Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff372914-18a4-366d-8fae-63e565760021.roa
File:                     ff372914-18a4-366d-8fae-63e565760021.roa (raw, json)
Hash identifier:          lNZMScgOj89Y0OJHG6CWnKu+5oNwmyAIm9/OKWXmWRE=
Subject key identifier:   B4:99:C0:72:6B:13:69:3A:BE:1A:CE:45:E8:E7:80:B7:8E:0D:A4:FE
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849071C098E9805356426D13CF0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff372914-18a4-366d-8fae-63e565760021.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        162.158.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1c:09:8e:98:05:35:64:26:d1:3c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=1db6cbaa-e856-49dc-ab66-551592f096e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:c5:e2:0a:13:77:7b:64:db:ab:45:a7:25:ee:
                    d8:19:2c:53:ff:65:6a:23:4a:bc:29:d1:55:e0:fb:
                    6a:41:f1:0f:b1:43:4f:33:c1:ff:82:d7:1e:35:7d:
                    61:38:bf:c8:37:17:da:9e:ea:d7:54:5c:73:02:db:
                    09:fa:ff:a7:b0:d7:7f:8b:4d:d1:ed:f8:21:04:b7:
                    e9:36:c5:5a:00:30:f2:45:48:a4:f4:ec:29:42:d0:
                    af:de:41:9f:f5:56:6d:08:4f:cc:92:cd:85:5d:93:
                    dd:c8:db:f7:58:b3:43:b9:3c:0f:af:b9:20:53:da:
                    89:3a:3b:1f:c5:1a:d1:12:1c:82:c2:71:00:ab:23:
                    89:5f:f1:a2:4a:89:45:34:02:2c:13:32:12:d0:5c:
                    20:27:a0:59:60:bb:32:9d:02:2f:15:c4:81:38:dd:
                    82:ad:29:14:7f:6d:58:7a:75:12:e2:bb:ef:a1:1c:
                    86:e2:89:5d:0b:e1:e7:54:1a:14:92:98:19:0d:d3:
                    97:62:a7:af:ed:fb:b2:68:eb:42:43:64:00:1b:02:
                    e6:5b:c4:ec:02:e8:e8:44:1e:59:d3:a7:68:9e:20:
                    fa:c6:7a:b0:35:e4:5e:cb:12:19:69:62:41:8b:47:
                    e1:9b:35:24:7e:c0:27:dd:9a:43:3f:b2:b7:24:65:
                    c6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:99:C0:72:6B:13:69:3A:BE:1A:CE:45:E8:E7:80:B7:8E:0D:A4:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ff372914-18a4-366d-8fae-63e565760021.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:f2:93:99:cf:e6:47:cb:9c:ad:b2:4c:ea:3b:63:81:23:10:
         e0:56:1e:1b:dc:4b:2e:a6:33:ed:30:cd:73:b0:ee:0c:b9:a8:
         0b:69:20:1b:6f:1c:11:96:a1:a7:59:7d:84:a3:e0:99:e6:74:
         b3:77:05:bf:89:13:7c:40:44:36:ad:62:69:5c:45:f5:d4:22:
         18:04:60:61:6a:5e:63:96:36:cc:8e:c8:d0:6a:87:d5:60:60:
         9a:e1:7d:9c:d1:9e:66:56:52:0a:3d:8a:65:b6:3a:bb:26:72:
         f4:93:d3:d6:51:b7:b2:1c:d2:ed:21:71:18:5c:15:7a:08:75:
         32:b1:a7:d8:d5:d9:eb:35:a6:68:29:81:35:1c:98:41:04:73:
         79:8a:da:b8:6e:22:d8:23:bd:72:7d:f4:2a:a0:cd:1d:b3:74:
         dd:3c:72:29:db:74:38:70:38:3a:c2:7c:19:74:98:a0:3e:3d:
         a2:f1:35:3c:62:5c:bc:bd:20:63:51:ea:dc:3b:7f:cc:a0:da:
         af:5b:82:b2:0c:07:17:6a:62:d0:b2:c7:d0:3a:03:83:0b:f3:
         60:b4:0d:ab:b2:90:be:0b:7f:43:3b:46:88:54:77:84:88:56:
         fd:8e:3f:6b:55:85:3a:54:58:04:58:69:5d:a7:09:ba:f0:eb:
         78:f6:47:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:57:11 2025 by rpki-client