Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a6e73094-4732-3bac-9ad7-4d1de71cd095.roa
File:                     a6e73094-4732-3bac-9ad7-4d1de71cd095.roa (raw, json)
Hash identifier:          7fu9/uFF6QSEfQ/r/3ZOJJ3zijwEO1eGgGw6BeG2tPk=
Subject key identifier:   25:88:86:5E:15:F0:08:95:76:ED:C5:60:9C:84:82:7C:3B:F5:92:96
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E7BA900D1C2DCCE185EF0140
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a6e73094-4732-3bac-9ad7-4d1de71cd095.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     13335
IP address blocks:        162.159.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:90:0d:1c:2d:cc:e1:85:ef:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=e237d45a-12e2-4087-86c2-6eed8a2934c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7b:dd:96:dd:8e:9a:60:e5:9f:5b:64:e5:d2:
                    0f:2d:be:b0:4b:49:a9:b7:c2:d7:ea:22:b4:68:47:
                    78:33:af:56:ac:d7:82:29:85:00:a0:17:99:59:86:
                    df:3c:bf:68:9f:20:ae:9b:67:c4:b5:88:47:1f:5c:
                    bc:6c:76:53:c4:5e:73:77:ac:8d:97:82:49:97:ad:
                    62:cb:96:cf:e8:28:fa:05:56:dc:2b:d7:2c:03:b2:
                    dd:1b:27:0a:69:7c:42:9b:3f:c3:1d:2c:f1:55:05:
                    7a:81:a9:6d:f9:d1:15:03:1f:70:58:ed:b7:05:bd:
                    bc:ae:27:48:f0:ef:28:ac:7c:3d:c6:2d:41:4d:99:
                    f7:1b:35:a1:2f:a1:bb:55:47:0d:65:91:f3:7c:38:
                    5b:72:b3:80:e1:0c:88:2a:7c:e9:78:32:3f:bf:ae:
                    54:e9:ec:cf:22:d1:60:d7:a6:ba:a3:d2:06:13:27:
                    07:d2:9b:81:8f:93:ad:af:2c:75:af:e0:8c:25:5f:
                    3d:19:49:88:5e:1e:b2:97:51:c2:4a:85:ee:e7:08:
                    5f:f4:e7:5c:21:5d:c5:03:5c:1f:c2:23:e1:5f:6c:
                    93:ad:9d:4c:ea:cb:8f:ec:51:2b:3e:0a:d7:65:a7:
                    81:64:84:2a:6f:d2:d4:44:be:89:df:73:b4:a8:20:
                    8b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:88:86:5E:15:F0:08:95:76:ED:C5:60:9C:84:82:7C:3B:F5:92:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a6e73094-4732-3bac-9ad7-4d1de71cd095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:e1:2d:fb:e2:d7:9c:8f:7f:9d:44:28:57:88:49:2d:b4:33:
         a5:50:52:b4:80:be:4c:22:16:82:38:26:6f:1e:18:e7:5b:e1:
         46:df:33:e4:a4:74:54:f3:20:a9:da:73:07:9e:b1:dc:7b:45:
         4a:bb:68:6d:a5:3a:c9:eb:b6:62:88:5e:63:4d:7d:44:65:aa:
         85:d2:70:ea:94:4e:cd:b5:f6:97:c1:6f:cd:45:8d:02:4a:22:
         f2:10:03:96:d2:a5:1c:a8:61:ae:1b:67:e0:82:ec:f4:21:97:
         0a:c0:e0:db:c2:2b:56:91:ee:31:9b:3e:c1:ac:ca:d2:96:6e:
         b0:f1:7d:08:18:39:33:d2:4d:25:55:25:28:4b:fe:87:d5:eb:
         ae:34:a3:86:37:ef:dc:83:76:b7:b6:d0:97:fd:b9:70:8e:90:
         81:7c:7f:6f:ae:68:a3:9e:c4:12:d4:2d:41:fe:92:82:b7:93:
         33:b7:7c:de:26:62:6b:46:20:50:32:80:43:d3:1d:8d:59:61:
         dc:34:b6:dc:c2:74:ae:4b:b5:f0:29:00:88:66:6c:c8:69:ed:
         23:99:a7:9d:fc:59:af:90:ec:8e:e1:c2:e9:bc:d3:ec:7d:01:
         1e:98:b7:1d:6a:dc:5c:fc:f7:f9:c6:43:d0:fd:8d:09:c7:01:
         3a:79:05:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnupANHC3M4YXvAUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk
ZTIzN2Q0NWEtMTJlMi00MDg3LTg2YzItNmVlZDhhMjkzNGMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHvdlt2OmmDln1tk5dIPLb6wS0mpt8LX6iK0
aEd4M69WrNeCKYUAoBeZWYbfPL9onyCum2fEtYhHH1y8bHZTxF5zd6yNl4JJl61i
y5bP6Cj6BVbcK9csA7LdGycKaXxCmz/DHSzxVQV6galt+dEVAx9wWO23Bb28ridI
8O8orHw9xi1BTZn3GzWhL6G7VUcNZZHzfDhbcrOA4QyIKnzpeDI/v65U6ezPItFg
16a6o9IGEycH0puBj5Otryx1r+CMJV89GUmIXh6yl1HCSoXu5whf9OdcIV3FA1wf
wiPhX2yTrZ1M6suP7FErPgrXZaeBZIQqb9LURL6J33O0qCCLVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCWIhl4V8AiVdu3FYJyEgnw79ZKWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTZlNzMwOTQtNDczMi0z
YmFjLTlhZDctNGQxZGU3MWNkMDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop8IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH7hLfvi15yPf51EKFeISS20M6VQUrSAvkwiFoI4Jm8eGOdb4UbfM+Sk
dFTzIKnacweesdx7RUq7aG2lOsnrtmKIXmNNfURlqoXScOqUTs219pfBb81FjQJK
IvIQA5bSpRyoYa4bZ+CC7PQhlwrA4NvCK1aR7jGbPsGsytKWbrDxfQgYOTPSTSVV
JShL/ofV6640o4Y379yDdre20Jf9uXCOkIF8f2+uaKOexBLULUH+koK3kzO3fN4m
YmtGIFAygEPTHY1ZYdw0ttzCdK5LtfApAIhmbMhp7SOZp538Wa+Q7I7hwum80+x9
AR6Ytx1q3Fz89/nGQ9D9jQnHATp5Bdg=
-----END CERTIFICATE-----
Generated at Fri Jun 6 16:44:01 2025 by rpki-client