Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/83c33423-b213-399a-8a9f-eef413132ad2.roa
File:                     83c33423-b213-399a-8a9f-eef413132ad2.roa (raw, json)
Hash identifier:          ek/8VjoGFfTJNVPx7/gFFgjzWFCXnN1GSrPWUV5mDxc=
Subject key identifier:   C9:7A:43:8E:F9:02:25:19:24:8D:D6:8F:5A:F0:E7:BF:43:49:EA:D3
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849071C0C86A295117F81A98E40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/83c33423-b213-399a-8a9f-eef413132ad2.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        162.158.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1c:0c:86:a2:95:11:7f:81:a9:8e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=5487e323-5f4e-4481-a0b1-463e34fbce78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5b:85:31:8f:e1:51:3a:3a:bc:40:2e:ed:13:
                    76:ac:5f:5a:1e:5d:19:2a:b3:18:e3:d1:25:97:dd:
                    ee:ea:05:40:1f:38:70:02:a3:44:fd:7b:4c:75:84:
                    20:1d:59:4d:c7:a2:d5:81:37:b8:83:ab:b2:7c:1f:
                    2f:ba:89:a4:82:ad:ac:d9:5e:61:11:87:47:70:50:
                    c6:2f:f5:07:a2:d3:57:95:b2:10:56:dc:26:ce:c3:
                    41:71:06:1b:fa:21:ad:e9:a8:e3:22:ea:19:5f:44:
                    18:63:3d:38:5d:ef:33:f0:10:4c:69:92:2c:39:9b:
                    82:e8:8c:a7:00:22:a7:7d:ff:84:aa:3a:22:ab:44:
                    9f:0b:51:3a:7f:c0:33:bc:3d:aa:6c:bf:f5:58:05:
                    db:22:d2:40:f6:68:2d:16:c9:af:0d:5a:11:c8:3f:
                    ba:24:01:64:d3:d1:02:fd:3b:04:7e:2a:92:64:9d:
                    13:c5:87:24:4f:d7:0a:b6:06:27:c7:4f:88:b2:ed:
                    f7:72:b2:bb:11:8d:54:d8:17:b8:6d:77:c5:24:06:
                    84:65:8c:fb:9d:b6:4b:81:09:fe:bb:fe:cc:c2:b6:
                    89:4b:42:a5:93:98:6f:8b:f7:99:fc:4c:22:9c:d0:
                    d9:54:2f:61:02:e9:8e:d9:ba:9b:14:34:a6:fc:b0:
                    a7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7A:43:8E:F9:02:25:19:24:8D:D6:8F:5A:F0:E7:BF:43:49:EA:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/83c33423-b213-399a-8a9f-eef413132ad2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:05:c8:73:60:df:ee:bd:5a:db:ad:05:b7:0c:1b:da:68:e6:
         f1:3e:9e:57:80:61:eb:57:6b:08:9f:62:36:ee:02:a8:f9:c5:
         c4:59:30:e5:c8:c4:e5:b6:56:6f:72:24:6c:f6:cf:2d:d9:f6:
         eb:12:08:84:8b:dd:90:b5:e2:44:d4:be:40:a7:b7:07:0e:a3:
         42:f8:ae:12:38:52:60:fa:00:43:ba:cf:4d:fe:f0:a7:4b:68:
         4b:e7:6f:73:80:65:ac:8b:35:6c:9c:b3:87:1f:bd:79:fb:7a:
         f2:4b:fd:39:b2:3c:ea:8e:dd:f1:48:2e:23:19:af:03:33:43:
         24:ac:e6:18:be:70:ed:94:d3:06:f6:ad:16:59:4a:7c:57:00:
         4c:8d:7d:8d:84:ce:35:2b:8d:a2:9f:e4:0c:8b:f6:e5:d2:53:
         c6:65:d3:97:da:6a:0c:bd:3f:c3:01:47:77:05:de:25:22:82:
         8b:2f:4d:b5:9d:25:8a:d9:64:56:45:0c:43:9e:0a:47:75:4e:
         11:b3:33:ea:24:02:ee:73:f4:0a:6a:30:eb:8a:77:4c:d1:6c:
         c2:5c:f6:b7:47:d8:ed:55:ef:e4:ab:de:26:e1:bf:b3:c5:33:
         53:80:01:86:dc:6f:0f:2d:a7:50:f3:98:c7:70:be:19:07:80:
         d7:95:d1:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHHAyGopURf4GpjkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk
NTQ4N2UzMjMtNWY0ZS00NDgxLWEwYjEtNDYzZTM0ZmJjZTc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiluFMY/hUTo6vEAu7RN2rF9aHl0ZKrMY49El
l93u6gVAHzhwAqNE/XtMdYQgHVlNx6LVgTe4g6uyfB8vuomkgq2s2V5hEYdHcFDG
L/UHotNXlbIQVtwmzsNBcQYb+iGt6ajjIuoZX0QYYz04Xe8z8BBMaZIsOZuC6Iyn
ACKnff+Eqjoiq0SfC1E6f8AzvD2qbL/1WAXbItJA9mgtFsmvDVoRyD+6JAFk09EC
/TsEfiqSZJ0TxYckT9cKtgYnx0+Isu33crK7EY1U2Be4bXfFJAaEZYz7nbZLgQn+
u/7MwraJS0Klk5hvi/eZ/EwinNDZVC9hAumO2bqbFDSm/LCn4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMl6Q475AiUZJI3Wj1rw579DSerTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODNjMzM0MjMtYjIxMy0z
OTlhLThhOWYtZWVmNDEzMTMyYWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop5iMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMIFyHNg3+69WtutBbcMG9po5vE+nleAYetXawifYjbuAqj5xcRZMOXI
xOW2Vm9yJGz2zy3Z9usSCISL3ZC14kTUvkCntwcOo0L4rhI4UmD6AEO6z03+8KdL
aEvnb3OAZayLNWycs4cfvXn7evJL/TmyPOqO3fFILiMZrwMzQySs5hi+cO2U0wb2
rRZZSnxXAEyNfY2EzjUrjaKf5AyL9uXSU8Zl05faagy9P8MBR3cF3iUigosvTbWd
JYrZZFZFDEOeCkd1ThGzM+okAu5z9ApqMOuKd0zRbMJc9rdH2O1V7+Sr3ibhv7PF
M1OAAYbcbw8tp1DzmMdwvhkHgNeV0UA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:54:53 2025 by rpki-client