Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5d20b8d2-9db8-332e-aa33-7d152602e1c6.roa
File:                     5d20b8d2-9db8-332e-aa33-7d152602e1c6.roa (raw, json)
Hash identifier:          LQW3fb/CsltRM0gMjjiin6EKjCGVqusAH2ZJi9aR8es=
Subject key identifier:   A8:50:80:34:8A:31:14:23:A6:6F:CC:94:60:C5:7B:DE:2F:38:05:FA
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584A51D07F91750183EB09361F00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5d20b8d2-9db8-332e-aa33-7d152602e1c6.roa
Signing time:             Thu 26 Jun 2025 13:01:04 +0000
ROA not before:           Thu 26 Jun 2025 13:01:04 +0000
ROA not after:            Wed 24 Sep 2025 13:01:04 +0000
asID:                     13335
IP address blocks:        162.158.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:d0:7f:91:75:01:83:eb:09:36:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 26 13:01:04 2025 GMT
            Not After : Sep 24 13:01:04 2025 GMT
        Subject: CN=12e84036-2358-4c91-a084-385ebadec598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:67:15:7d:f6:99:a5:4a:db:52:da:4d:3c:27:
                    e7:e0:b4:96:10:fc:46:93:14:59:6b:b8:a9:5d:98:
                    12:10:c8:ec:6c:5e:5f:29:da:dd:25:f7:dc:f1:f8:
                    2c:d0:9e:a5:0e:99:82:89:88:d8:1b:e5:bc:2d:ae:
                    09:61:6e:89:2d:31:63:e0:90:e6:38:a0:ca:f0:2e:
                    29:b4:31:be:d9:b0:ea:74:a3:9a:30:03:90:73:f0:
                    83:8d:e5:d2:ac:02:7b:c4:cd:aa:69:15:23:43:1f:
                    c2:ff:63:79:89:7a:dd:bf:d9:0c:5c:a5:cc:de:e4:
                    50:20:dd:ed:1f:6c:dc:73:2b:e2:69:bd:f9:cd:52:
                    eb:f7:aa:6b:f6:89:f2:98:ca:15:18:e5:78:a7:f2:
                    34:c9:8a:b2:13:79:01:d8:c9:8d:1a:05:00:8b:02:
                    fc:43:09:7f:ca:97:cf:40:42:7e:37:62:8c:d9:62:
                    41:ad:b4:b4:21:55:a5:6d:26:a9:0c:5e:0e:ff:95:
                    20:22:b9:50:ff:df:38:5c:6c:c9:be:e9:ed:b6:c8:
                    ce:c6:e9:f3:38:bf:2f:1e:b6:6d:74:f8:db:9b:ae:
                    42:14:a0:70:3d:32:18:ce:c8:42:cb:c3:da:24:4b:
                    c8:77:fb:32:60:fd:5a:11:38:c9:27:e1:ec:a6:8a:
                    65:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:50:80:34:8A:31:14:23:A6:6F:CC:94:60:C5:7B:DE:2F:38:05:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5d20b8d2-9db8-332e-aa33-7d152602e1c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:0c:00:69:dd:7e:73:37:48:a8:d6:bd:ed:87:55:70:9a:ef:
         b6:a4:10:ce:6d:5e:88:cb:12:c1:33:76:e6:09:a5:96:6a:d3:
         f6:21:b9:eb:51:9c:84:66:9b:d9:a1:0f:5f:46:99:9f:05:e3:
         82:38:87:08:63:a2:9c:3f:fe:f9:19:84:c1:0b:dc:72:48:04:
         d0:9f:ce:49:23:6c:27:a5:d3:35:a0:9a:73:d8:d1:59:b4:7b:
         a5:49:dd:7f:51:34:93:8f:56:b3:05:3f:0a:ad:f7:7f:93:fb:
         30:86:7b:c9:02:ef:b3:cb:dd:ee:06:47:07:76:40:59:9d:8b:
         17:da:74:c2:68:bf:8b:66:d7:0c:a4:3c:f1:ed:b4:90:ff:56:
         0d:05:8e:85:ee:04:af:e3:32:bb:1a:d0:21:03:d2:f9:e8:f5:
         e4:7f:59:f8:76:5b:d0:32:ed:cc:3d:ff:bb:de:ed:e9:d1:cc:
         73:09:e2:25:c6:35:ef:83:94:42:62:60:3c:82:92:d8:42:fa:
         cd:23:c6:27:0b:9b:eb:fe:f4:06:1f:53:2f:3a:1f:e9:9b:a1:
         07:0e:0d:e3:1e:2c:65:ee:c3:37:71:c7:43:90:d6:8c:19:d5:
         a1:2d:a0:c3:f4:db:bc:c3:49:46:48:9f:fb:a7:36:6d:be:48:
         a1:d4:36:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:28:26 2025 by rpki-client