Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/57156163-c481-33c0-95d6-c0e9872d7cd8.roa
File:                     57156163-c481-33c0-95d6-c0e9872d7cd8.roa (raw, json)
Hash identifier:          5qp18iBnTu8tmaPGQtXaCULUxfBp79HZtwMksT5hwC8=
Subject key identifier:   BB:71:83:67:85:AC:1B:DE:7B:B5:6C:5C:52:A4:30:E0:B3:BD:8B:9E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC8766FACBADE5431CFA25D80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/57156163-c481-33c0-95d6-c0e9872d7cd8.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        162.158.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:6f:ac:ba:de:54:31:cf:a2:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=acbca515-b134-413b-837c-8baa0380bb20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a2:2d:4c:8f:cc:55:a2:2c:1c:53:be:20:4c:
                    69:d7:e6:ea:67:1e:3d:cc:dc:2e:ce:24:d0:6d:20:
                    ec:69:93:de:7a:c3:ab:d6:bb:dd:f5:95:07:48:f3:
                    68:5b:12:8d:f1:b4:ba:1b:d8:76:09:a9:fb:d4:94:
                    23:48:81:e6:6e:39:90:57:0d:53:08:9c:1c:82:d8:
                    6f:fe:71:b1:41:88:c2:e5:25:52:4d:34:e9:e4:5c:
                    de:e8:1f:44:97:19:97:db:d9:2e:3e:88:1d:1b:17:
                    48:43:c6:32:ae:7a:55:2a:90:b9:fa:c5:3e:31:10:
                    00:c9:fc:a3:5b:1f:b4:ea:67:f2:89:45:c9:e5:ab:
                    d4:77:95:c9:bd:7b:64:b0:4f:29:72:82:61:42:69:
                    e3:1a:7c:95:e3:4d:d7:9c:28:15:b6:19:4b:71:45:
                    05:b9:8e:a1:ac:e1:43:ee:f5:bf:4b:75:83:cc:c0:
                    03:5b:24:b0:86:1a:a5:90:d1:58:7e:59:07:5a:aa:
                    5f:35:35:ed:41:14:e7:a2:bb:be:11:11:a1:dd:ab:
                    2f:e5:40:48:d1:23:a3:3b:e3:47:60:90:c1:ae:dc:
                    10:1c:e6:58:94:38:48:89:8f:5d:b1:9f:e9:54:bb:
                    4e:e4:a7:61:22:f0:57:92:2b:e0:8f:d5:22:f2:35:
                    f0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:71:83:67:85:AC:1B:DE:7B:B5:6C:5C:52:A4:30:E0:B3:BD:8B:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/57156163-c481-33c0-95d6-c0e9872d7cd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:8e:40:c4:d8:03:c4:23:eb:2a:20:07:9a:88:f7:45:eb:66:
         9c:ad:1e:68:f8:ee:7a:b1:3b:3a:db:0e:12:d4:03:63:d8:02:
         27:c0:0d:37:2f:04:3c:e3:a9:62:65:80:38:b1:6f:d0:a7:29:
         59:b3:f1:dc:69:1a:e1:e7:6f:41:43:6c:c5:15:99:92:98:f8:
         c8:3d:f6:cc:9a:a7:b7:3e:57:68:37:06:68:55:04:7f:23:2a:
         86:a7:c3:e5:b5:4d:13:af:b1:7c:c0:39:d6:d8:eb:9b:06:87:
         ca:dc:f4:44:ac:bd:55:34:2b:0d:69:03:65:4b:f1:2d:84:c9:
         93:ee:a7:0c:e5:11:1e:10:08:78:f0:d7:10:07:56:33:83:92:
         5d:30:57:76:4d:82:05:1d:31:36:44:ee:cd:42:98:dd:81:6b:
         47:82:f3:5a:54:e9:d9:5b:c9:6a:3a:6f:6b:0b:85:d5:9f:3d:
         7d:56:c0:94:aa:86:3c:91:c1:83:2f:d9:0f:56:39:5e:7c:89:
         d7:12:ba:16:3b:c3:b1:87:c5:08:ad:8c:8c:31:43:9d:4d:9f:
         03:6c:4e:5b:8d:cb:21:b4:ba:b3:5b:b0:fc:b1:6c:db:b5:58:
         db:0c:9f:27:05:12:6c:0a:d2:60:38:80:04:60:1e:a6:56:99:
         ba:e7:1a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:09:27 2025 by rpki-client