Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b7e83bf-ca96-3357-9525-9c3f50cde774.roa
File:                     9b7e83bf-ca96-3357-9525-9c3f50cde774.roa (raw, json)
Hash identifier:          kR2KKVSVjn4fu095vnHNtLZGCg8VPsBH7d3uY74dvFI=
Subject key identifier:   98:2A:A4:6E:11:7E:37:90:BC:94:52:93:2A:B1:92:79:62:FB:CB:64
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E6550DDB8B23A68B81E8D680
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b7e83bf-ca96-3357-9525-9c3f50cde774.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     13335
IP address blocks:        162.158.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:55:0d:db:8b:23:a6:8b:81:e8:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=b64a5da8-aa5f-4b53-a994-fcd043c617d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b6:f0:ef:a7:93:0b:1d:5d:b3:fb:3c:f0:0c:
                    66:bf:a6:5d:ae:f1:e4:9e:c4:e9:12:1a:85:74:89:
                    a5:00:3a:e6:2d:00:61:6d:60:cd:8f:ac:1e:d7:9e:
                    f3:8d:a7:93:e3:69:45:b0:84:ca:ae:f7:19:d4:42:
                    84:e5:9e:f0:c4:44:c8:59:f5:63:90:00:61:75:a1:
                    8a:dd:5d:f6:d5:c2:fc:c0:31:b5:c2:f7:ca:2b:f8:
                    ad:17:d9:fd:69:71:41:3a:85:03:aa:3b:d7:71:cb:
                    f0:08:9d:7f:6e:5f:a1:bf:7e:a3:6c:ee:f9:0d:f3:
                    39:3e:92:d1:31:7c:32:45:0f:29:8e:fa:5e:19:ab:
                    2f:14:c2:b4:f9:36:ee:03:d5:5b:b8:5f:08:7c:c6:
                    ea:24:43:71:fa:ee:35:bc:c8:f7:bc:59:f9:a5:b0:
                    73:c5:01:76:7c:6e:90:f1:28:37:ed:45:c4:92:64:
                    70:f8:09:8e:46:40:97:dc:54:40:98:3f:4e:1f:3d:
                    da:7b:34:7f:27:5d:77:02:23:89:9d:58:84:42:a5:
                    99:4a:21:39:92:b9:8a:1c:ec:5a:1e:0f:45:01:02:
                    34:5f:20:69:4a:fc:8b:82:b2:c2:af:0d:a5:f5:a6:
                    f3:69:e3:75:91:a8:68:55:29:fa:c3:3a:a6:ec:70:
                    99:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:2A:A4:6E:11:7E:37:90:BC:94:52:93:2A:B1:92:79:62:FB:CB:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b7e83bf-ca96-3357-9525-9c3f50cde774.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:92:c3:d2:f6:c7:ef:e3:ee:6f:9f:7a:41:49:73:28:3b:36:
         e3:fd:c0:38:ff:18:de:58:95:d3:9e:43:16:22:4b:87:75:1f:
         ef:16:fc:33:80:67:be:5d:00:68:f5:d2:61:ef:9f:9e:d5:27:
         04:80:71:c3:10:06:0d:5f:28:ab:54:15:93:84:bd:59:c0:5f:
         e9:c3:6f:1e:0d:e9:cf:78:81:94:3a:e0:1b:07:77:ea:47:a8:
         6b:cf:ae:eb:91:6f:4f:b2:ac:e0:2c:20:7c:0f:02:7f:67:d2:
         ae:e3:5f:5d:6d:60:24:05:1e:e5:22:00:3e:3d:68:45:f6:9f:
         a3:cf:5a:6e:9d:89:fa:5e:bd:e1:53:9a:de:e4:f8:9e:9a:7e:
         19:3e:5f:58:0a:ea:90:f5:b0:f7:25:ff:87:da:02:3a:18:bb:
         6f:ba:e7:e9:0f:4a:05:93:bc:8e:51:19:8e:8a:37:ec:04:09:
         17:bb:04:b8:23:e3:f6:3c:4f:3d:99:7e:cc:6b:19:6e:6a:c7:
         69:e0:95:26:b4:df:90:63:64:d5:c6:85:b8:10:43:fe:5a:1f:
         50:b4:e0:15:52:42:20:35:9f:b5:48:07:f8:16:09:7f:6c:12:
         b6:b0:f9:8c:50:0c:1d:97:da:60:8d:7d:96:4d:a0:f3:1a:61:
         ee:7a:42:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVQ3biyOmi4Ho1oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk
YjY0YTVkYTgtYWE1Zi00YjUzLWE5OTQtZmNkMDQzYzYxN2Q3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7bw76eTCx1ds/s88Axmv6ZdrvHknsTpEhqF
dImlADrmLQBhbWDNj6we157zjaeT42lFsITKrvcZ1EKE5Z7wxETIWfVjkABhdaGK
3V321cL8wDG1wvfKK/itF9n9aXFBOoUDqjvXccvwCJ1/bl+hv36jbO75DfM5PpLR
MXwyRQ8pjvpeGasvFMK0+TbuA9VbuF8IfMbqJENx+u41vMj3vFn5pbBzxQF2fG6Q
8Sg37UXEkmRw+AmORkCX3FRAmD9OHz3aezR/J113AiOJnViEQqWZSiE5krmKHOxa
Hg9FAQI0XyBpSvyLgrLCrw2l9abzaeN1kahoVSn6wzqm7HCZuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJgqpG4RfjeQvJRSkyqxknli+8tkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWI3ZTgzYmYtY2E5Ni0z
MzU3LTk1MjUtOWMzZjUwY2RlNzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop6aMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHKSw9L2x+/j7m+fekFJcyg7NuP9wDj/GN5YldOeQxYiS4d1H+8W/DOA
Z75dAGj10mHvn57VJwSAccMQBg1fKKtUFZOEvVnAX+nDbx4N6c94gZQ64BsHd+pH
qGvPruuRb0+yrOAsIHwPAn9n0q7jX11tYCQFHuUiAD49aEX2n6PPWm6difpeveFT
mt7k+J6afhk+X1gK6pD1sPcl/4faAjoYu2+65+kPSgWTvI5RGY6KN+wECRe7BLgj
4/Y8Tz2ZfsxrGW5qx2nglSa035BjZNXGhbgQQ/5aH1C04BVSQiA1n7VIB/gWCX9s
Eraw+YxQDB2X2mCNfZZNoPMaYe56QgM=
-----END CERTIFICATE-----
Generated at Thu Jun 5 19:12:52 2025 by rpki-client