Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/95f9e9b0-0090-341d-b163-990b5c9a781c.roa
File:                     95f9e9b0-0090-341d-b163-990b5c9a781c.roa (raw, json)
Hash identifier:          qeWyfQR351ass53ogNZTyZkbMrFxtSODNrvZuqvsBvc=
Subject key identifier:   82:8C:37:A4:39:AD:8D:47:3E:E0:8B:06:BA:7A:3E:C5:DA:D9:40:E2
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285840EF83E687FEDBD5939CA3F300
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/95f9e9b0-0090-341d-b163-990b5c9a781c.roa
Signing time:             Thu 16 Feb 2023 12:00:00 +0000
ROA not before:           Thu 16 Feb 2023 12:00:00 +0000
ROA not after:            Sun 19 Sep 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        162.158.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:ef:83:e6:87:fe:db:d5:93:9c:a3:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 16 12:00:00 2023 GMT
            Not After : Sep 19 04:00:00 2027 GMT
        Subject: CN=860da454-7a98-4d90-bafc-a849d77668f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3c:9e:1d:b1:6c:35:86:41:9c:1e:82:96:e7:
                    ad:84:24:9a:30:4e:2e:cd:48:bb:bc:98:d6:63:6d:
                    cf:12:63:21:be:bc:69:8e:ab:29:4e:87:a9:df:af:
                    0d:58:71:ff:f3:ab:b6:8b:71:eb:7f:75:aa:0d:11:
                    fa:54:21:c4:00:f1:38:45:c8:06:0e:a8:6f:64:ac:
                    ba:77:89:17:f5:5d:a3:2f:69:76:d9:29:e9:b2:ec:
                    fd:d8:51:a9:81:38:03:21:9e:c0:1e:67:11:ad:ed:
                    64:4d:8a:a0:40:ea:16:8d:1b:52:ca:9c:1a:0f:99:
                    af:f5:cc:58:4d:8b:86:d2:a0:d7:e7:40:07:08:90:
                    af:51:b3:e5:38:36:ef:87:8f:15:50:98:61:ed:6a:
                    cd:d2:75:d2:88:75:db:52:6f:f0:97:cd:8c:d6:63:
                    33:45:71:d9:e9:bb:a1:60:40:9f:80:2a:4c:5b:79:
                    30:da:2a:33:7f:49:6f:d1:b3:41:4a:b6:48:c2:01:
                    a9:1f:80:f9:51:3a:b4:94:63:15:d5:e9:69:56:56:
                    e9:a2:37:e4:72:aa:93:7c:71:64:13:4e:1e:6d:f8:
                    1f:84:e4:b3:0a:ec:2c:15:1f:3d:63:52:7f:32:6c:
                    b6:03:53:41:61:e1:48:8e:7c:60:86:f1:e9:a1:6f:
                    c1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:8C:37:A4:39:AD:8D:47:3E:E0:8B:06:BA:7A:3E:C5:DA:D9:40:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/95f9e9b0-0090-341d-b163-990b5c9a781c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:e6:53:08:e4:e8:80:e1:e5:02:11:2a:c3:7b:27:cf:46:06:
         70:bc:5c:20:9a:b2:91:51:20:2b:ae:64:3f:6e:e0:44:f1:3d:
         f5:7b:3c:d0:c2:6d:44:79:a9:18:e7:91:3b:2e:be:55:d9:11:
         86:a2:cb:c5:8a:84:91:54:d8:6a:80:ae:25:96:13:52:42:e4:
         a1:f4:eb:a5:98:11:99:a6:7e:ec:98:34:a5:78:8a:84:6c:5e:
         ec:bb:4d:48:4c:ef:b0:16:38:d8:a4:bb:f6:e0:55:35:62:e4:
         50:2c:59:77:a5:3b:7f:8e:f2:2b:bd:78:c3:c9:fa:e4:b2:2a:
         b0:84:b1:01:01:ca:7a:ee:3c:0c:12:36:37:06:86:a6:66:53:
         70:a6:20:23:29:8d:26:bb:be:09:72:e9:3f:72:3e:6e:d4:c1:
         00:1f:da:f5:04:06:d3:9d:7a:9b:48:00:50:55:e5:7b:3f:2b:
         5f:8c:23:0b:61:a6:4e:63:02:48:4c:bb:10:c2:27:e2:e4:ad:
         5f:67:37:e9:fa:03:91:3e:08:16:90:b2:d9:2d:8d:6e:a5:39:
         e4:09:dd:8f:33:43:51:32:dc:33:a2:1c:eb:83:bb:f2:e3:11:
         fe:7f:96:d2:8d:c3:62:21:1c:1f:fd:7c:a9:c5:c3:52:ef:e1:
         af:e9:65:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:20 2024 by rpki-client on console-fra.rpki-client.org