Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/191e6646-8f07-33cf-9d3c-9ef6a31e86ce.roa
File:                     191e6646-8f07-33cf-9d3c-9ef6a31e86ce.roa (raw, json)
Hash identifier:          yqzVN9vHagfmyVCIq2Pg9aFUhovEg8uaTsfpCQ+hsac=
Subject key identifier:   5A:32:F2:FF:7D:6A:0D:56:9D:5F:74:14:43:1D:53:2F:5F:22:C5:38
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC7110B245026452BE8C68920
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/191e6646-8f07-33cf-9d3c-9ef6a31e86ce.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     13335
IP address blocks:        162.158.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:11:0b:24:50:26:45:2b:e8:c6:89:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=2d91544a-8039-4745-88c4-15ffe03ac223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:27:26:0c:37:43:23:f3:62:e7:55:40:ae:e4:
                    5b:60:e8:a6:13:42:5a:9f:ae:23:a1:85:d7:51:a7:
                    0f:d2:1c:e4:3c:3e:77:46:ca:5c:e5:96:cf:47:d0:
                    37:fd:26:e4:e9:c8:5a:cb:0c:b6:d9:27:e9:e2:4c:
                    a4:29:c7:0e:6d:59:2d:e4:ff:24:5e:b5:71:29:28:
                    8c:91:cb:10:88:34:5b:fc:11:df:2d:aa:ce:96:04:
                    ce:69:70:56:61:e3:e2:a3:48:9f:58:bf:7c:a2:46:
                    3b:81:5f:ac:24:fd:c7:d4:77:75:2e:15:b5:82:c0:
                    b0:39:95:58:5c:97:b5:9e:82:fb:b8:63:f7:91:59:
                    b0:ab:21:22:79:b3:49:42:17:f0:c7:91:21:7d:27:
                    80:3d:78:d8:09:bb:08:66:58:cb:82:9f:be:6b:87:
                    1b:82:39:c8:e7:59:65:1b:3e:cd:ea:e3:48:37:5b:
                    f2:99:24:ff:0d:12:26:b8:a0:75:21:89:e5:74:7a:
                    d1:ec:a9:9d:3f:3a:61:5f:7b:a2:16:47:92:6c:28:
                    c8:ee:db:e7:57:59:3d:41:c7:50:30:cf:d5:89:fa:
                    f1:12:8d:b2:73:58:cd:13:8b:08:6c:83:76:9d:be:
                    28:10:66:52:c8:ac:68:d2:72:13:1d:4e:0b:11:77:
                    dd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:32:F2:FF:7D:6A:0D:56:9D:5F:74:14:43:1D:53:2F:5F:22:C5:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/191e6646-8f07-33cf-9d3c-9ef6a31e86ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:69:82:8b:e8:9c:29:d8:21:f2:e5:45:e4:e8:2b:b3:b9:27:
         c5:ab:a6:ff:12:a7:5c:77:ac:ac:ea:20:de:0c:1c:35:64:11:
         04:33:93:5a:cc:23:87:63:5f:0b:46:db:50:db:55:f5:fc:e1:
         33:34:70:04:91:c4:a7:ea:b9:06:6c:ec:5d:95:37:94:33:58:
         22:b7:da:d1:6b:6b:b9:58:48:d3:c8:80:d4:6d:37:7d:20:f1:
         07:b6:2b:a1:d8:0d:ea:00:95:e6:d5:b7:ab:64:0d:a3:2b:48:
         93:d5:4b:14:34:fd:f5:39:ed:a4:30:f9:7b:4c:86:e7:33:82:
         c5:33:be:df:a3:af:f4:ed:8a:34:9f:9b:37:49:ac:65:21:ba:
         8d:e0:22:fd:d4:6f:ca:3e:59:97:e6:4d:fd:d8:c6:55:81:f8:
         1d:0d:49:f9:d2:78:66:7b:cb:91:5c:33:dd:8b:51:58:90:e4:
         7c:a4:d0:b6:bd:17:ff:c1:73:25:0b:8c:a7:94:c2:cc:9b:1a:
         2e:59:ce:5e:f7:1d:11:d6:9f:82:cf:c7:62:b7:43:20:19:b8:
         94:d0:1e:a5:36:ad:36:95:e7:a3:bd:a1:4c:9b:89:bb:86:bc:
         90:72:0e:f5:c3:71:40:44:7d:af:53:2e:e3:ed:7c:86:c9:9f:
         51:43:60:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:06:55 2025 by rpki-client