Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/6ac43537-8355-37a7-9a4d-20a26742058a.roa
File:                     6ac43537-8355-37a7-9a4d-20a26742058a.roa (raw, json)
Hash identifier:          J1rwBchI55LfguRmK+sUmUiaAajjsvwHaIf7rUd9Jbo=
Subject key identifier:   75:60:D9:CE:E1:DE:A9:5D:5D:4E:FC:17:AA:F1:49:CC:A9:D9:0D:E9
Certificate issuer:       /CN=5410af3b-1667-4dd4-9260-1835889ae3a3
Certificate serial:       010D0C9F43285849D594DFBDDFF990F18977DDE0
Authority key identifier: B8:7F:76:B3:F1:DA:95:1F:69:6F:EC:30:F0:FB:FA:25:16:48:C1:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/6ac43537-8355-37a7-9a4d-20a26742058a.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        162.247.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/5410af3b-1667-4dd4-9260-1835889ae3a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/5410af3b-1667-4dd4-9260-1835889ae3a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:df:bd:df:f9:90:f1:89:77:dd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5410af3b-1667-4dd4-9260-1835889ae3a3
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=e8eb3b7c-47a4-49fb-876d-e6a7938c40b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:10:68:0e:e4:04:b1:7b:b0:86:a7:b2:09:0c:
                    2e:41:6a:19:89:3b:a2:a2:98:7c:03:5f:c1:af:e0:
                    e8:51:bd:60:73:7f:0d:ef:d7:41:d3:f7:28:88:6a:
                    f7:14:ba:25:e2:3f:38:16:74:41:8f:f4:8a:b0:44:
                    82:fb:f5:9b:2e:f2:52:55:5c:33:45:ce:a2:61:4a:
                    7a:b1:b4:4c:fc:d5:11:b6:04:7a:3a:a4:24:5f:ab:
                    1b:17:30:9c:4b:1f:6b:23:16:9c:42:5e:30:ff:06:
                    48:ee:80:5d:c3:db:95:dc:33:ef:07:48:f5:e2:18:
                    d0:65:07:50:56:f7:28:6a:b4:1f:96:6d:52:6d:f0:
                    d7:a7:c8:37:eb:ef:bf:ad:11:46:74:76:91:29:1b:
                    8d:82:16:46:eb:d7:74:9e:c6:e5:b0:cb:5e:9c:67:
                    68:f7:3f:31:c6:f9:a9:db:d5:ea:9e:66:fe:12:53:
                    f8:90:7d:63:8e:3c:28:0b:bc:5a:f5:55:22:a8:e7:
                    d4:37:b0:cd:c9:ae:c9:3c:23:e4:1a:01:72:d9:2e:
                    ee:0d:58:41:a5:54:06:9a:60:7c:f1:a7:35:cc:fb:
                    1f:4f:37:5d:b8:68:58:cd:7a:d6:ee:e1:48:20:03:
                    9e:04:1e:fd:a9:c3:0d:ed:48:55:69:b6:45:06:fb:
                    1d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:60:D9:CE:E1:DE:A9:5D:5D:4E:FC:17:AA:F1:49:CC:A9:D9:0D:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/6ac43537-8355-37a7-9a4d-20a26742058a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3/5410af3b-1667-4dd4-9260-1835889ae3a3.crl

            X509v3 Authority Key Identifier:
