Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/429610a9-a093-3d95-a9be-d74c4cf75aec.roa
File:                     429610a9-a093-3d95-a9be-d74c4cf75aec.roa (raw, json)
Hash identifier:          i6JRGqgN4qmrJ1TN5wATZ1k6C/igIW7hn9ogvsKjSqo=
Subject key identifier:   A9:A8:DA:86:65:09:9E:89:7D:27:13:56:9B:53:9D:7F:28:71:5C:A8
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC876648344876BA044E982C8
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/429610a9-a093-3d95-a9be-d74c4cf75aec.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        162.159.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:64:83:44:87:6b:a0:44:e9:82:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=3b80f0bc-4c1b-4d8d-b13b-280ebc4c9fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3e:41:62:87:7c:b2:1d:e3:fe:ef:7b:17:65:
                    2e:c9:51:81:46:65:7d:db:33:c8:5a:d5:29:59:b5:
                    e0:e6:a9:b0:bd:6a:df:f5:eb:f1:fa:37:3b:24:1e:
                    4d:d5:c8:0e:92:72:cf:53:0c:22:e5:b1:40:99:1c:
                    3d:b0:fb:9e:8a:32:10:88:99:58:d9:a8:58:6f:e6:
                    49:5d:d3:84:92:f9:d4:c7:93:22:94:a9:c7:fc:e8:
                    52:9e:04:83:ea:5c:73:6e:37:6d:dc:03:0a:15:7d:
                    d8:08:b4:e6:ec:fa:b4:93:ae:82:44:f8:10:75:18:
                    c7:51:a7:d0:d7:f9:4c:82:cd:59:cf:9b:3b:a5:d6:
                    36:ca:11:37:93:3a:6c:25:f0:b7:9b:a9:36:c2:bd:
                    32:d3:c9:eb:11:66:70:7a:ee:86:b6:11:8d:52:43:
                    39:b7:76:7d:7b:27:a3:a3:04:6a:e4:43:78:88:7f:
                    e1:01:74:fb:31:4f:54:3a:5e:c3:08:db:6b:34:20:
                    b2:d2:38:45:e6:d2:e1:f4:7f:3f:96:38:7a:41:d5:
                    56:46:63:16:23:2f:89:f1:43:aa:85:3a:70:f4:2f:
                    5d:7b:87:c9:3f:64:60:7e:af:be:4e:24:d1:1d:d4:
                    e7:06:96:8a:55:11:b0:13:d8:ad:bf:6c:29:06:2c:
                    b6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A8:DA:86:65:09:9E:89:7D:27:13:56:9B:53:9D:7F:28:71:5C:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/429610a9-a093-3d95-a9be-d74c4cf75aec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:f1:ea:bf:81:1c:79:e2:13:41:e4:9b:91:42:e2:fc:12:7e:
         24:61:d6:54:15:4c:66:af:96:4b:32:54:68:76:47:03:e6:85:
         1e:25:d1:31:84:f6:ad:a5:67:ae:de:1a:e9:79:a4:9f:3c:2e:
         f5:d3:00:5c:da:3b:15:96:a0:2e:47:79:14:c5:70:61:22:b8:
         0f:27:ba:db:df:40:3e:3f:0b:22:a1:97:e7:d5:00:9a:49:09:
         68:f9:9b:d3:3e:f3:5b:d2:fc:73:35:70:d3:99:8a:e5:02:f1:
         07:b0:8e:7a:75:dd:a2:2d:ab:b5:5a:55:70:9e:81:38:7f:08:
         36:e1:5f:06:0e:4f:6e:8e:38:04:38:e8:2a:51:46:66:b1:04:
         20:8f:62:ed:ce:34:5d:f1:7a:9c:f5:d6:32:a3:da:3c:1b:53:
         bd:be:ac:0b:ea:37:97:54:b6:43:26:21:55:1d:3c:15:92:3d:
         d4:96:bb:8b:06:f7:1f:d9:60:25:f6:00:dd:7b:28:72:1b:09:
         b0:6f:31:a6:e9:b5:41:c2:46:82:77:77:c6:ab:20:f5:9a:13:
         9c:30:30:67:2e:f0:a9:d0:92:8f:54:6a:01:fb:7c:e6:f2:78:
         af:56:23:55:3b:df:ab:7a:16:35:19:41:08:88:7e:4a:81:a4:
         5d:ae:9a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:02:44 2025 by rpki-client