Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8876314-a08a-3914-be3b-8dd1916ceaed.roa
File:                     b8876314-a08a-3914-be3b-8dd1916ceaed.roa (raw, json)
Hash identifier:          MidAZHuQuDv+moXV1MnrHdbE0l2M3Uql/4WVkaM5Lrk=
Subject key identifier:   BF:D4:3A:4F:20:35:30:CA:7B:7A:90:10:AA:9D:C3:05:71:2D:98:83
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858473AD1D0A8CC2CEE6D541FC3B0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8876314-a08a-3914-be3b-8dd1916ceaed.roa
Signing time:             Sun 15 Sep 2024 12:00:00 +0000
ROA not before:           Sun 15 Sep 2024 12:00:00 +0000
ROA not after:            Fri 19 Dec 2025 05:00:00 +0000
asID:                     13335
IP address blocks:        162.158.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:d1:d0:a8:cc:2c:ee:6d:54:1f:c3:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 15 12:00:00 2024 GMT
            Not After : Dec 19 05:00:00 2025 GMT
        Subject: CN=750a383f-9591-4b20-a051-d574c3032fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5f:04:80:45:2b:f4:20:de:39:3d:7c:72:d9:
                    64:e3:e6:6b:3b:82:e8:88:98:74:8b:91:1a:e7:b9:
                    86:f1:34:88:c7:9a:8c:56:fa:3a:d6:83:be:46:20:
                    c4:43:3f:0c:2b:96:0b:c1:4d:cf:fb:52:cd:76:38:
                    f8:c1:48:6a:09:e5:6e:3a:9a:5a:5e:a4:74:dd:8f:
                    8e:43:71:34:a2:f3:fb:f3:16:8b:6b:b6:d8:7c:ae:
                    e8:ca:4c:1f:a3:5e:d6:da:0a:a6:93:f0:8e:a8:5a:
                    3c:9e:81:f2:4a:6a:e4:c9:00:30:0e:d7:6a:c6:b8:
                    c1:13:39:f5:65:c9:f8:0d:d1:96:9c:37:15:b5:f2:
                    42:0e:2e:78:db:cd:ce:12:d4:ac:9b:c5:c9:07:39:
                    e1:c6:80:3f:76:9e:01:e8:3a:ac:79:10:8a:ea:53:
                    34:e6:68:84:38:ea:22:5f:60:91:95:57:fc:a9:41:
                    69:b5:ef:8b:72:75:75:14:11:91:84:e7:b0:3d:a0:
                    71:56:f3:22:16:bd:22:2a:e9:09:f7:67:59:f9:35:
                    e8:a0:72:aa:bc:ad:fb:e3:54:e3:b0:63:df:35:38:
                    e7:4f:bb:49:00:92:0b:c6:7e:77:22:8e:00:c0:d3:
                    97:ec:7b:7d:4f:41:ed:a3:74:49:59:fd:ee:78:1a:
                    c7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D4:3A:4F:20:35:30:CA:7B:7A:90:10:AA:9D:C3:05:71:2D:98:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8876314-a08a-3914-be3b-8dd1916ceaed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:95:1b:76:1f:6f:dc:b7:e1:b7:ea:ab:c2:c6:6c:77:23:00:
         83:23:eb:e0:e8:cd:4f:a6:03:4f:cf:16:2e:7e:e0:72:dc:72:
         5a:21:18:eb:99:96:cd:23:05:b6:d1:d7:9c:ec:50:6e:e3:6f:
         22:4a:6b:56:ef:35:21:5e:4b:34:cc:e8:74:c1:3b:64:8a:21:
         eb:46:98:16:bf:8c:dc:71:ae:80:cc:4e:4d:c1:0f:72:75:69:
         18:98:84:ab:70:4b:ae:d7:86:7f:46:12:3a:28:84:60:62:a4:
         9b:f1:6e:45:5d:57:f3:c2:1a:33:a4:2b:f5:1b:f3:2b:61:f7:
         94:03:b7:f8:dc:e8:bc:6c:3a:a7:fd:ba:ca:c6:98:da:1b:56:
         16:21:56:5a:11:5b:6b:19:66:91:41:54:a2:49:97:0b:fa:5b:
         02:39:83:af:f2:0c:6b:c2:30:23:3a:03:32:6d:19:a0:a7:3f:
         3f:33:38:88:c2:9c:c6:78:23:44:b2:c0:8e:c7:92:ee:b9:f4:
         da:d9:f6:81:d1:53:ca:aa:44:fb:9d:8a:52:23:a9:e2:f6:4f:
         6b:a3:f9:5c:8d:2a:a8:b5:8f:4d:6f:91:de:9c:b8:61:14:13:
         08:0c:54:10:1b:5b:ef:dc:86:53:09:e3:49:91:be:d7:df:fd:
         14:57:21:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:12 2025 by rpki-client