Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dbc43273-d575-3ab7-abe1-e5a54a96d902.roa
File:                     dbc43273-d575-3ab7-abe1-e5a54a96d902.roa (raw, json)
Hash identifier:          BtvGaArmXANi8yi2frS24yeClBOUg7NjBHtmxjefjbA=
Subject key identifier:   97:C5:F2:0B:89:6C:A3:7C:0A:C6:50:54:15:1A:F5:3B:21:4A:6E:20
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AB5F97E8F62594F8E76AC7D00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dbc43273-d575-3ab7-abe1-e5a54a96d902.roa
Signing time:             Fri 01 Aug 2025 10:04:46 +0000
ROA not before:           Fri 01 Aug 2025 10:04:46 +0000
ROA not after:            Thu 30 Oct 2025 10:04:46 +0000
asID:                     13335
IP address blocks:        162.158.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b5:f9:7e:8f:62:59:4f:8e:76:ac:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  1 10:04:46 2025 GMT
            Not After : Oct 30 10:04:46 2025 GMT
        Subject: CN=1f238e5b-a2c8-49fd-8f23-01b74470dc31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0d:7c:63:34:8b:7b:4a:ff:81:be:46:7a:1c:
                    5b:58:9f:07:66:1d:0a:32:8a:9e:f6:b1:d3:0e:97:
                    23:20:cf:7f:94:0b:93:7b:b6:6c:8c:30:7d:ac:7d:
                    ff:08:22:5e:d6:58:0a:67:42:fd:50:60:71:80:99:
                    43:8f:23:c4:5c:fb:5c:bd:fb:02:5c:0c:eb:82:b3:
                    cc:0a:63:d0:5e:3b:ca:f2:fc:22:25:27:c9:2b:b4:
                    da:b1:b8:0f:f7:7a:17:6f:aa:f3:c5:23:1b:0a:7f:
                    03:19:0e:e3:c3:70:8f:f5:84:60:4a:b7:13:c2:e4:
                    34:3f:66:5a:63:3e:ed:ad:76:66:9f:18:35:19:2c:
                    89:3e:93:41:b7:01:41:ec:24:c1:aa:23:eb:4d:ee:
                    cc:b1:20:bf:31:39:2b:98:31:06:2a:ac:d2:78:86:
                    40:f8:e3:89:26:81:24:f7:07:cd:c5:c7:9e:b3:1c:
                    be:4e:6b:3c:96:1f:bf:1f:46:de:bb:de:f1:c7:34:
                    87:11:a8:d9:db:7a:f9:e8:fb:92:e2:57:4b:d9:2a:
                    df:f6:af:32:be:e4:93:7c:ce:b3:e0:16:33:cc:62:
                    99:57:d4:6c:38:ad:64:2e:6f:17:6d:71:42:2e:f5:
                    72:eb:26:6d:07:07:30:a6:5d:51:4a:9b:a8:87:1a:
                    cc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C5:F2:0B:89:6C:A3:7C:0A:C6:50:54:15:1A:F5:3B:21:4A:6E:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dbc43273-d575-3ab7-abe1-e5a54a96d902.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.158.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:f8:90:94:5e:b0:e0:b7:30:e4:fa:08:69:01:94:8c:dc:c6:
         10:76:54:ac:63:ab:d3:d2:3e:88:0a:68:36:29:8e:eb:f1:69:
         87:ea:67:66:59:ca:bc:22:ad:7c:fc:1a:1d:79:33:77:2b:6e:
         19:bd:5c:59:80:15:b1:aa:55:38:e8:28:b1:7d:4e:82:ca:76:
         65:21:14:ac:47:ca:90:25:d1:bd:9b:72:26:78:05:e5:5f:15:
         14:ce:84:eb:f5:c3:8b:35:15:79:1e:a5:77:b4:4a:7f:2a:1b:
         68:49:82:3a:c0:f6:34:72:9c:78:28:a2:de:fd:08:62:1e:9b:
         91:b5:d4:20:07:d3:a2:46:7d:0c:a9:61:d0:05:4b:80:27:54:
         a1:90:6f:0f:f4:3c:3b:70:eb:51:d7:d0:a0:6b:79:e4:44:77:
         55:65:ee:e4:ae:0b:1b:c6:bd:79:f5:79:63:15:17:5f:00:7a:
         8d:47:f2:76:f5:ef:dd:9c:a9:ed:7d:bd:32:66:c4:83:89:3d:
         21:5f:bc:97:07:59:07:e6:4b:b1:c8:44:2b:86:b9:93:e5:14:
         78:33:8f:cc:c7:57:13:fd:44:62:59:25:ff:95:a6:e7:3c:95:
         3c:68:eb:e1:54:2e:45:1b:4a:59:61:f2:3c:ec:40:5e:8c:0c:
         7d:51:60:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 01:36:11 2025 by rpki-client