Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fa33fc89-9f73-3872-a795-1e79869a2d7d.roa
File:                     fa33fc89-9f73-3872-a795-1e79869a2d7d.roa (raw, json)
Hash identifier:          pRZ+mWTL5EhC+uLev3SITipPVmB9F997zxUzomgj+rg=
Subject key identifier:   F5:CE:46:DD:49:68:D9:1A:9D:27:66:BC:2E:B1:3C:97:79:1A:8C:3B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849088189F2DCDBE412593867A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fa33fc89-9f73-3872-a795-1e79869a2d7d.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     13335
IP address blocks:        162.159.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:89:f2:dc:db:e4:12:59:38:67:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=a044487a-d92f-4e91-93c3-77ede8243487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:48:a2:58:d5:9b:dd:7f:d8:30:dd:cd:53:c9:
                    57:8c:2f:5f:2f:1a:86:e7:cf:f0:d8:91:b6:f0:8e:
                    3a:59:bc:ec:0b:bd:4c:26:94:8f:14:eb:fa:d3:4d:
                    57:1f:e2:c1:a0:30:c2:e3:c4:9e:88:49:bf:18:53:
                    49:33:dd:4b:35:c4:90:f8:5a:43:24:18:2c:ba:18:
                    e8:91:0f:78:d9:ec:ea:c2:1e:a8:cf:43:d6:24:0a:
                    73:f3:c0:04:2d:8c:66:44:51:e2:1a:2f:7b:ba:29:
                    d5:5c:78:c8:e1:d2:36:55:09:e8:4e:2f:4d:62:44:
                    aa:69:8c:5b:b2:1b:67:98:2e:5a:8d:ae:e4:28:a7:
                    5d:ae:4a:62:6a:35:6e:60:7e:01:92:a6:33:90:50:
                    68:31:56:24:29:f7:fb:30:32:a3:e1:c7:4a:e7:a0:
                    32:a4:21:f8:18:85:d2:02:82:9f:2d:fc:03:5b:9b:
                    47:08:b3:14:43:27:05:29:6d:f3:19:8b:a2:25:fe:
                    2d:7c:0e:3c:60:89:b6:dc:bd:f8:32:1b:fb:12:84:
                    ab:81:5e:1c:7f:08:88:fd:3a:98:e4:59:a4:d4:b1:
                    f5:93:71:0e:62:8c:4e:c4:10:a2:4f:a4:6e:3e:a2:
                    ba:60:1f:30:51:74:63:64:20:96:31:bd:b6:61:29:
                    f2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CE:46:DD:49:68:D9:1A:9D:27:66:BC:2E:B1:3C:97:79:1A:8C:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fa33fc89-9f73-3872-a795-1e79869a2d7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:4b:bd:b3:24:aa:e5:dc:cc:33:0a:f5:2c:42:ca:d0:ee:9b:
         9e:48:7e:d6:7b:d5:68:ac:81:f4:3a:df:e6:7c:93:ce:f4:4d:
         17:eb:66:85:34:1e:83:42:04:f1:4d:1a:db:24:71:6c:46:e5:
         75:1a:b9:12:4e:1d:cb:ce:65:ef:93:7b:36:61:5a:95:47:ef:
         21:50:f2:c5:97:f0:c2:23:1d:a4:d6:36:89:1c:a6:ea:4d:55:
         22:60:51:70:7c:3c:8a:65:3e:e2:7e:37:30:ca:b6:c0:cd:1d:
         c1:95:7c:26:5c:a9:4b:32:9b:15:7d:64:16:aa:f9:f6:d0:e6:
         ee:f2:c0:5a:08:68:7c:52:b2:1b:1e:85:7e:c3:40:d7:0f:1d:
         c2:e8:d6:7f:2d:b9:5a:cc:52:67:80:bb:53:24:48:b2:22:72:
         47:74:50:68:8b:d0:29:65:ab:dd:ff:5a:4a:97:f2:54:91:85:
         7f:cb:2c:f9:58:29:47:3a:d6:6f:c2:ae:b2:78:d8:1a:29:57:
         0c:36:56:9b:60:7a:e4:4e:47:15:73:50:d4:59:5e:73:6b:5b:
         7a:30:00:12:d9:87:96:93:58:cd:b6:17:c1:c9:1d:01:70:42:
         50:8f:30:c7:77:15:cd:2d:2d:84:ba:0d:44:4a:c8:c9:bd:47:
         05:30:1a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:49:03 2025 by rpki-client