Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e7cede57-1a48-3c44-9623-376f5f4f47d2.roa
File:                     e7cede57-1a48-3c44-9623-376f5f4f47d2.roa (raw, json)
Hash identifier:          GR5lrENRGxtvm2YRqa6eFdVeY+aS/ErUI9/J9T19bX8=
Subject key identifier:   A4:0C:AA:E5:6D:26:8F:3F:4F:55:86:DF:28:9C:92:99:CB:17:CD:53
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E655131D89066E5FC345C748
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e7cede57-1a48-3c44-9623-376f5f4f47d2.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     13335
IP address blocks:        162.158.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:55:13:1d:89:06:6e:5f:c3:45:c7:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=c739fc71-632b-4a81-bcc9-8d1d2a97925c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:29:19:62:43:8f:f7:23:45:83:52:36:74:a7:
                    2a:eb:e6:a5:b7:3f:87:ec:05:f8:44:58:54:fd:38:
                    ce:71:00:6a:72:2c:49:b7:ad:25:91:64:bc:d1:46:
                    3b:9f:22:85:1c:fb:21:86:33:5d:0d:41:c1:4c:66:
                    56:20:89:73:a5:60:81:da:0f:53:4c:3d:49:5e:06:
                    00:3a:e0:d1:b1:25:d2:3e:84:28:e3:63:1d:1b:70:
                    08:32:ca:a0:48:65:a5:d3:c7:35:e9:46:06:93:48:
                    58:34:ad:fe:53:86:68:c0:e4:f9:06:33:06:d7:f7:
                    e8:e9:06:02:3c:c8:62:90:2e:ce:7e:fe:3e:55:83:
                    c9:42:08:74:0a:3a:e3:a0:c2:76:4c:a7:d2:e8:cf:
                    81:ac:96:ff:61:30:9f:92:f1:91:37:f0:21:41:67:
                    de:8a:88:6b:3d:24:2b:64:5e:33:d6:6c:70:75:21:
                    fa:ff:23:c3:3c:94:88:34:2e:d9:c8:5a:0c:ec:73:
                    e7:d1:51:30:1d:42:d4:db:e5:90:a3:31:67:9b:a7:
                    b2:9f:73:47:59:51:c6:ab:f9:af:b4:c4:ed:e0:9d:
                    1d:e7:58:76:af:41:09:a0:d8:26:18:91:cc:53:23:
                    e6:e6:b9:8b:59:a6:80:3f:86:07:4c:65:38:40:f1:
                    e2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:0C:AA:E5:6D:26:8F:3F:4F:55:86:DF:28:9C:92:99:CB:17:CD:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e7cede57-1a48-3c44-9623-376f5f4f47d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:c2:df:0d:59:b7:b8:e6:5c:6f:ce:34:37:61:a1:a7:93:bc:
         77:a2:d0:b1:f2:7d:b1:34:87:e1:35:f2:ad:a9:47:5a:91:fa:
         94:9f:00:93:6c:a1:e1:1e:6f:86:1e:c2:13:bf:1d:fe:c0:07:
         9f:c6:5a:9b:5a:45:51:8c:9f:bd:ba:f6:4e:fd:f8:8a:9e:47:
         50:c5:60:b9:1b:6a:f9:d0:87:b6:c5:86:b2:d4:e1:db:9d:97:
         c7:6a:c9:0b:72:ba:65:61:2f:8c:2e:b1:c5:6b:a5:cf:c4:d4:
         ae:c0:50:e4:7e:93:25:70:c1:bb:c5:65:0e:b8:b3:a8:33:85:
         b9:1d:8b:e4:b2:ec:33:4f:d9:0e:d4:16:2b:53:0e:b5:54:9d:
         0b:7c:04:72:07:1e:49:0a:33:bd:29:b1:34:6b:65:59:4d:f3:
         27:69:e4:e2:0c:3f:eb:51:cd:9a:1b:46:50:6a:8a:e3:26:45:
         13:14:68:04:e4:d5:8d:88:1b:d4:12:62:b3:c4:b2:99:46:e6:
         54:6e:4c:c9:cf:51:16:84:7a:89:ac:2b:3f:e7:59:aa:f8:17:
         c5:4b:4a:27:e5:67:58:a5:33:d5:8b:c9:16:78:31:f7:82:65:
         98:2f:93:f2:bc:aa:38:bd:50:87:0a:02:3c:25:53:e1:57:06:
         6d:94:e2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:37:13 2025 by rpki-client