Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/93942620-6e58-34f9-8727-36c9ee78f8b3.roa
File:                     93942620-6e58-34f9-8727-36c9ee78f8b3.roa (raw, json)
Hash identifier:          Mon+TLRwGfl/aTk40mVAYa6dRLdmWbQgNxXZ8bA1ur8=
Subject key identifier:   BA:18:9D:A0:AE:DB:E2:A6:A8:C2:E3:A9:4C:73:0B:AF:51:CE:75:03
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E7BA8EC1E9EE93975E36CD00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/93942620-6e58-34f9-8727-36c9ee78f8b3.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     13335
IP address blocks:        162.158.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:8e:c1:e9:ee:93:97:5e:36:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=e1c63977-658e-4648-9538-3634ce52cd4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9d:6c:1f:15:cd:fc:9d:c8:9e:51:c4:58:94:
                    19:77:5b:0d:6b:19:24:43:59:d2:21:07:f2:3b:56:
                    d8:bb:23:8b:e8:1d:60:52:57:9e:29:d1:65:ed:ac:
                    39:50:89:2d:4b:37:33:e2:da:69:da:2d:50:04:e5:
                    2c:d5:6d:74:f5:61:b9:f5:2c:e0:b3:96:5c:5f:4c:
                    52:8c:4f:f8:b2:72:e5:a6:5b:e0:1f:ff:2e:92:69:
                    0d:96:ef:d2:ec:97:02:5b:53:1e:d6:e8:60:c7:f6:
                    8a:71:f5:7b:19:f2:31:92:bc:21:71:b6:76:80:5e:
                    b7:d8:66:4d:79:b3:47:db:d7:f3:98:22:f1:9f:25:
                    2c:76:41:71:56:fb:4f:8d:e0:42:75:65:5c:0f:5a:
                    cb:dc:3b:3b:d7:7b:d1:b1:34:79:95:6b:93:49:d9:
                    a0:27:f4:e3:c1:27:d9:58:fc:c9:5b:ea:7e:8e:9e:
                    43:60:f4:f0:12:36:b3:60:05:01:cc:a7:b0:be:2e:
                    0c:87:c5:26:06:af:01:8f:e6:db:fd:f3:a6:c4:2c:
                    94:da:5c:f6:27:f3:ba:95:d2:a7:3f:a7:45:c1:d5:
                    1c:c7:3c:85:b9:8d:05:d1:44:12:2c:ed:b1:d6:d8:
                    4e:a2:4f:c3:fc:8c:3a:b4:33:20:b3:89:f6:9a:7a:
                    c7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:18:9D:A0:AE:DB:E2:A6:A8:C2:E3:A9:4C:73:0B:AF:51:CE:75:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/93942620-6e58-34f9-8727-36c9ee78f8b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:22:28:fa:d2:bf:f1:15:9a:9d:f9:7d:6a:85:5f:8b:1f:39:
         c4:03:55:85:9e:b4:ef:cc:7b:af:c7:bd:62:aa:83:11:55:aa:
         ea:da:90:e4:92:ba:de:77:1b:19:4a:67:77:cb:6d:85:80:51:
         18:58:86:dc:98:17:7d:80:7e:f6:30:82:49:f1:bb:5f:08:83:
         7a:0d:4e:54:35:50:93:9d:c1:9c:bf:28:f2:e0:04:6d:e2:36:
         2b:a4:05:fc:29:72:3c:12:4f:f2:95:af:a0:7c:ca:38:fc:53:
         0f:19:35:5c:4e:cf:e2:7d:3d:fb:c8:d8:2d:9e:02:11:00:9b:
         74:99:4b:d4:a4:38:d1:16:6e:79:38:e2:ea:35:59:78:f8:29:
         49:03:fe:c1:9b:0e:fd:1a:fd:83:7d:5b:56:8e:e9:b3:46:11:
         e2:bf:e2:05:72:ae:04:9d:af:4d:d7:54:dd:0b:ee:46:2f:be:
         ce:3d:6f:45:11:1e:4b:cc:34:56:e7:48:6d:5f:8f:1c:bc:75:
         ef:af:a6:50:2b:74:1f:b5:43:9a:b9:2a:3f:10:df:02:ff:7d:
         86:fe:68:e5:41:16:86:d4:d0:c6:d7:aa:4f:b2:5f:80:85:91:
         a1:86:5d:00:e4:74:f1:83:23:38:5d:35:ec:1c:42:56:50:cd:
         64:c1:b4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:59:57 2025 by rpki-client