Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/167b4480-e0b7-376f-80c0-8d4a801ff233.roa
File:                     167b4480-e0b7-376f-80c0-8d4a801ff233.roa (raw, json)
Hash identifier:          CPhmRNvCRNcpqQLuzEcDie1aC4LtyCgJ/FNvM1NABU8=
Subject key identifier:   3F:CA:8F:93:34:4F:EF:82:B2:2C:86:09:84:8F:88:B4:D6:13:BE:A7
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC8766D9EDC7A158DD6D821C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/167b4480-e0b7-376f-80c0-8d4a801ff233.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        162.158.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:6d:9e:dc:7a:15:8d:d6:d8:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=16c4445f-70de-49d4-8dea-25497d282349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:be:61:e6:88:b2:3f:60:14:df:c6:0b:81:8a:
                    f5:b9:ea:67:a2:64:b2:97:89:89:5a:11:17:59:a9:
                    1f:13:22:99:73:c7:f4:53:3c:5a:57:6a:0e:9f:58:
                    a3:7f:47:6f:47:ed:92:c5:0d:1e:c7:82:b1:9c:37:
                    ea:e3:60:08:a2:d6:25:dd:fa:e0:8c:5f:3a:23:d7:
                    5c:88:76:08:32:1c:bc:25:69:c2:22:d2:1d:bd:b8:
                    b7:41:a8:bb:c7:8f:b7:9a:ba:10:eb:3b:5f:a0:5f:
                    ba:2b:4c:ad:1f:80:f0:c3:9b:4c:e8:c0:3f:aa:a4:
                    af:e7:45:64:56:0d:7c:cc:05:55:9a:68:a1:cb:23:
                    48:db:4f:3b:92:a5:1b:54:a7:2d:d9:af:9f:f1:5b:
                    c6:83:38:2f:d5:47:e8:f3:f7:aa:b9:dd:e3:ea:76:
                    c9:46:c0:fd:71:2e:9e:53:1b:c9:14:6b:56:fa:3b:
                    9b:8b:1e:a9:e2:aa:87:c7:a8:43:7e:90:cf:86:fd:
                    6a:71:c8:d5:80:08:a2:f9:4b:0e:fb:95:34:d9:55:
                    ee:2d:5e:d9:63:fb:74:fe:a0:34:70:10:a7:ae:4c:
                    86:ee:5b:a3:a6:89:bd:16:42:3f:d7:a5:d2:c7:16:
                    8c:8b:da:de:a6:78:bf:1a:64:0c:a6:0a:0d:44:0b:
                    22:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:CA:8F:93:34:4F:EF:82:B2:2C:86:09:84:8F:88:B4:D6:13:BE:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/167b4480-e0b7-376f-80c0-8d4a801ff233.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:06:9e:c1:fc:ed:12:f9:86:2d:f6:d0:0c:8d:6a:61:53:15:
         34:9c:74:53:f2:e9:63:f2:cf:d9:5e:67:67:62:11:00:5d:a8:
         7e:ae:7b:d3:93:a5:94:11:2e:11:5f:1d:12:2c:5d:1f:b6:cd:
         26:d0:81:03:91:8f:1c:df:be:73:4f:30:48:ee:c8:d6:b4:ea:
         78:2d:e6:85:b4:63:80:cc:ed:64:5f:0a:f4:5c:5b:f5:bd:f6:
         92:d8:20:23:d6:27:b7:04:75:5b:ba:93:b7:df:d4:9e:62:b6:
         0d:0b:9a:97:b4:83:fb:de:ec:d2:ce:eb:8e:81:09:d7:c8:ef:
         57:be:77:00:da:b9:c0:c0:4e:32:20:1a:3d:01:86:00:00:47:
         89:7c:8a:84:bb:ab:27:9d:d3:0a:24:26:d9:34:ea:6a:42:c8:
         b8:41:76:61:5b:0d:b8:e9:b4:96:35:3f:b9:91:4b:67:39:98:
         e9:f9:cf:c2:34:41:10:17:50:0c:82:bc:b8:19:33:c8:cd:43:
         91:d1:59:6f:8b:af:94:11:97:e7:c9:f7:73:d5:68:56:eb:15:
         e9:11:b5:e2:37:d3:21:e7:21:22:e7:db:79:d1:82:ea:51:3f:
         d3:37:06:58:18:ef:6e:d3:63:70:89:93:14:7a:51:2b:58:e1:
         45:0b:3d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:02:51 2025 by rpki-client