                keyid:B8:7F:76:B3:F1:DA:95:1F:69:6F:EC:30:F0:FB:FA:25:16:48:C1:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5410af3b-1667-4dd4-9260-1835889ae3a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:7a:43:d1:c3:f6:0f:c7:54:7a:ac:7b:88:02:1d:e7:5f:60:
         39:62:62:00:94:90:0f:49:66:80:c9:e2:ac:35:60:cd:8c:f9:
         f7:77:b9:37:eb:aa:da:1a:95:1a:27:5e:e0:35:bd:44:d4:18:
         b8:0f:e3:b2:d6:0c:39:26:e9:dc:7f:fe:18:01:9b:17:f8:91:
         61:05:5e:2c:4d:14:84:b8:ae:6f:a4:bb:50:e4:68:b3:93:74:
         1f:3a:b5:66:1e:b8:93:eb:7f:7a:16:d7:59:af:e6:05:d8:62:
         bb:2b:68:0e:7f:1e:95:29:c8:15:f9:8d:cd:87:45:28:b6:e1:
         ef:b6:b2:8c:70:c0:53:8a:e9:e6:1d:b8:26:bd:4d:e9:b6:65:
         f5:d8:5d:7c:a4:b3:c8:a0:64:69:31:9e:3b:50:be:db:17:6f:
         a2:1c:ad:3c:18:58:f4:44:08:2d:b1:35:2a:6d:2f:27:b9:3b:
         f2:26:30:b8:65:f7:13:61:87:7d:ef:e3:b6:ab:d1:82:56:07:
         07:b5:0d:f9:68:8c:91:03:b9:af:f4:d9:d8:dc:87:ce:ea:d7:
         e7:b9:77:a7:46:2b:ad:fe:c1:34:d9:42:dc:5f:5f:ba:ca:99:
         e0:ad:00:55:83:1f:61:17:1b:a4:8a:c6:1e:79:4d:6d:48:21:
         6b:31:03:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlN+93/mQ8Yl33eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTQxMGFmM2ItMTY2Ny00ZGQ0LTkyNjAtMTgzNTg4OWFl
M2EzMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk
ZThlYjNiN2MtNDdhNC00OWZiLTg3NmQtZTZhNzkzOGM0MGI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBBoDuQEsXuwhqeyCQwuQWoZiTuioph8A1/B
r+DoUb1gc38N79dB0/coiGr3FLol4j84FnRBj/SKsESC+/WbLvJSVVwzRc6iYUp6
sbRM/NURtgR6OqQkX6sbFzCcSx9rIxacQl4w/wZI7oBdw9uV3DPvB0j14hjQZQdQ
VvcoarQflm1SbfDXp8g36++/rRFGdHaRKRuNghZG69d0nsblsMtenGdo9z8xxvmp
29Xqnmb+ElP4kH1jjjwoC7xa9VUiqOfUN7DNya7JPCPkGgFy2S7uDVhBpVQGmmB8
8ac1zPsfTzdduGhYzXrW7uFIIAOeBB79qcMN7UhVabZFBvsd7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHVg2c7h3qldXU78F6rxScyp2Q3pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81NDEw
YWYzYi0xNjY3LTRkZDQtOTI2MC0xODM1ODg5YWUzYTMvNmFjNDM1MzctODM1NS0z
N2E3LTlhNGQtMjBhMjY3NDIwNThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTQxMGFmM2ItMTY2Ny00ZGQ0LTky
NjAtMTgzNTg4OWFlM2EzLzU0MTBhZjNiLTE2NjctNGRkNC05MjYwLTE4MzU4ODlh
ZTNhMy5jcmwwHwYDVR0jBBgwFoAUuH92s/HalR9pb+ww8Pv6JRZIwWYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81NDEwYWYzYi0xNjY3LTRkZDQtOTI2MC0xODM1
ODg5YWUzYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovehMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABh6Q9HD9g/HVHqse4gCHedfYDliYgCUkA9JZoDJ4qw1YM2M+fd3uTfr
qtoalRonXuA1vUTUGLgP47LWDDkm6dx//hgBmxf4kWEFXixNFIS4rm+ku1DkaLOT
dB86tWYeuJPrf3oW11mv5gXYYrsraA5/HpUpyBX5jc2HRSi24e+2soxwwFOK6eYd
uCa9Tem2ZfXYXXyks8igZGkxnjtQvtsXb6IcrTwYWPRECC2xNSptLye5O/ImMLhl
9xNhh33v47ar0YJWBwe1DflojJEDua/02djch87q1+e5d6dGK63+wTTZQtxfX7rK
meCtAFWDH2EXG6SKxh55TW1IIWsxA14=
-----END CERTIFICATE-----
Generated at Sat Jun 14 18:55:45 2025 by rpki-client