Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7d82b61e-09e7-357b-9659-7222c5f00826.roa
File:                     7d82b61e-09e7-357b-9659-7222c5f00826.roa (raw, json)
Hash identifier:          SYTp0HXwlMqmrtZSjdPF3nfc3B8xZ2uNi+xG3XuaV0A=
Subject key identifier:   98:28:B6:02:4D:65:8F:1E:D5:60:A9:D2:06:BC:41:54:18:DE:A2:C7
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858473B55347B53A87815BBA9B440
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7d82b61e-09e7-357b-9659-7222c5f00826.roa
Signing time:             Sun 15 Sep 2024 12:00:00 +0000
ROA not before:           Sun 15 Sep 2024 12:00:00 +0000
ROA not after:            Fri 19 Dec 2025 05:00:00 +0000
asID:                     13335
IP address blocks:        162.159.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3b:55:34:7b:53:a8:78:15:bb:a9:b4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 15 12:00:00 2024 GMT
            Not After : Dec 19 05:00:00 2025 GMT
        Subject: CN=b94c4b21-0086-4060-bd88-6e4cf7da8a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:87:da:56:21:32:a5:c3:4b:4c:7b:70:6b:11:
                    8e:a0:ec:7c:51:86:d5:e5:c5:95:f2:9c:4c:3e:3e:
                    42:cb:46:5b:51:08:da:9f:36:8d:28:e3:56:81:c6:
                    47:cf:0d:06:38:c0:40:94:85:59:89:82:a9:ab:12:
                    96:be:54:7a:d7:c7:ad:42:d6:6d:12:e4:ba:9f:b8:
                    ea:9a:86:9c:db:26:d8:f0:ac:a5:4c:81:03:e0:40:
                    13:ad:dc:4c:d9:74:8e:90:4a:06:90:7f:7f:0e:79:
                    35:78:ca:a4:33:10:3f:a0:97:ed:c7:76:f9:65:69:
                    aa:ff:06:16:81:7c:e7:7a:6f:9c:1f:fa:98:0d:ec:
                    8f:7c:6e:7c:49:d0:70:9a:a7:62:c0:60:09:d1:ff:
                    43:4f:69:5b:65:7e:9b:d7:fb:9a:4f:e9:83:c2:be:
                    12:6c:f8:2d:fb:94:e2:a9:22:f8:a8:58:61:44:4b:
                    58:bb:63:9e:16:ee:20:f3:52:04:cf:d3:40:4f:25:
                    a1:3f:47:27:6f:29:3a:fe:55:4c:9d:d7:c7:dd:eb:
                    5a:81:55:96:d4:47:f9:2f:95:33:71:53:15:c9:bd:
                    58:f1:98:1f:c6:4f:c7:98:0b:41:67:53:84:1a:d5:
                    1f:ba:35:c2:0c:46:6a:e7:4c:26:a6:95:be:83:ad:
                    a7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:28:B6:02:4D:65:8F:1E:D5:60:A9:D2:06:BC:41:54:18:DE:A2:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7d82b61e-09e7-357b-9659-7222c5f00826.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:e0:0d:06:78:62:67:3d:85:8b:98:37:9d:76:4a:5a:dd:8a:
         69:1e:5f:5b:ed:0a:7d:f3:25:8c:67:cc:d5:7c:8e:f9:18:10:
         70:e9:75:5a:25:04:4b:e4:17:d9:fd:46:b4:eb:19:d0:27:e6:
         da:b3:a7:d4:db:7c:99:a9:da:3a:76:d0:ac:4e:1d:72:2c:fb:
         93:9a:b8:fc:20:b5:13:27:b3:cf:f9:72:19:8d:a7:e1:29:73:
         2a:2f:0a:c0:09:f3:9d:a4:ea:87:be:7e:61:78:13:c3:ca:25:
         ac:53:0f:be:0f:a6:23:f6:1c:a1:bb:b6:56:b8:46:28:a4:bb:
         04:89:70:8d:c3:fb:19:c7:aa:e9:81:34:5a:dc:ca:13:a9:9b:
         f0:ac:f6:2c:7b:22:a9:d5:36:b5:04:25:1c:9d:ff:09:69:60:
         0f:44:a4:0f:a9:b5:35:1c:42:bc:a5:f6:c0:b5:ca:a6:7b:7e:
         0c:45:a3:ce:91:5a:fe:29:e4:44:63:da:b6:db:41:3a:a5:ee:
         d0:3f:44:f1:b4:d7:29:0c:13:cf:db:f3:cd:1b:2e:b3:34:a5:
         f8:18:1d:23:34:77:45:fe:8d:77:bd:7f:97:54:39:99:66:25:
         75:d3:a2:d5:5a:11:9a:27:88:ba:d1:10:87:7a:a0:6f:3e:88:
         30:5d:cd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:10:58 2025 by rpki-client