPiVbcEC/SiEc/KVgg8DPP5TzJvP9V6xtbV3vIZW7A6aiaihilTFz
3/G+G7Zr6aCkyL8+moPCzhtcbgj3b0SXVcJ3f1Zsvir7LemHgHw7u2fmQkcqlcn7
3N7J055BD0HPc1xT+O5TkfEa9rJ5dezp8jD0WNKShOhrhaDG2wp4qJLaaFYXC4Pf
7G/Npa9gX1TSC55jIrd0mrED0qmjnPFw/yZ3X52E9L3aXYCIto2CAN/IniEPjGPR
a3xZF2H+Dwox5Z4bLWu1T6pwgjScR05NxluDhGQ4LaB6xM20CwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAKJouv1MC3C2k44ibElRcA5g6OsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzU1YTcyYjItMjk3Yi0z
MTY1LTllNmItMzI4MDUxNTkwMzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop7HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFyLjVvNzWo7ESQM1zaAGlQF/Rc1F9NSqX9iJksl2tZHoKA7K5b7zXWU
4oZgWcX3c/y5i16bT9FSn/QI3t+FKaD8qZdBwBWW0vkPaYoh3uROp/y8UFO05Zdh
0Dmx9TRjHa9QnzAx4xZ00uh+8GMaaoCHTCkVOmWEoZ6IR5ASaoUwUud2OlNcPuvs
mkDb9MwA4d594DmPWP/OiALWVn1vgGuWxt4RL4kFJ9lX0a3plvEaqNopNht7Rc/H
ahLJkbW516SsCcsTTgy+qDeipYqsRgkOOaRfasCALBk63qTltWcMD91xjVkdIwSj
+Rkc1vpWNT8Jq4jNUr9d/6uPaSrV7PI=
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:19:49 2025 by rpki-client