Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2ab71331-b81c-32cb-8197-2b979bca1a0d.roa
File:                     2ab71331-b81c-32cb-8197-2b979bca1a0d.roa (raw, json)
Hash identifier:          ndn+HU7Yy2qAFtZ1UcXcKLKD1mW1wNAMInDaIsv0jKc=
Subject key identifier:   9E:A8:8D:EC:4C:5A:F1:8A:0B:87:A8:B2:13:EC:05:4E:CB:E4:90:9C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584A3E45B4B654E3934A30D41100
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2ab71331-b81c-32cb-8197-2b979bca1a0d.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     13335
IP address blocks:        162.158.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:b4:b6:54:e3:93:4a:30:d4:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=b6c82179-3000-4598-a7ab-a6c3bf3228f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:be:26:b7:af:2f:67:9c:19:58:da:77:5b:e2:
                    b9:33:53:f1:2f:c2:e6:8b:90:7a:36:d0:f6:a4:f8:
                    49:4d:d1:42:29:be:fb:b1:19:c2:d4:f4:90:6e:18:
                    8b:ee:de:9c:b7:9c:fa:ef:74:70:cf:9c:e0:b8:80:
                    c6:56:ef:ad:c8:d1:28:fe:50:73:c9:4c:50:25:70:
                    16:79:28:d1:54:4a:15:55:a9:d9:57:4d:d5:66:f7:
                    e5:3c:b4:81:18:ae:26:39:9a:4a:64:93:d6:70:98:
                    b7:aa:b7:e9:bd:0a:1d:6f:c6:d6:95:56:17:9a:36:
                    aa:f7:8c:fc:be:1c:e2:c7:48:da:ef:ac:89:1d:62:
                    ac:e0:29:c6:7c:3b:d6:30:f5:b4:bc:b1:c7:b0:a6:
                    6a:66:a7:94:b7:81:ef:88:e0:bf:0c:92:61:27:c5:
                    4f:41:bc:ab:b7:ed:44:7a:92:43:ab:14:1e:37:4f:
                    94:9e:ec:06:5f:8c:f4:5c:4f:9e:b1:1e:10:bf:2c:
                    9e:9c:5c:b0:ca:3a:eb:d8:46:9a:39:e1:c0:21:80:
                    5c:ff:71:e0:57:73:a2:7e:e2:5e:a3:11:9f:7d:77:
                    1e:a9:82:76:4a:d2:76:4f:ec:0b:b5:94:00:11:f0:
                    f7:b0:a9:57:51:d7:0d:cb:ac:99:58:33:d1:b9:bf:
                    f5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A8:8D:EC:4C:5A:F1:8A:0B:87:A8:B2:13:EC:05:4E:CB:E4:90:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2ab71331-b81c-32cb-8197-2b979bca1a0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:c9:c7:7e:df:ab:bd:23:80:80:d4:2a:6d:13:4c:43:18:8e:
         b6:ab:e2:67:c8:dc:5a:5d:d6:36:d0:77:03:cc:a6:4d:7d:da:
         92:05:de:22:b3:45:a9:d9:ae:50:06:bb:41:7d:7d:fe:0f:4d:
         d9:fb:a2:14:21:83:e7:de:45:f2:27:d5:4b:99:19:d5:88:1d:
         97:6c:d0:98:a5:57:27:87:86:fe:46:d5:ed:15:08:06:fa:41:
         aa:88:04:a8:65:44:41:24:cf:1a:4c:29:b0:57:32:95:1c:9e:
         34:88:a6:64:93:a6:24:50:eb:c4:74:35:21:4f:6b:c0:78:80:
         8c:4c:c7:49:38:64:e6:0c:95:65:ef:f6:4a:41:e0:d4:c7:6e:
         51:e1:e4:2a:36:2a:68:e9:60:eb:e1:ed:5a:48:d0:31:82:96:
         25:10:a9:17:91:92:a4:98:cc:75:d0:42:fb:06:e2:88:f8:ed:
         54:ae:41:5b:dd:ea:47:11:df:ce:53:cf:b7:ce:33:6a:d3:4b:
         25:ff:ca:30:24:10:be:3e:2c:82:4c:9d:eb:da:95:f9:c6:76:
         8c:c3:ee:1e:46:71:a8:55:c0:c4:9c:85:cc:38:96:23:b7:3e:
         8b:c7:54:82:d6:c4:47:ef:53:cb:4e:2d:26:85:fd:33:56:49:
         8a:d5:48:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:13:28 2025 by rpki-client