Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bd14d38-6c80-34b6-b616-5ff26fb6b3ba.roa
File:                     5bd14d38-6c80-34b6-b616-5ff26fb6b3ba.roa (raw, json)
Hash identifier:          10Ii3twoZpwAPQZkcHppz8fHgTq03WatUTzNA9CXWXE=
Subject key identifier:   6C:C7:F4:A2:C5:4F:5F:53:1D:84:1D:07:14:47:01:0D:7D:76:81:44
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC5AB9707285CF15C9C099120
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bd14d38-6c80-34b6-b616-5ff26fb6b3ba.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        162.159.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:97:07:28:5c:f1:5c:9c:09:91:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=0ea30a08-7600-4e74-a93b-eb917b9fcd56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ce:5b:da:b6:ff:37:d8:ae:ee:b3:b0:3d:62:
                    e0:06:4d:6c:26:a1:1c:75:27:59:e3:41:81:22:45:
                    a5:c3:87:e8:e6:5e:c1:c4:66:f8:4d:a7:c3:da:73:
                    56:cd:8c:4a:ed:c0:03:72:2e:5c:a1:21:f0:26:48:
                    f9:88:78:92:1a:d7:7c:96:3a:e8:07:94:8b:60:10:
                    db:1a:8f:04:a4:bc:1e:de:13:27:d8:dd:73:1f:d7:
                    bb:c6:24:39:de:56:77:27:05:6c:27:15:aa:91:23:
                    db:dd:bb:a5:6b:43:71:73:8c:34:22:58:ef:df:c1:
                    7c:3b:d0:eb:89:de:28:cc:61:22:f5:67:48:63:46:
                    6f:2f:7c:1a:05:49:03:0e:d3:fa:9d:81:f8:52:a3:
                    b2:94:e7:9a:fe:a6:ff:bf:c2:88:db:db:1d:67:e8:
                    41:b7:52:19:22:79:5b:cd:81:a5:2a:8d:a2:4f:fd:
                    ba:3e:f1:c8:7a:b8:2c:1d:33:e3:93:9a:e4:d0:ee:
                    af:81:47:60:f1:5b:3e:db:b1:a2:f0:52:b6:5d:c2:
                    80:99:82:34:aa:c3:39:7b:ca:fe:9c:a9:bc:73:9f:
                    80:b4:86:59:ca:4a:75:58:d7:89:ea:e5:9d:d8:cc:
                    e8:0f:ab:3a:c7:c3:dc:cc:79:83:52:0b:61:2f:7a:
                    ab:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C7:F4:A2:C5:4F:5F:53:1D:84:1D:07:14:47:01:0D:7D:76:81:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5bd14d38-6c80-34b6-b616-5ff26fb6b3ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:ed:b4:43:a5:df:dd:21:a1:f1:54:28:ac:a1:cc:d4:ff:65:
         a9:fd:cc:c9:1b:12:a6:de:c3:4c:5e:89:55:7b:37:4e:c0:8b:
         1d:9c:81:b2:4e:f3:be:60:9d:00:76:61:52:02:e9:f7:37:e0:
         69:3c:58:59:2e:38:8d:a6:c1:1f:57:06:74:5d:00:09:d1:47:
         f6:3d:b5:38:88:61:df:90:55:a4:fc:e0:f2:28:e2:e7:ad:a2:
         3b:a3:b1:71:a4:a0:8f:9f:9d:ba:7d:8b:3b:94:36:3e:ff:a9:
         f2:02:36:c6:dd:93:30:77:fe:e4:8a:3b:55:34:3e:cb:22:68:
         d9:06:de:9c:7e:83:ba:5c:bf:7b:d9:05:09:fa:bb:b2:af:70:
         ec:c6:ea:9b:da:8e:49:bc:9d:c8:05:7d:fc:54:d4:09:09:e6:
         56:b4:dc:50:af:61:25:ee:ab:b9:94:7e:7c:c2:f0:b2:b0:fe:
         ce:4c:b6:3b:f4:62:83:fd:39:80:b1:04:5a:89:ae:d4:2d:1c:
         9f:ea:6c:f7:83:b8:7b:9e:dc:f3:40:7c:0a:90:53:4a:84:c7:
         73:ad:38:9c:b8:20:7e:d0:3a:a3:18:99:9c:5e:8e:c8:9e:48:
         bd:57:e5:96:a3:ea:f9:f8:a9:6f:38:42:f3:86:a1:0b:58:7a:
         d1:1e:c0:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq5cHKFzxXJwJkSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk
MGVhMzBhMDgtNzYwMC00ZTc0LWE5M2ItZWI5MTdiOWZjZDU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAys5b2rb/N9iu7rOwPWLgBk1sJqEcdSdZ40GB
IkWlw4fo5l7BxGb4TafD2nNWzYxK7cADci5coSHwJkj5iHiSGtd8ljroB5SLYBDb
Go8EpLwe3hMn2N1zH9e7xiQ53lZ3JwVsJxWqkSPb3bula0Nxc4w0Iljv38F8O9Dr
id4ozGEi9WdIY0ZvL3waBUkDDtP6nYH4UqOylOea/qb/v8KI29sdZ+hBt1IZInlb
zYGlKo2iT/26PvHIergsHTPjk5rk0O6vgUdg8Vs+27Gi8FK2XcKAmYI0qsM5e8r+
nKm8c5+AtIZZykp1WNeJ6uWd2MzoD6s6x8PczHmDUgthL3qr4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGzH9KLFT19THYQdBxRHAQ19doFEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWJkMTRkMzgtNmM4MC0z
NGI2LWI2MTYtNWZmMjZmYjZiM2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop/QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALDttEOl390hofFUKKyhzNT/Zan9zMkbEqbew0xeiVV7N07Aix2cgbJO
875gnQB2YVIC6fc34Gk8WFkuOI2mwR9XBnRdAAnRR/Y9tTiIYd+QVaT84PIo4uet
ojujsXGkoI+fnbp9izuUNj7/qfICNsbdkzB3/uSKO1U0PssiaNkG3px+g7pcv3vZ
BQn6u7KvcOzG6pvajkm8ncgFffxU1AkJ5la03FCvYSXuq7mUfnzC8LKw/s5Mtjv0
YoP9OYCxBFqJrtQtHJ/qbPeDuHue3PNAfAqQU0qEx3OtOJy4IH7QOqMYmZxejsie
SL1X5Zaj6vn4qW84QvOGoQtYetEewBc=
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:57:46 2025 by rpki-client