Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a171e529-be52-33c0-a394-6d7043980bdd.roa
File:                     a171e529-be52-33c0-a394-6d7043980bdd.roa (raw, json)
Hash identifier:          f6yP8FXu4ZoRDjuNqudD5Zj0nOV+4UVQtIYC+dxD5hI=
Subject key identifier:   5D:35:7D:FF:B3:F2:BE:0A:66:E5:86:5F:F7:48:99:D9:F3:F2:92:6C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584905B6CB122500BE4C0B2C1EB0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a171e529-be52-33c0-a394-6d7043980bdd.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     13335
IP address blocks:        162.158.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:cb:12:25:00:be:4c:0b:2c:1e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=e8a2cb29-f528-477d-a0be-9c69be64d8e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:29:61:3d:20:a8:55:7d:46:ce:e5:b8:0e:53:
                    4f:bd:98:2b:76:25:c2:c6:01:51:be:d3:be:98:93:
                    95:90:94:62:ef:cb:fc:22:f6:a0:48:b8:d6:2f:a4:
                    19:81:b6:de:c5:45:e3:0a:ff:a5:58:19:09:bf:10:
                    7b:db:a7:02:52:00:e3:8a:37:bc:f4:46:9a:b6:f6:
                    3f:90:c5:47:3d:32:1e:f3:e5:af:97:62:a1:75:96:
                    78:4a:e9:e9:b9:8f:96:74:23:b1:bf:fd:9f:5c:3a:
                    f4:23:3f:f9:f0:a9:d7:41:48:5a:dc:8e:06:02:95:
                    34:a9:6d:b1:6d:7b:55:2a:fe:b4:1b:e8:4c:c8:f8:
                    7b:a2:e8:3d:9d:16:4e:c0:d6:2c:5f:1e:9c:38:bd:
                    5f:6b:bc:93:76:63:9e:5c:63:de:51:13:22:1e:ac:
                    c7:59:30:6f:bf:d1:38:88:bc:e6:62:c0:28:67:13:
                    e1:6e:d4:f9:36:34:2f:d6:1c:00:05:9c:81:7b:0e:
                    f4:92:30:db:d7:3a:b7:c6:c8:1e:84:ed:e2:6d:63:
                    43:dd:b9:a3:c3:63:42:50:76:0c:82:bd:f9:6f:74:
                    06:4b:cf:21:54:79:9e:b0:f4:da:f0:30:32:f1:e5:
                    0c:5b:f3:66:e5:ba:0f:88:95:f3:4f:30:47:02:bf:
                    57:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:35:7D:FF:B3:F2:BE:0A:66:E5:86:5F:F7:48:99:D9:F3:F2:92:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a171e529-be52-33c0-a394-6d7043980bdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:97:b9:b7:35:f6:8f:e4:f3:ce:3a:2a:04:8d:6c:24:b9:2b:
         04:87:b9:33:d2:9f:e6:dc:e8:d7:90:e7:88:ca:64:95:b7:f1:
         f8:3f:34:03:8c:2d:77:de:7f:ad:b9:86:62:00:e9:c0:fe:9e:
         3f:0f:f8:00:80:fd:37:90:56:01:e7:c5:c6:eb:59:6a:61:89:
         0d:fd:1f:6e:d9:65:1b:be:5f:d9:9d:d9:fe:6e:1e:33:30:21:
         9b:77:59:fb:6a:80:f5:96:5c:dc:19:9d:ee:21:0f:0f:45:2a:
         53:7b:6c:1f:33:0d:5f:96:aa:db:91:87:d0:b6:a9:93:88:5e:
         f3:1c:ef:4b:ee:19:e4:65:ea:a9:73:19:b2:3b:99:f2:24:74:
         e2:61:17:68:c3:3d:3f:0d:da:a8:cf:59:6e:bc:f3:43:d9:55:
         12:27:71:6b:ee:e6:a4:47:ec:12:4c:b3:26:d5:76:09:65:60:
         63:41:27:7b:46:58:d8:61:33:a2:26:16:6b:47:22:66:b5:e5:
         a4:62:ff:a1:c7:4e:fb:c4:32:60:73:3c:16:2c:41:d0:22:ee:
         3d:55:99:59:8b:03:05:65:c9:c5:4f:77:37:63:48:16:07:eb:
         6c:10:65:7b:0e:e7:1a:24:21:86:ba:76:b3:a0:2e:44:15:e9:
         5e:5f:67:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:02:49 2025 by rpki-client