Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d324e68f-f60b-3c95-99a7-344b5a74f8ba.roa
File:                     d324e68f-f60b-3c95-99a7-344b5a74f8ba.roa (raw, json)
Hash identifier:          pQ9yQYPivu5MX1dEbRtjCYpzI1EsmUJEhv2B3PP4F9M=
Subject key identifier:   A4:90:7D:8C:09:6A:72:AF:0A:CD:71:C0:43:DA:23:C3:C4:16:61:18
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E7BA8DF57E9B6560FB7743E0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d324e68f-f60b-3c95-99a7-344b5a74f8ba.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     13335
IP address blocks:        162.158.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:8d:f5:7e:9b:65:60:fb:77:43:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=ec883a31-03eb-4f31-96d3-70b8e06d8ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:87:f0:97:40:84:24:bd:69:36:dd:3d:b7:20:
                    42:17:50:a2:47:1a:82:ee:66:49:9d:6b:8e:06:84:
                    84:86:a6:07:4d:d5:af:91:eb:9d:75:1d:56:85:5d:
                    7b:b1:63:00:a9:e4:ad:05:35:8e:e1:1c:68:85:5c:
                    85:3c:d2:41:1a:af:9a:54:c2:f6:cd:45:6a:2f:2a:
                    82:f4:2d:e2:94:7e:79:82:6f:65:16:fe:90:ea:a2:
                    b7:36:9a:00:97:1b:23:7c:99:06:79:46:9f:77:49:
                    fd:69:44:00:95:59:02:bb:04:3b:90:9f:f5:4c:f6:
                    54:84:1a:a4:65:16:45:80:f3:bd:67:eb:24:ac:d9:
                    c7:2d:73:e8:2f:13:ec:6d:10:46:8d:d2:94:65:48:
                    aa:7a:4f:33:d3:35:c5:7f:14:c6:17:0e:53:3f:f0:
                    02:9e:3e:32:11:99:e2:5d:de:b1:0b:20:f3:65:7e:
                    e1:a0:6b:6d:f6:54:b3:7c:db:12:10:76:1f:3b:9b:
                    c8:65:23:68:c0:a6:4f:81:ca:cd:e5:1f:0e:c3:d0:
                    ce:ee:b4:a4:c1:ca:44:9c:e4:03:79:48:a1:5f:d7:
                    97:d4:81:5e:2e:38:28:b0:11:47:1f:3a:4c:07:b1:
                    df:6d:86:ef:d2:5e:ce:0f:64:f4:e0:ae:6b:c9:72:
                    5b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:90:7D:8C:09:6A:72:AF:0A:CD:71:C0:43:DA:23:C3:C4:16:61:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d324e68f-f60b-3c95-99a7-344b5a74f8ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:0b:99:e0:d7:78:03:f5:63:16:cc:0a:2e:9f:f6:c2:dc:1d:
         63:ca:fb:45:ae:b8:3f:50:bf:6d:a6:d8:06:06:d7:97:e1:ff:
         e9:1a:c7:90:63:9b:51:8e:b8:ef:e6:df:5a:78:c5:98:5e:a9:
         22:c8:cd:4a:eb:4f:ed:5c:0f:d5:83:69:01:20:09:67:9f:16:
         29:73:1d:51:21:69:4c:41:c1:e4:2c:e8:1a:f6:56:30:1d:f9:
         66:4c:19:f1:83:fe:44:10:36:82:58:f5:65:97:12:51:dd:12:
         b8:2d:ab:ec:d1:d6:2d:77:ab:f5:49:70:86:fa:01:fa:4c:9d:
         e9:ab:76:ca:82:79:17:58:49:92:73:84:50:da:5e:d9:e3:99:
         ed:74:85:ea:ae:bb:ff:66:79:bc:de:f6:b4:67:c5:4c:9e:45:
         d3:d2:ea:2b:ec:65:12:ff:26:ba:f7:10:05:0e:ed:13:04:fb:
         c7:68:df:eb:65:ee:a6:84:da:9f:e2:59:f6:48:8c:7a:7f:c9:
         48:62:94:29:cc:6f:2d:f2:56:82:bf:63:3e:f1:4c:85:26:31:
         4a:16:67:54:16:fa:88:61:a0:f6:73:79:18:e6:b6:ca:62:c5:
         26:68:0d:b6:51:ae:ad:26:c3:61:bf:c2:76:f4:be:df:c9:f2:
         53:f7:40:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:32:35 2025 by rpki-client