Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b46d5546-78d0-3e79-8dc2-7e07aebfecf8.roa
File:                     b46d5546-78d0-3e79-8dc2-7e07aebfecf8.roa (raw, json)
Hash identifier:          VAmGe2lHvel7INYQ/rAB4GfdkCfrE+HIP7eMLbZG0BM=
Subject key identifier:   D0:6D:3B:E3:DD:CF:90:50:06:9B:37:C6:2A:58:F7:05:9F:8C:8A:A9
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC7111957AB8E87E546C04200
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b46d5546-78d0-3e79-8dc2-7e07aebfecf8.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     13335
IP address blocks:        162.158.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:11:19:57:ab:8e:87:e5:46:c0:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=66f727f3-5112-483a-9f16-5e64a142fddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:12:d2:d1:91:62:2c:5c:eb:37:ff:ba:3a:ab:
                    b4:f9:30:1b:4a:2b:b9:f1:8f:46:ae:45:a9:6e:8e:
                    b6:21:32:22:16:c0:d1:80:b4:22:4e:c2:9f:8d:ff:
                    a2:a1:44:43:cf:b5:12:fa:e7:35:63:e8:15:ef:99:
                    17:8f:d9:1d:cc:25:6a:11:9e:65:f5:c2:5d:3b:74:
                    d4:45:7e:f8:6f:a7:56:85:93:2d:d7:05:a6:cf:c0:
                    cd:0d:0f:b1:89:cc:6c:70:d5:77:ea:e7:80:2e:67:
                    99:a2:ef:81:bc:38:9b:38:36:1f:ae:5e:58:44:98:
                    1c:18:11:44:64:34:30:8b:87:b7:b3:68:f2:e9:cf:
                    fe:88:9e:52:98:1f:ec:99:be:05:11:d9:93:1d:fa:
                    0f:f3:4b:92:e3:fc:e5:ab:53:91:b3:41:8f:9e:1d:
                    98:af:71:02:ba:e6:22:24:f0:bb:2b:dc:89:e0:42:
                    cf:b0:b2:c7:30:17:56:9e:c8:62:02:ab:2d:bb:af:
                    e1:ae:83:bb:de:51:e6:8f:b9:0d:36:f2:43:b7:20:
                    a4:91:e8:52:e3:49:86:14:94:e4:97:44:dd:b2:55:
                    8b:b6:e0:7a:d8:19:df:51:e5:85:d7:57:00:64:67:
                    c4:87:78:f6:9b:78:73:79:9e:72:d5:ab:7a:e0:49:
                    27:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6D:3B:E3:DD:CF:90:50:06:9B:37:C6:2A:58:F7:05:9F:8C:8A:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b46d5546-78d0-3e79-8dc2-7e07aebfecf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:e0:f2:1c:60:f4:f8:94:18:07:f8:6f:d7:77:69:08:dc:19:
         f4:dd:8d:7a:5c:0c:c7:67:23:07:ba:7a:0f:1c:77:dd:86:95:
         ed:8e:04:16:1a:94:28:ed:e7:bb:cf:07:c3:6b:45:ce:83:d8:
         a5:a5:fb:5a:06:05:b4:70:87:81:8e:3f:19:18:a6:05:18:52:
         f5:05:d9:3d:1a:ce:fd:04:7b:26:74:b4:d1:51:10:3f:be:94:
         8a:66:a9:ea:f5:f5:6e:fa:12:d9:b4:0b:59:61:5d:f3:ae:8b:
         20:75:fd:cb:9e:d8:33:fd:02:65:50:2b:03:85:f4:f2:cf:24:
         40:b6:63:da:2a:54:cb:d4:64:04:2d:68:cf:64:7f:f0:fd:63:
         fa:e9:00:bc:98:f3:49:5e:84:6e:b5:ed:86:2b:27:3c:07:2a:
         48:50:09:1d:89:a2:00:25:2a:1e:c9:23:68:68:b0:58:57:ea:
         d2:48:e2:c1:7b:0a:89:f5:67:01:bf:51:cf:db:eb:3b:d4:d6:
         96:32:ca:30:cd:df:09:4c:d2:d4:42:83:2c:2f:55:cc:d7:4f:
         32:81:fd:7c:30:98:85:fb:fa:b2:27:83:64:b9:64:60:39:3f:
         b5:05:48:74:99:07:5a:05:2d:de:8e:91:fc:de:77:e3:72:34:
         b4:0d:a3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:12:06 2025 by rpki-client