Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e3285b37-3160-3b7d-bd39-a36f5753c7ec.roa
File:                     e3285b37-3160-3b7d-bd39-a36f5753c7ec.roa (raw, json)
Hash identifier:          gdqnvO0HB8wJhCTvPTyC6U/yrXhUkliOrI31o5AEoOU=
Subject key identifier:   8E:9E:E3:81:44:4C:9F:21:59:14:83:C6:A8:82:5B:C6:D8:15:E5:EB
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC7110D29842DD50D714AAC00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e3285b37-3160-3b7d-bd39-a36f5753c7ec.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     13335
IP address blocks:        162.158.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:11:0d:29:84:2d:d5:0d:71:4a:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=d9ed392b-f44c-4f14-9f5b-f0f1074764e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:19:3f:85:cd:ed:6f:e2:7b:80:90:87:66:f4:
                    de:73:9a:37:29:6a:24:41:94:23:46:e3:36:85:ca:
                    9d:76:5f:22:b7:10:bf:10:4d:92:c0:d7:22:83:d4:
                    c7:71:46:6c:13:04:ee:2e:9c:85:a2:86:76:d2:3f:
                    42:58:aa:4d:89:0c:c1:54:6a:1b:29:7f:56:bf:61:
                    db:1c:d9:4d:9d:54:85:24:0f:65:15:3b:44:e9:e0:
                    ac:11:c3:a3:3a:49:f2:71:b3:eb:94:37:c2:6d:2d:
                    1e:6a:0a:0d:b8:19:51:21:3e:58:5c:4b:21:d8:4d:
                    71:7a:56:54:9a:60:79:28:1b:c1:44:31:09:76:d8:
                    30:00:02:cc:39:04:dd:69:ce:7f:95:93:21:f8:5b:
                    a2:18:f7:95:9c:1e:06:80:7a:d0:7e:74:f6:08:48:
                    51:de:7e:65:6c:12:30:8c:c2:14:7f:89:e2:db:63:
                    b4:0c:e2:0c:0f:48:b7:a0:68:f7:23:21:87:f2:ea:
                    b5:46:7d:b5:cb:14:2a:4a:0d:48:05:24:19:df:a9:
                    80:49:db:5d:0b:d4:1f:bc:5a:b0:27:ca:8a:e8:60:
                    2d:b8:7c:ff:63:30:5a:dc:d2:2d:c8:c2:08:c5:3c:
                    29:b6:59:c9:9d:ef:4f:f2:78:5c:e2:cf:7a:10:72:
                    5e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9E:E3:81:44:4C:9F:21:59:14:83:C6:A8:82:5B:C6:D8:15:E5:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e3285b37-3160-3b7d-bd39-a36f5753c7ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:7a:d9:d7:6d:03:65:5e:4a:a6:ea:ac:8a:aa:da:3f:80:fb:
         90:d1:32:7e:99:de:2a:2c:fd:c9:f7:3e:9c:a6:42:e6:da:c4:
         d6:bd:c3:c3:42:fd:f5:42:a9:9e:53:d2:f9:e9:db:85:ba:fd:
         47:4f:23:9b:20:75:3a:19:a2:0d:1f:25:3c:07:d3:00:11:c3:
         4e:9f:bd:32:8f:2a:31:0c:c1:a0:03:dc:90:40:02:68:6a:a3:
         b6:eb:ee:f6:f1:2a:eb:52:50:62:4c:c5:00:d7:4a:a8:4f:40:
         9f:7d:7b:f9:86:6e:d8:f1:67:33:1f:70:2a:1c:89:9e:cb:55:
         37:88:37:4e:c7:56:14:97:86:17:97:c2:fb:62:38:c0:1d:92:
         16:7b:18:89:3a:cb:cf:6e:89:d3:e3:c2:11:5a:e3:04:f3:a1:
         23:6a:e2:9f:d5:84:33:2a:a1:ff:54:1c:97:15:68:3e:52:d7:
         ff:da:6e:db:f9:99:34:bd:33:e5:5d:1f:35:d1:4b:33:de:41:
         7f:4c:cb:0b:54:15:41:ed:7e:fb:64:4d:de:46:08:ab:d0:a6:
         0d:a8:8a:65:7f:34:c2:34:38:4e:67:f8:e7:d6:03:b7:04:1e:
         c6:84:82:90:bf:13:7d:20:6b:ab:79:f9:6d:e7:a2:6c:48:ab:
         45:cc:c6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:07:38 2025 by rpki-client