Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/db41c8be-c233-323c-9e1e-feb859eb7422.roa
File:                     db41c8be-c233-323c-9e1e-feb859eb7422.roa (raw, json)
Hash identifier:          /rVJ+HsyyTnc4TkvM7bE0ygZIHqRMsQIJZkYF5zMAho=
Subject key identifier:   ED:29:D2:48:AC:52:70:9D:59:3C:00:67:CD:7B:78:C5:81:79:72:44
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849088189DB9393CD678DF22180
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/db41c8be-c233-323c-9e1e-feb859eb7422.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     13335
IP address blocks:        162.159.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:89:db:93:93:cd:67:8d:f2:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=f274d6b1-2dc2-45cd-b876-3d25638165fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:87:fe:40:8e:76:77:3d:cd:06:f9:89:7e:a0:
                    02:3e:2a:35:57:f4:88:b9:65:15:44:02:96:0d:46:
                    b3:88:9d:af:67:0d:43:5d:ed:12:55:0b:e7:39:f9:
                    ab:90:2c:92:27:f5:8e:8d:71:bb:00:20:f0:31:95:
                    52:f7:51:a3:90:9e:e4:2b:83:20:11:1b:e5:42:61:
                    81:59:d5:6f:c4:bb:6b:6d:90:ee:01:3e:f5:99:18:
                    cc:13:92:87:f1:f8:6f:48:19:bd:b3:41:15:b2:3f:
                    52:15:cd:e5:75:84:13:ea:98:de:fd:5d:17:77:93:
                    59:7d:e8:2f:51:2b:ac:92:c6:8d:a8:3d:0c:37:0a:
                    29:01:6e:50:2a:89:78:bb:de:3e:e5:e0:b2:a8:4a:
                    35:40:ac:74:61:1b:d8:2f:06:55:95:4e:c9:a6:e6:
                    c6:e1:ce:55:2e:57:3f:71:40:c1:24:db:99:16:9b:
                    2f:5e:6e:64:c4:01:c8:3a:56:4b:c0:39:1b:2e:6c:
                    26:4a:3a:63:bb:e8:82:9c:23:98:32:7b:dc:3e:71:
                    bc:0e:36:cf:3f:be:5d:ce:bd:26:d3:4b:0a:e5:9f:
                    64:33:80:ac:9b:b7:8f:05:70:21:ef:22:30:b4:32:
                    71:4c:d8:96:3c:3b:3b:c4:12:0c:da:3f:1d:c3:64:
                    d0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:29:D2:48:AC:52:70:9D:59:3C:00:67:CD:7B:78:C5:81:79:72:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/db41c8be-c233-323c-9e1e-feb859eb7422.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:5f:1b:c5:67:47:9c:67:71:42:da:76:72:10:84:fe:2a:9b:
         f3:76:76:e2:8e:01:12:0b:d4:05:17:31:02:fb:b8:0d:fb:63:
         ee:49:19:8a:2b:b4:f1:65:44:48:35:e7:bb:97:74:ce:5d:6a:
         41:ce:8d:73:3d:37:3e:54:95:ea:28:97:4d:59:d3:cc:1c:bc:
         22:a9:b5:b8:ef:ee:a6:2f:39:b7:9f:9e:e8:bb:e2:02:57:f9:
         66:23:ea:f7:b4:5d:44:30:72:a6:37:91:2e:48:8d:52:6e:c0:
         37:66:8f:db:b1:86:3a:bd:22:37:42:ae:e3:a8:f5:d4:63:ad:
         d9:3c:30:b8:d4:35:5d:df:b6:ee:32:88:09:90:44:ff:46:9a:
         9c:fc:79:5c:c9:00:e8:99:80:5d:00:9a:4e:73:bd:f5:81:9a:
         f4:61:c0:5f:8b:d0:b5:0b:d6:b0:34:04:59:b4:ba:eb:29:f3:
         3c:36:c9:d8:d7:7d:49:23:13:95:13:44:49:45:1d:22:e6:52:
         ac:c5:78:b1:42:c5:58:22:86:5e:6f:f9:bc:f8:fc:9e:a2:2f:
         5d:08:1a:28:b5:36:e9:02:6f:31:18:7e:cc:76:55:58:5a:4d:
         55:17:ff:e7:99:c9:45:a9:ed:b4:1e:e6:3e:35:93:3c:6b:39:
         7f:a5:66:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgYnbk5PNZ43yIYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk
ZjI3NGQ2YjEtMmRjMi00NWNkLWI4NzYtM2QyNTYzODE2NWZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYf+QI52dz3NBvmJfqACPio1V/SIuWUVRAKW
DUaziJ2vZw1DXe0SVQvnOfmrkCySJ/WOjXG7ACDwMZVS91GjkJ7kK4MgERvlQmGB
WdVvxLtrbZDuAT71mRjME5KH8fhvSBm9s0EVsj9SFc3ldYQT6pje/V0Xd5NZfegv
USusksaNqD0MNwopAW5QKol4u94+5eCyqEo1QKx0YRvYLwZVlU7JpubG4c5VLlc/
cUDBJNuZFpsvXm5kxAHIOlZLwDkbLmwmSjpju+iCnCOYMnvcPnG8DjbPP75dzr0m
00sK5Z9kM4Csm7ePBXAh7yIwtDJxTNiWPDs7xBIM2j8dw2TQrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO0p0kisUnCdWTwAZ817eMWBeXJEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGI0MWM4YmUtYzIzMy0z
MjNjLTllMWUtZmViODU5ZWI3NDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop/OMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIZfG8VnR5xncULadnIQhP4qm/N2duKOARIL1AUXMQL7uA37Y+5JGYor
tPFlREg157uXdM5dakHOjXM9Nz5Uleool01Z08wcvCKptbjv7qYvObefnui74gJX
+WYj6ve0XUQwcqY3kS5IjVJuwDdmj9uxhjq9IjdCruOo9dRjrdk8MLjUNV3ftu4y
iAmQRP9Gmpz8eVzJAOiZgF0Amk5zvfWBmvRhwF+L0LUL1rA0BFm0uusp8zw2ydjX
fUkjE5UTRElFHSLmUqzFeLFCxVgihl5v+bz4/J6iL10IGii1NukCbzEYfsx2VVha
TVUX/+eZyUWp7bQe5j41kzxrOX+lZlg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:37:00 2025 by rpki-client