Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f79d2086-964f-3c67-8929-40dead0ed478.roa
File:                     f79d2086-964f-3c67-8929-40dead0ed478.roa (raw, json)
Hash identifier:          4OLdSOHUHSpkULuCPK3a1AThupzmE1zMo39RchdprAM=
Subject key identifier:   AB:85:6F:36:80:5A:AE:C8:2E:11:6B:DA:0C:92:1E:6A:57:26:AC:E6
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858490881881C50A45C18EE363E80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f79d2086-964f-3c67-8929-40dead0ed478.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     13335
IP address blocks:        162.159.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:88:1c:50:a4:5c:18:ee:36:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=578efbe4-3702-42c2-932b-9220a6fe7b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:23:3e:c2:ce:5a:d4:c5:c1:ea:e9:9e:7f:63:
                    b7:a4:f8:ad:06:15:b2:88:2a:7a:c6:19:70:70:43:
                    e2:b2:ed:f2:cb:dc:d9:2f:f3:9f:f0:f2:0a:2e:17:
                    d1:b1:61:7f:3f:07:1b:b5:35:bf:79:cc:48:fa:73:
                    0e:5b:97:16:d5:48:c4:be:d1:b3:8f:88:fe:ea:15:
                    76:b7:55:6c:f9:55:bf:fe:e6:08:c2:e7:c5:5f:ef:
                    bc:da:3b:fe:35:b5:2b:60:21:05:2c:8b:91:2a:ee:
                    37:18:1c:04:d0:d3:e0:6b:bc:68:7f:5d:74:38:1f:
                    75:58:07:ea:72:6c:50:e3:fd:0a:8f:8f:c7:af:ce:
                    13:79:ce:6f:97:52:b6:7e:e6:5d:db:e1:27:00:dc:
                    f5:6a:84:a7:2d:5a:52:d2:d0:2c:47:ec:d4:56:b0:
                    f1:a1:83:23:5c:12:4e:8b:72:de:74:a6:5b:88:b5:
                    84:a7:4a:21:af:a5:6e:93:90:e0:d8:3e:2f:da:3d:
                    09:1a:57:2f:83:57:5e:ec:69:b5:69:fb:36:ad:1e:
                    aa:4f:4c:36:fb:82:37:43:dc:8a:3e:de:e6:05:0c:
                    75:0a:4d:c3:6d:0e:e1:dd:ff:93:bf:50:b2:33:e5:
                    5a:98:3c:f5:2e:0f:1d:25:d9:f4:34:55:53:74:2f:
                    01:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:85:6F:36:80:5A:AE:C8:2E:11:6B:DA:0C:92:1E:6A:57:26:AC:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f79d2086-964f-3c67-8929-40dead0ed478.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:f8:88:1b:9f:f6:7e:04:a6:3b:fa:5f:0b:c7:c4:c2:61:08:
         3e:7a:c3:64:4d:dd:16:34:0a:6f:06:ac:68:09:a0:7c:37:70:
         8c:c5:66:69:7d:f6:11:64:f3:dd:73:4a:cf:c2:4c:93:74:8f:
         d4:cd:0d:02:8c:83:45:c8:eb:ef:bc:b6:2b:2b:57:30:df:f8:
         7f:ea:5a:2a:27:3c:30:54:4d:a2:da:94:9f:e7:17:76:f8:a6:
         2e:de:1e:5d:ee:f7:a1:41:46:47:c0:e2:5a:87:ae:06:1d:b5:
         f4:c7:ca:2f:4e:c8:6a:26:48:05:d9:2a:e6:6e:62:28:59:fa:
         0c:3c:24:a8:ea:22:02:b0:a3:e1:ea:48:ff:f6:ee:93:ea:73:
         9b:0a:9c:80:d2:0a:69:f5:a9:7f:f4:e1:21:9c:79:b5:96:bf:
         07:13:8d:89:4c:90:94:7e:82:35:b6:0c:1e:ab:a4:ae:10:6d:
         ec:7e:b4:7c:62:4b:a2:42:59:0d:3c:9b:ee:20:6b:66:41:00:
         21:56:6a:1e:b1:82:c5:ec:8d:92:45:3a:21:d7:72:7d:66:cb:
         27:b6:52:b4:8a:da:b0:ea:c5:53:17:d5:e8:62:e7:d7:cc:85:
         74:71:60:98:05:a8:a6:ea:df:1d:8b:74:a3:d8:de:90:51:7a:
         a4:4f:62:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:25:45 2025 by rpki-client