Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd7535b7-04ea-3514-b91f-83af2aaf5b1d.roa
File:                     fd7535b7-04ea-3514-b91f-83af2aaf5b1d.roa (raw, json)
Hash identifier:          AtRZl7iCM93gbzLqKR4896RrVTaI2b3wmZF+8WDsbgg=
Subject key identifier:   BC:2B:B6:D3:AE:28:FE:12:A7:96:CD:6E:66:4E:8B:4E:89:39:11:FE
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858473B54366A057621A1601B66A9
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd7535b7-04ea-3514-b91f-83af2aaf5b1d.roa
Signing time:             Sun 15 Sep 2024 12:00:00 +0000
ROA not before:           Sun 15 Sep 2024 12:00:00 +0000
ROA not after:            Fri 19 Dec 2025 05:00:00 +0000
asID:                     13335
IP address blocks:        162.158.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3b:54:36:6a:05:76:21:a1:60:1b:66:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 15 12:00:00 2024 GMT
            Not After : Dec 19 05:00:00 2025 GMT
        Subject: CN=2056da26-f300-43a3-9ecb-2ed943b57efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:92:46:36:4a:fe:4e:c0:a5:f0:92:12:7f:5e:
                    51:45:1b:d9:92:44:0e:f1:98:43:7b:72:eb:da:de:
                    07:52:b1:51:80:3b:53:5c:14:7b:f7:2a:ba:76:69:
                    73:fe:40:3e:c0:58:53:f6:c4:f8:34:19:80:f6:66:
                    34:f5:c2:bb:d3:96:e2:42:9c:1c:c8:9c:75:55:d4:
                    77:75:fc:40:35:7a:15:c1:68:ac:9d:9e:5f:c8:14:
                    d0:cf:6a:db:bd:9e:93:77:73:f3:5f:75:1f:e3:ff:
                    30:63:f4:89:ad:b0:98:41:e8:8f:72:61:27:af:7a:
                    a9:a7:e1:1d:71:9a:3b:70:42:aa:21:1f:b8:a2:01:
                    2c:c3:95:8c:9d:2f:f1:2f:a2:39:c1:6d:c1:b0:78:
                    8a:5d:e6:1c:cf:7c:ed:25:49:df:7c:7b:05:fc:8e:
                    58:d4:52:b3:fe:ba:b5:21:d1:64:e1:07:9a:e3:c0:
                    ee:98:4a:2b:d8:0a:8e:77:7b:e8:ec:ca:5a:1f:28:
                    94:e9:e7:3e:c8:96:4b:56:cf:f6:dc:a5:99:42:4a:
                    d8:37:69:9c:e6:42:15:4f:2f:51:c0:ad:0f:f5:08:
                    75:9c:fe:d7:8e:d7:a7:d0:03:c2:54:4a:66:66:9c:
                    d7:09:61:d0:86:d9:4f:30:83:90:cf:5b:57:91:09:
                    d3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:2B:B6:D3:AE:28:FE:12:A7:96:CD:6E:66:4E:8B:4E:89:39:11:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fd7535b7-04ea-3514-b91f-83af2aaf5b1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:75:47:32:bc:97:86:30:24:64:90:0e:e9:0e:2b:bb:ad:1f:
         8f:f2:cf:3d:a8:53:53:f9:c0:c3:f0:9d:1b:1a:1f:60:55:c2:
         47:39:d0:a9:da:e0:2b:75:81:f0:a4:ef:10:f6:40:3c:ec:d1:
         20:f4:fa:5e:3c:b6:3d:b2:f7:60:63:de:65:be:0b:37:8f:18:
         19:b1:7e:9e:81:46:2c:00:e2:1d:f7:c0:17:01:91:cd:96:f5:
         e1:ec:32:5a:d5:ed:e8:89:d9:10:57:87:a5:3e:09:0a:3c:e7:
         5b:dc:8f:95:3d:c3:1c:b2:5f:fc:cc:af:0c:f7:9b:1d:67:99:
         51:4b:70:85:aa:c3:af:38:55:82:ad:23:1b:73:83:52:4c:bd:
         21:2a:93:94:4e:33:73:9c:57:c2:3e:a9:b9:c8:8e:15:d4:8b:
         cc:fd:06:14:f7:20:cd:17:77:05:86:54:ee:ee:30:f6:d3:a4:
         2a:1a:47:57:c3:3c:3f:46:43:33:c1:20:5b:dd:7a:33:dd:d0:
         56:7b:48:66:27:40:03:70:df:1f:15:89:d4:b1:dc:25:59:79:
         51:e7:7e:22:cd:74:09:33:f9:64:1c:96:28:e0:50:f1:6e:7d:
         68:4f:4c:a0:22:70:8f:1a:4c:b5:d8:b5:cc:6c:44:a8:de:7c:
         1e:37:ea:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:20:49 2024 by rpki-client on console-fra.rpki-client.org