Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17f7b617-f41d-3314-a88a-875dcdb0684a.roa
File:                     17f7b617-f41d-3314-a88a-875dcdb0684a.roa (raw, json)
Hash identifier:          RTtxXq/fluBmKuB9XG8gskHuLItVtjBTXpLZhrr5zsw=
Subject key identifier:   F4:E9:93:CF:07:86:E2:8D:6F:95:99:E5:8E:EA:12:FF:15:73:F6:9C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849C9FA6A7F9A4CC6CBB8D73740
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17f7b617-f41d-3314-a88a-875dcdb0684a.roa
Signing time:             Thu 08 May 2025 21:15:52 +0000
ROA not before:           Thu 08 May 2025 21:15:52 +0000
ROA not after:            Wed 06 Aug 2025 21:15:52 +0000
asID:                     14789
IP address blocks:        162.158.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:fa:6a:7f:9a:4c:c6:cb:b8:d7:37:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May  8 21:15:52 2025 GMT
            Not After : Aug  6 21:15:52 2025 GMT
        Subject: CN=23ffdaa0-55bc-474e-9683-a5236da0d5b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c7:7e:69:9f:02:8d:d2:bc:f7:be:d7:ee:65:
                    ff:6f:89:48:56:99:0e:bb:eb:d2:98:11:26:2e:66:
                    5b:96:36:9d:ee:e5:63:6c:cb:c3:fc:2c:dd:b5:34:
                    cd:5e:22:67:b4:bf:4b:d8:2c:71:3a:09:41:2d:da:
                    a1:4f:77:b6:8b:8d:fe:ed:1a:72:0a:e2:e3:0f:da:
                    46:a0:15:e4:f0:67:5b:e9:28:43:2e:32:e3:17:7f:
                    9f:06:71:ff:d8:13:ae:eb:9e:64:7b:25:58:6b:1b:
                    60:bf:13:af:02:4f:be:a8:2a:e9:56:65:4b:fb:2d:
                    55:51:34:ac:84:09:cd:d3:02:8f:f6:1b:fb:15:cf:
                    cc:8b:a9:89:f9:54:5d:aa:bc:b9:53:09:20:9b:d5:
                    78:9b:6b:2e:9f:a9:2e:2c:a6:61:18:ad:b5:d3:7f:
                    5c:fb:2e:c9:b7:a6:d4:48:fd:e4:c7:6a:65:86:d1:
                    ef:47:04:5f:c2:33:2c:b1:5e:73:85:fa:f5:81:7a:
                    1b:a9:d1:af:ad:50:ec:c9:dc:2e:5d:8e:16:f5:e4:
                    b7:86:a7:a5:86:91:f3:d0:ef:6b:45:42:b3:8b:2d:
                    f9:0b:3c:b3:8d:cb:f0:23:ba:78:a2:c2:4f:8c:47:
                    ae:12:98:81:60:55:65:a6:d1:95:22:d8:1a:d0:30:
                    6e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E9:93:CF:07:86:E2:8D:6F:95:99:E5:8E:EA:12:FF:15:73:F6:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17f7b617-f41d-3314-a88a-875dcdb0684a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:6d:21:6a:59:a1:28:1b:2e:2d:31:3f:a9:01:e0:62:bf:fe:
         19:19:40:9c:70:a1:6d:b7:7e:d6:47:54:0a:bd:bb:a3:3a:3a:
         4f:53:09:52:b1:65:25:eb:f2:af:15:7b:95:fe:67:3c:ef:ef:
         4f:f1:cd:a2:55:bc:34:02:29:6f:5e:78:74:d2:4f:0a:e8:88:
         e5:ae:6c:a4:26:3f:a6:80:6d:57:f0:62:cb:4c:99:ac:fa:ba:
         00:bb:4d:45:d6:e8:e6:17:33:c0:8f:d8:99:35:c3:dc:8a:1a:
         f2:de:81:23:73:df:4c:86:1f:0f:4b:5d:7f:2d:d1:0a:24:5a:
         65:b4:3f:a7:75:4b:d7:ab:f2:94:01:ee:04:97:52:ca:80:61:
         50:c1:d2:bd:6e:fe:9e:1e:c3:59:3a:b6:10:c2:23:d3:5e:9c:
         25:b8:f7:c3:aa:89:aa:93:23:06:91:39:36:00:06:66:0f:d5:
         b9:9d:90:e2:76:b2:3e:c4:ee:26:1d:91:ec:66:6e:96:5c:b2:
         e3:9d:54:26:10:3d:01:14:0c:d8:80:92:1d:20:cf:5f:96:bf:
         ba:b3:84:23:8d:f5:76:ad:9b:cb:1e:ef:8f:6e:bf:5f:aa:6e:
         82:61:88:90:f0:be:cc:09:e4:2b:ad:d3:c6:ea:04:6d:e6:23:
         aa:7c:de:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:58:43 2025 by rpki-client