Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/95e8fb19-03cc-32ea-8e89-dbff60710216.roa
File:                     95e8fb19-03cc-32ea-8e89-dbff60710216.roa (raw, json)
Hash identifier:          uqhpvis+gdQV21UyyKs4zurc52uuy+T224sr6m1GwZs=
Subject key identifier:   0D:EC:78:11:B4:44:F4:4E:DF:35:55:2F:93:F4:4F:2B:11:1D:BC:52
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E65508A92EA32C9A8D6666B0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/95e8fb19-03cc-32ea-8e89-dbff60710216.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     13335
IP address blocks:        162.158.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:55:08:a9:2e:a3:2c:9a:8d:66:66:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=41388d48-fb21-451c-8d27-049d98d7b4b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:75:9b:06:26:4e:e8:60:66:bd:7a:37:21:7a:
                    54:b4:ee:98:b2:ac:82:c2:8f:34:c0:73:35:07:18:
                    92:52:45:43:8c:54:39:54:d5:59:18:e3:15:10:2b:
                    6f:7d:af:8c:aa:28:d8:b2:d0:83:b6:23:09:03:b3:
                    2a:5a:a6:91:30:11:97:ed:45:dd:ec:55:c4:16:17:
                    95:8c:1d:c1:e6:e8:27:39:14:23:ec:66:59:5d:60:
                    bb:bd:99:b3:7b:78:27:e8:82:fe:78:a5:bf:5f:53:
                    42:47:12:4b:3a:70:c8:6f:46:ab:d5:66:f1:72:50:
                    24:14:13:26:ec:59:7a:25:21:7a:21:d4:79:0f:79:
                    ad:be:3e:cc:a4:d5:8d:4a:c6:0d:38:be:46:2f:89:
                    8e:d6:26:1c:2d:1e:fd:27:0a:1a:a5:30:30:67:36:
                    0a:ae:74:14:6d:af:56:1f:83:01:8a:8c:ba:f5:b4:
                    84:6f:54:2d:43:5d:f5:c1:ae:79:7e:b9:fa:19:9d:
                    0d:81:ec:6e:2e:82:8e:9f:b5:c7:ed:75:26:cb:09:
                    80:83:40:46:56:f7:f1:bd:32:43:e4:10:92:a2:54:
                    fa:0b:a3:f6:3f:dc:2f:f5:bb:52:bf:05:51:b2:4c:
                    88:84:83:71:63:a0:d1:52:e5:1b:ff:66:6d:96:ba:
                    b8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:EC:78:11:B4:44:F4:4E:DF:35:55:2F:93:F4:4F:2B:11:1D:BC:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/95e8fb19-03cc-32ea-8e89-dbff60710216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:ea:ad:28:35:10:14:7a:f6:c6:fa:c0:72:4d:2a:3d:50:c6:
         bc:e6:8b:14:03:73:fb:e4:5e:83:7e:f5:5d:a8:a8:cb:aa:61:
         a9:86:cd:08:e6:98:53:9a:cd:79:3b:16:8b:40:51:a2:7c:66:
         1c:4a:df:e1:1a:49:49:22:1f:52:02:2a:7b:6e:84:4c:5d:8e:
         4e:f6:99:e7:a2:20:8f:3c:e0:19:b0:b6:65:2d:a1:6e:8f:f8:
         3a:3c:b9:3f:2e:12:b3:42:43:80:97:f7:c2:2d:d6:38:70:ec:
         f5:cf:6a:19:05:85:a9:8b:b5:b4:52:a3:77:58:9e:02:a5:db:
         6a:22:6c:0c:29:b4:c7:27:45:82:14:04:df:48:38:41:5d:01:
         a1:28:e2:e9:ef:c5:cd:e1:7b:a6:ce:cb:eb:02:3c:8c:37:e0:
         0c:37:c3:10:c6:1b:93:1a:c9:af:dc:d2:6b:6b:a6:85:71:0d:
         aa:85:62:0e:fd:00:81:85:e5:e9:11:00:f2:7e:e2:7a:b7:88:
         1e:fc:a3:2c:19:f2:2f:9a:6f:8c:45:f7:c9:b9:09:4c:92:53:
         b6:7f:32:5b:29:90:4a:98:8f:2d:b2:52:60:48:b8:1b:b6:29:
         c2:c5:61:6c:f2:12:0a:15:c5:7a:83:7d:0d:d7:a9:5d:71:6b:
         7d:44:7a:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVQipLqMsmo1mZrAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk
NDEzODhkNDgtZmIyMS00NTFjLThkMjctMDQ5ZDk4ZDdiNGI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknWbBiZO6GBmvXo3IXpUtO6YsqyCwo80wHM1
BxiSUkVDjFQ5VNVZGOMVECtvfa+MqijYstCDtiMJA7MqWqaRMBGX7UXd7FXEFheV
jB3B5ugnORQj7GZZXWC7vZmze3gn6IL+eKW/X1NCRxJLOnDIb0ar1WbxclAkFBMm
7Fl6JSF6IdR5D3mtvj7MpNWNSsYNOL5GL4mO1iYcLR79JwoapTAwZzYKrnQUba9W
H4MBioy69bSEb1QtQ131wa55frn6GZ0NgexuLoKOn7XH7XUmywmAg0BGVvfxvTJD
5BCSolT6C6P2P9wv9btSvwVRskyIhINxY6DRUuUb/2Ztlrq4sQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA3seBG0RPRO3zVVL5P0TysRHbxSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTVlOGZiMTktMDNjYy0z
MmVhLThlODktZGJmZjYwNzEwMjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop65MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEDqrSg1EBR69sb6wHJNKj1QxrzmixQDc/vkXoN+9V2oqMuqYamGzQjm
mFOazXk7FotAUaJ8ZhxK3+EaSUkiH1ICKntuhExdjk72meeiII884BmwtmUtoW6P
+Do8uT8uErNCQ4CX98It1jhw7PXPahkFhamLtbRSo3dYngKl22oibAwptMcnRYIU
BN9IOEFdAaEo4unvxc3he6bOy+sCPIw34Aw3wxDGG5Maya/c0mtrpoVxDaqFYg79
AIGF5ekRAPJ+4nq3iB78oywZ8i+ab4xF98m5CUySU7Z/MlspkEqYjy2yUmBIuBu2
KcLFYWzyEgoVxXqDfQ3XqV1xa31Eer4=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:45:53 2025 by rpki-client