Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85191697-4486-34b1-b948-f32f6e1d6be5.roa
File:                     85191697-4486-34b1-b948-f32f6e1d6be5.roa (raw, json)
Hash identifier:          5MD/t0YBeeID7G2URMznkMD8VfdmX+hxvyy4G4lDY04=
Subject key identifier:   05:AA:0B:90:AF:A3:DA:70:36:85:69:18:B1:02:35:EC:79:7D:DF:DA
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E7BA9ABD1E5E50034409D980
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85191697-4486-34b1-b948-f32f6e1d6be5.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     13335
IP address blocks:        162.158.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:9a:bd:1e:5e:50:03:44:09:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=02d5d9a2-eaef-41ea-86cb-1fbbff65d4ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ae:e9:fe:f8:fa:51:09:ef:6c:2f:98:92:ab:
                    af:14:8f:4c:08:0a:6c:d3:4e:40:74:b7:d7:a3:5e:
                    59:a2:6c:ef:5b:e8:2d:ea:a7:0b:ba:74:cc:75:eb:
                    1e:6b:69:aa:48:c9:d4:17:8a:37:a7:fa:77:a6:da:
                    5a:56:94:4c:eb:b9:e7:a8:5d:bf:f1:e8:4f:50:c5:
                    84:ae:05:89:85:07:9e:a8:f2:fc:c0:96:a8:dd:b3:
                    aa:a8:36:e1:1c:9a:23:b7:35:ef:04:67:24:1c:f5:
                    5e:62:eb:a4:d0:62:cc:f5:34:bc:0d:b9:e7:7a:95:
                    bb:57:88:ca:ea:41:2d:98:26:4a:74:db:34:86:b7:
                    9d:29:7f:56:1c:e5:c0:9e:1a:e5:12:c8:51:ea:92:
                    51:30:db:cf:50:7f:00:12:0a:88:5e:26:bf:e6:72:
                    e6:3f:16:b8:de:a5:c1:3f:c6:8b:8a:44:c6:43:74:
                    1b:ba:bb:36:d0:5a:4b:8a:df:01:5d:0e:13:b7:9b:
                    fb:60:02:1e:fb:e2:ee:07:78:ce:e7:67:80:2d:1e:
                    f7:86:b7:19:c3:bb:6f:c2:92:e2:df:91:e9:81:ff:
                    b6:ad:14:69:3e:67:75:a2:af:10:e9:ef:71:cd:25:
                    63:d3:ab:95:e0:0e:f8:0a:e9:17:f2:22:55:52:35:
                    fe:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AA:0B:90:AF:A3:DA:70:36:85:69:18:B1:02:35:EC:79:7D:DF:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85191697-4486-34b1-b948-f32f6e1d6be5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:64:36:71:95:cd:53:5d:36:01:ff:15:d8:73:90:f1:38:68:
         96:8c:91:5e:e4:e7:ab:f6:ee:dd:7f:3a:2d:fb:13:85:2f:c4:
         9c:3c:d4:17:7c:87:ce:8b:fa:00:93:96:50:f6:73:63:b1:77:
         03:fe:b8:28:39:3e:46:25:45:9b:b4:a7:49:bb:44:b9:28:f0:
         60:d6:60:0e:25:ea:34:33:6b:2f:19:94:17:0d:0e:57:e1:50:
         6b:6d:92:05:8b:50:8e:94:9f:f4:27:71:bd:a0:5e:ae:ba:3e:
         44:72:e9:33:73:e1:89:25:8a:a9:4a:47:0d:45:78:21:eb:f2:
         01:81:f3:8b:02:82:00:4b:db:a4:f7:05:46:e9:e5:f5:26:c1:
         dd:2c:a5:cb:8a:a3:a1:63:c5:61:55:31:43:c6:e8:d0:18:84:
         28:69:fe:8b:08:09:e3:bd:98:f3:69:80:26:3b:fa:4f:53:e2:
         23:98:79:d9:3e:0e:dd:70:5e:5d:a6:7d:f8:ff:07:95:b9:3b:
         7e:e6:11:85:2b:8d:44:27:28:a8:ff:f3:b4:81:eb:ee:ef:9d:
         1e:33:59:b2:77:d4:58:6f:96:70:bb:b0:6d:f7:0a:28:29:74:
         7f:6b:ee:8b:c2:88:d6:8e:18:32:1f:c3:e8:bb:ba:dc:bd:00:
         b0:73:25:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnupq9Hl5QA0QJ2YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk
MDJkNWQ5YTItZWFlZi00MWVhLTg2Y2ItMWZiYmZmNjVkNGVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkq7p/vj6UQnvbC+YkquvFI9MCAps005AdLfX
o15ZomzvW+gt6qcLunTMdesea2mqSMnUF4o3p/p3ptpaVpRM67nnqF2/8ehPUMWE
rgWJhQeeqPL8wJao3bOqqDbhHJojtzXvBGckHPVeYuuk0GLM9TS8DbnnepW7V4jK
6kEtmCZKdNs0hredKX9WHOXAnhrlEshR6pJRMNvPUH8AEgqIXia/5nLmPxa43qXB
P8aLikTGQ3Qburs20FpLit8BXQ4Tt5v7YAIe++LuB3jO52eALR73hrcZw7tvwpLi
35Hpgf+2rRRpPmd1oq8Q6e9xzSVj06uV4A74CukX8iJVUjX+WwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAWqC5Cvo9pwNoVpGLECNex5fd/aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODUxOTE2OTctNDQ4Ni0z
NGIxLWI5NDgtZjMyZjZlMWQ2YmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCop7kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACFkNnGVzVNdNgH/FdhzkPE4aJaMkV7k56v27t1/Oi37E4UvxJw81Bd8
h86L+gCTllD2c2OxdwP+uCg5PkYlRZu0p0m7RLko8GDWYA4l6jQzay8ZlBcNDlfh
UGttkgWLUI6Un/Qncb2gXq66PkRy6TNz4YkliqlKRw1FeCHr8gGB84sCggBL26T3
BUbp5fUmwd0spcuKo6FjxWFVMUPG6NAYhChp/osICeO9mPNpgCY7+k9T4iOYedk+
Dt1wXl2mffj/B5W5O37mEYUrjUQnKKj/87SB6+7vnR4zWbJ31FhvlnC7sG33Cigp
dH9r7ovCiNaOGDIfw+i7uty9ALBzJfg=
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:51:23 2025 by rpki-client