Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e7cede57-1a48-3c44-9623-376f5f4f47d2.roa
File:                     e7cede57-1a48-3c44-9623-376f5f4f47d2.roa (raw, json)
Hash identifier:          tx24gEwevKBeP0MSg6Gk+0aaE1DYr+H4Uxyk3NMoXg4=
Subject key identifier:   CF:28:94:18:1B:D1:ED:67:AD:80:11:5C:A2:A6:BE:D4:74:AB:35:28
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC7111AAB8F22DC4125E92500
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e7cede57-1a48-3c44-9623-376f5f4f47d2.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     13335
IP address blocks:        162.158.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:11:1a:ab:8f:22:dc:41:25:e9:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=71efb734-17de-49d2-a0a9-5fbddb0f7875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b5:12:10:54:48:92:f3:24:02:8f:ce:93:31:
                    27:21:a0:3c:c2:0c:c2:2b:f5:3e:3b:96:59:c7:95:
                    c8:4d:2c:d0:57:41:64:43:00:d5:86:b7:fd:8e:64:
                    62:11:34:39:c1:04:c0:8f:c0:9c:7d:fa:52:a0:c7:
                    41:3c:8c:e3:31:f5:d3:69:f1:ab:59:25:8f:81:1b:
                    80:09:99:21:73:cf:ec:47:6f:0d:c7:a7:d2:e1:c9:
                    54:c6:fb:96:51:a5:14:67:f8:e5:52:6b:4b:8a:e9:
                    86:82:2e:c8:f7:c1:70:9f:c9:ff:8d:4e:88:43:7a:
                    a6:fa:d8:4a:b0:cc:69:67:27:95:f7:50:43:be:5a:
                    b7:7d:53:7d:41:a4:66:f0:ef:f7:51:62:2e:3d:29:
                    a1:f5:2e:4e:01:21:31:f0:cc:1e:26:21:de:81:3e:
                    91:f7:84:19:aa:3c:43:88:a2:a6:d9:58:d0:31:f9:
                    63:63:c5:cd:44:37:9c:fa:ff:44:77:e0:be:9b:d5:
                    a4:26:13:2a:9e:27:9a:f7:08:67:5b:69:bc:45:45:
                    6c:fc:7d:87:72:00:f8:e4:4d:84:79:f9:bf:d1:cc:
                    e2:31:03:d3:40:9d:ce:01:2c:5f:35:fc:33:20:ef:
                    99:92:b4:ee:f1:a5:f1:37:42:63:cb:2c:18:1e:d3:
                    02:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:28:94:18:1B:D1:ED:67:AD:80:11:5C:A2:A6:BE:D4:74:AB:35:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e7cede57-1a48-3c44-9623-376f5f4f47d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:d2:34:71:83:4a:c7:6a:58:ac:f6:8c:38:57:06:03:2f:34:
         5d:b1:75:53:5a:af:b3:7a:29:f1:36:ce:d2:37:df:29:d1:c3:
         5f:05:d7:ab:5b:63:b9:3f:51:22:aa:ab:36:87:77:8c:5c:f5:
         86:d0:93:6f:1d:a7:8c:22:d2:a5:61:cf:bf:90:a6:fc:47:0d:
         b6:9e:07:0b:e2:58:2c:8f:e0:fc:41:76:f8:94:ba:d9:6f:4f:
         c2:38:07:6d:b3:25:f9:3b:23:36:4b:20:f0:f6:75:5b:9a:61:
         b2:35:35:bd:e1:13:95:24:61:7e:1f:53:73:54:ea:36:c6:05:
         df:df:b7:7e:9b:b5:b8:0c:04:31:2f:83:52:98:3e:d6:8b:43:
         3e:ce:28:1f:78:77:2c:df:f6:22:93:56:14:1f:d9:aa:73:4e:
         fb:40:94:62:55:64:cb:18:95:c7:6c:97:6d:44:d9:2c:bf:86:
         f1:30:1a:23:ae:8b:7a:59:eb:55:eb:f1:fb:c6:b9:6e:4e:08:
         48:99:04:13:fa:72:48:0b:6b:4b:29:db:2a:6b:11:eb:7d:eb:
         cc:5a:a8:4d:29:62:51:71:cd:88:47:67:80:86:ad:13:56:dd:
         4b:dd:74:0b:54:57:43:87:4b:84:43:1f:d8:01:0e:f7:24:b9:
         ae:ed:66:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:57:32 2025 by rpki-client