Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca654ba8-15ea-3372-8d68-9faef7d19f58.roa
File:                     ca654ba8-15ea-3372-8d68-9faef7d19f58.roa (raw, json)
Hash identifier:          XER5GCZDJtPD3DhE0uEr9sEtmerMIeo8naacUdyqtbA=
Subject key identifier:   EF:F8:BD:8C:C6:7B:F9:5D:B7:BE:67:0D:72:B8:44:06:F4:4B:A8:CB
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E65505F2C63AA1C4EDBCC1C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca654ba8-15ea-3372-8d68-9faef7d19f58.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     13335
IP address blocks:        162.158.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:55:05:f2:c6:3a:a1:c4:ed:bc:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=1583e6ed-e84f-4b4d-9a99-dfbb2f338576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:38:c2:74:c9:26:4d:e7:ef:78:1d:76:7d:bf:
                    28:bb:0c:ec:dc:9d:c7:37:ac:07:25:54:2e:24:fe:
                    7a:87:cb:c2:a0:ef:62:74:e1:cc:68:60:75:de:ef:
                    6a:c6:7c:17:da:69:88:b7:61:c3:06:77:d3:1f:60:
                    f6:8b:40:08:68:de:d9:46:e7:05:95:99:05:33:48:
                    8b:f3:2b:3e:a1:a2:59:74:d1:c3:a9:90:45:33:86:
                    c7:85:0f:cd:8c:6f:3d:fd:03:c4:b0:b5:19:f0:1a:
                    42:67:b0:da:48:89:10:4f:83:87:8d:3e:19:f0:66:
                    53:2e:81:f8:ce:18:12:c7:61:97:62:d0:84:2e:26:
                    0a:fa:f8:e5:2f:72:81:d2:d4:97:60:04:8e:dc:b0:
                    df:27:ed:3e:b3:d8:13:5f:7c:2a:b0:51:b2:de:a8:
                    1c:38:ba:3e:19:4e:f7:d8:9f:c6:15:df:06:07:d3:
                    18:11:a2:05:3f:7a:9e:5c:bd:e0:66:9b:5e:0f:55:
                    3f:76:7a:de:70:28:da:9f:7a:6d:7f:9b:20:5a:d9:
                    70:a6:fa:bf:65:6b:17:e2:ef:6a:1e:ca:fb:a5:53:
                    35:85:1d:5c:6a:bd:6c:a4:9e:83:f4:30:b2:ac:b8:
                    95:9e:e5:a4:b6:b4:3c:25:51:ef:13:76:75:8d:a8:
                    32:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F8:BD:8C:C6:7B:F9:5D:B7:BE:67:0D:72:B8:44:06:F4:4B:A8:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ca654ba8-15ea-3372-8d68-9faef7d19f58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:ee:eb:20:47:2f:70:13:cf:6d:3a:1e:1e:a6:5d:02:db:16:
         85:e0:ad:ec:f9:9e:69:96:ca:a5:be:05:b3:54:ff:c6:e2:f4:
         64:fc:d1:47:27:5c:24:c7:35:05:68:5e:3f:e3:a0:e1:32:2c:
         8e:cf:43:b4:c7:0a:11:f9:6b:1b:75:12:bf:ac:1b:bf:2a:a7:
         6b:a9:2d:4e:5f:fd:17:59:e0:2f:6b:c4:88:2c:d0:0a:cb:d8:
         df:8a:a9:f9:87:c1:36:41:cb:81:98:40:70:d8:7c:d9:95:f4:
         0e:b7:23:e5:6c:58:59:a7:7e:f1:07:c3:d2:3e:1d:48:9d:e9:
         fb:ca:15:03:fe:ba:49:c4:1b:f1:c2:05:94:8c:0d:21:9b:e6:
         1e:1a:96:7a:4a:80:b3:8e:f5:d1:40:ab:73:0d:77:de:5f:a6:
         da:da:fc:ec:9d:46:ca:9f:be:07:68:87:e7:0b:41:e6:bf:31:
         6d:80:4f:ce:4b:70:3a:87:95:9a:cd:46:64:d5:87:5b:ee:af:
         20:e3:48:46:63:06:be:31:4b:0a:08:7f:d5:da:07:6a:eb:e6:
         5e:c6:66:c8:5d:90:4c:44:ef:30:09:c9:0d:5d:5b:27:3c:6c:
         cf:8e:9d:9a:1d:5d:5b:e0:37:9a:67:bd:e7:f6:ad:92:f0:da:
         20:3f:fa:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVQXyxjqhxO28wcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk
MTU4M2U2ZWQtZTg0Zi00YjRkLTlhOTktZGZiYjJmMzM4NTc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DjCdMkmTefveB12fb8ouwzs3J3HN6wHJVQu
JP56h8vCoO9idOHMaGB13u9qxnwX2mmIt2HDBnfTH2D2i0AIaN7ZRucFlZkFM0iL
8ys+oaJZdNHDqZBFM4bHhQ/NjG89/QPEsLUZ8BpCZ7DaSIkQT4OHjT4Z8GZTLoH4
zhgSx2GXYtCELiYK+vjlL3KB0tSXYASO3LDfJ+0+s9gTX3wqsFGy3qgcOLo+GU73
2J/GFd8GB9MYEaIFP3qeXL3gZpteD1U/dnrecCjan3ptf5sgWtlwpvq/ZWsX4u9q
Hsr7pVM1hR1car1spJ6D9DCyrLiVnuWktrQ8JVHvE3Z1jagyvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO/4vYzGe/ldt75nDXK4RAb0S6jLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2E2NTRiYTgtMTVlYS0z
MzcyLThkNjgtOWZhZWY3ZDE5ZjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop4OMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGvu6yBHL3ATz206Hh6mXQLbFoXgrez5nmmWyqW+BbNU/8bi9GT80Ucn
XCTHNQVoXj/joOEyLI7PQ7THChH5axt1Er+sG78qp2upLU5f/RdZ4C9rxIgs0ArL
2N+KqfmHwTZBy4GYQHDYfNmV9A63I+VsWFmnfvEHw9I+HUid6fvKFQP+uknEG/HC
BZSMDSGb5h4alnpKgLOO9dFAq3MNd95fptra/OydRsqfvgdoh+cLQea/MW2AT85L
cDqHlZrNRmTVh1vuryDjSEZjBr4xSwoIf9XaB2rr5l7GZshdkExE7zAJyQ1dWyc8
bM+OnZodXVvgN5pnvef2rZLw2iA/+j0=
-----END CERTIFICATE-----
Generated at Fri Jun 6 16:56:17 2025 by rpki-client