Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c8ddc0a6-5680-3f87-b1f7-d22dc06f5de6.roa
File:                     c8ddc0a6-5680-3f87-b1f7-d22dc06f5de6.roa (raw, json)
Hash identifier:          Ey96PNo74chEipgmhk81H/w+yNz/ak6ku2Y3Ia+8XbI=
Subject key identifier:   B1:48:C6:44:9D:01:15:48:7D:00:EC:C2:63:C1:43:A6:62:86:FD:51
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E7BA8E21F2E9083D21097720
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c8ddc0a6-5680-3f87-b1f7-d22dc06f5de6.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     13335
IP address blocks:        162.158.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:8e:21:f2:e9:08:3d:21:09:77:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=3e8564dd-1b12-44ed-a206-39efd686c73e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0a:d8:00:9f:a3:d0:ec:bd:ce:b6:d7:74:47:
                    30:51:f6:f8:ee:6f:49:90:30:42:dd:35:d2:0f:25:
                    b1:55:51:a8:bb:fa:98:75:69:a6:8a:af:62:32:ac:
                    fe:5b:1d:ff:ab:45:c7:ed:2c:1a:2a:a1:15:6d:f3:
                    35:0d:be:82:71:fb:9b:dc:4f:31:0f:1a:ca:30:58:
                    7c:8f:d6:8e:24:6e:6e:61:58:f3:6d:3d:3a:23:38:
                    93:ed:52:b6:89:6b:3b:b2:97:6d:95:0f:54:98:28:
                    b2:e4:89:74:a7:35:64:e8:c4:55:f1:75:71:f2:9b:
                    4e:b8:9d:80:e8:ff:3e:bc:61:be:35:25:e0:c5:d7:
                    9e:65:9a:95:7c:7d:49:1d:35:df:1a:1a:26:6f:b6:
                    6d:87:e4:1e:bd:87:3f:db:9f:20:27:40:e3:40:e8:
                    a6:5a:b1:04:53:da:50:f0:0a:f3:8b:1f:ee:9a:b9:
                    49:d9:27:84:16:77:8f:41:96:55:31:e7:3a:fc:e0:
                    7c:67:41:69:e5:99:e8:31:3a:54:29:0c:39:a8:07:
                    d9:da:1a:43:05:3e:8a:8a:23:cf:9f:ce:dd:25:f2:
                    42:40:11:8b:55:5a:4c:43:72:9a:8b:08:31:2f:1d:
                    eb:6f:85:a1:0b:1a:c4:5d:b3:f9:94:ee:f1:4f:21:
                    54:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:48:C6:44:9D:01:15:48:7D:00:EC:C2:63:C1:43:A6:62:86:FD:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c8ddc0a6-5680-3f87-b1f7-d22dc06f5de6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:ee:3c:ec:8a:61:ac:6a:a5:04:3b:75:93:aa:1a:05:08:8e:
         63:b3:db:c9:f2:de:c8:e5:96:e5:33:7a:fb:a2:9b:2d:5d:2c:
         89:bc:55:48:48:19:b1:61:d7:ff:b2:0a:95:92:6f:c1:a3:a9:
         9f:3c:0d:d9:a7:44:49:8c:77:ee:4f:98:aa:fe:90:51:5e:cc:
         8c:8c:c7:81:82:c3:ea:f1:95:be:a3:dc:18:4b:ad:f3:60:bc:
         42:ed:68:5a:7f:64:58:df:d2:53:d5:56:06:38:16:99:70:8a:
         90:20:9a:f7:29:57:db:aa:1a:6d:c6:ce:14:c2:26:f7:9f:1f:
         47:23:c4:7d:f7:23:fb:a4:60:31:cc:c4:1a:46:59:87:94:9d:
         c2:57:3b:5e:e9:9b:69:ed:47:e9:99:88:22:ac:7c:95:ee:65:
         02:47:23:1b:a5:50:c2:ee:b2:25:6b:56:48:1e:92:8e:5d:c2:
         a5:79:3d:65:d9:af:a3:8a:ad:0f:b6:31:61:e9:59:32:fa:84:
         0e:8c:e5:a4:b8:0c:94:06:ef:24:22:54:53:46:dd:2d:cd:e7:
         73:09:63:03:a3:b7:34:06:35:9e:c0:b3:71:fd:9f:cc:71:24:
         9b:29:e1:02:05:71:56:25:b0:50:b1:85:7f:55:b1:5f:7b:93:
         9a:3a:8c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:47:17 2025 by rpki-client