Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/77819b9f-f935-341e-8b8e-c87937cd602e.roa
File:                     77819b9f-f935-341e-8b8e-c87937cd602e.roa (raw, json)
Hash identifier:          jXNb+enluHoGAV8ZZEKk5YSgj2EiTxm/0Kc3UK2I0gc=
Subject key identifier:   E4:84:C6:E2:F4:8E:C4:24:7D:D1:AC:5D:DF:D4:C2:93:57:AD:CA:43
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC7111BAB7255E0DFA2E6C180
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/77819b9f-f935-341e-8b8e-c87937cd602e.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     13335
IP address blocks:        162.158.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:11:1b:ab:72:55:e0:df:a2:e6:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=d7d76944-5157-412d-85fb-3b549827fdd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6f:e5:e1:26:4e:4f:b8:b6:1c:fe:70:4a:01:
                    ec:39:25:26:ad:16:9d:51:63:7b:b1:b1:7c:1a:64:
                    d7:26:ff:39:30:74:ff:59:8d:38:0e:ce:83:65:25:
                    a6:78:e5:57:33:33:53:e4:3a:c7:e8:55:6e:19:43:
                    0b:15:0a:93:43:9f:00:cb:05:3b:f8:c8:70:32:25:
                    f5:1a:bd:76:7b:e7:9f:36:a1:b7:bf:52:83:fd:fa:
                    42:4d:39:0d:4e:e7:42:f5:06:18:db:86:a0:e9:cb:
                    18:94:11:d5:bc:ff:7e:07:42:88:24:fc:32:73:b4:
                    ca:93:9a:96:79:a1:29:7c:08:09:7d:cf:ac:f6:59:
                    14:f6:07:68:df:52:93:36:12:86:78:5f:0e:31:67:
                    6a:4e:15:aa:6f:31:6d:d0:c4:eb:3d:8f:d0:66:cf:
                    a5:93:f6:33:6f:36:bd:0a:a8:b3:13:c9:47:f3:94:
                    d8:eb:f7:11:7a:47:a0:da:56:57:04:93:b4:cf:2e:
                    64:68:af:8a:a2:79:32:c9:02:2e:74:c6:d5:a8:0d:
                    a9:f3:7c:fb:89:fb:00:c6:6e:e7:2e:9d:f0:5e:e1:
                    41:d3:ef:7d:dc:c4:47:30:fd:8e:74:16:46:14:c3:
                    78:02:6a:6e:7b:75:00:64:13:e4:0c:b7:11:a0:98:
                    9f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:84:C6:E2:F4:8E:C4:24:7D:D1:AC:5D:DF:D4:C2:93:57:AD:CA:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/77819b9f-f935-341e-8b8e-c87937cd602e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:fe:d2:36:f8:a6:f7:c8:b9:41:e7:46:5f:89:b2:a5:90:5c:
         8f:a7:b4:c3:e7:7f:01:2d:e7:5b:bd:b6:56:ad:e5:76:ba:45:
         f3:a0:4c:bf:49:81:c3:3d:a5:44:6d:5b:c2:2a:09:b3:83:48:
         e6:ff:4e:08:43:9d:c9:d1:ab:25:1e:e3:3e:ee:96:88:c8:75:
         3a:31:a6:53:c6:2e:14:e8:7e:90:08:bc:3d:02:4e:d2:ca:19:
         e1:39:cb:3c:01:84:b1:8c:e8:dc:0b:73:e5:7b:bc:0c:29:ac:
         22:bb:05:3c:60:43:58:e9:a4:5b:ed:45:bf:01:da:e7:c5:c0:
         55:5c:9e:7f:3c:4a:ff:e0:88:08:94:a7:6a:e0:e9:7c:3a:fe:
         e0:dc:ad:73:f8:49:07:11:f5:ca:ce:9a:5f:9c:8d:05:45:0f:
         ea:fe:bf:e8:f9:8f:5a:b0:d4:1a:d7:60:45:1b:84:96:db:ea:
         92:c0:08:03:cd:52:5d:fa:36:c3:64:74:10:86:3e:bf:1d:31:
         f5:e1:16:67:ba:30:17:45:10:eb:d1:d8:05:92:4c:f5:97:6b:
         81:2e:87:34:92:c3:39:38:14:dc:37:ec:58:3b:64:94:79:75:
         d2:d2:29:06:3a:4a:71:b9:aa:fa:74:ff:b0:e9:69:b9:4e:4f:
         20:8c:7b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:09:32 2025 by rpki-client