Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b1916065-963e-45ee-bb47-eb3db73641d3/e61337aa-3d86-3d6b-b494-b662d7e14525.roa
File:                     e61337aa-3d86-3d6b-b494-b662d7e14525.roa (raw, json)
Hash identifier:          SsLL/QkAPunLH24jvxl4pYrMhMFwZOSO5G9NysOyYec=
Subject key identifier:   D4:27:83:82:12:47:6A:7F:6D:BD:EC:75:AC:72:37:03:05:A5:69:72
Certificate issuer:       /CN=b1916065-963e-45ee-bb47-eb3db73641d3
Certificate serial:       010D0C9F43285849F9DFD44550B6751CBB92CAC0
Authority key identifier: 22:2A:D5:36:8D:B7:D8:A5:42:CB:75:2A:1E:01:68:6E:51:CF:D4:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b1916065-963e-45ee-bb47-eb3db73641d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b1916065-963e-45ee-bb47-eb3db73641d3/e61337aa-3d86-3d6b-b494-b662d7e14525.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     5065
IP address blocks:        158.51.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b1916065-963e-45ee-bb47-eb3db73641d3/b1916065-963e-45ee-bb47-eb3db73641d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b1916065-963e-45ee-bb47-eb3db73641d3/b1916065-963e-45ee-bb47-eb3db73641d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b1916065-963e-45ee-bb47-eb3db73641d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:d4:45:50:b6:75:1c:bb:92:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1916065-963e-45ee-bb47-eb3db73641d3
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=03d40b64-07e6-4214-8322-beb32b2396d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:70:68:e4:f2:45:04:75:b8:4c:de:c0:a7:bf:
                    10:5e:af:90:0e:fa:23:38:2b:75:2e:e2:06:c2:91:
                    6a:d2:21:f2:af:1e:4f:22:87:95:af:1a:34:7c:29:
                    83:dd:a5:6d:12:4c:82:de:c9:38:18:1d:0a:cf:67:
                    aa:42:ab:64:a6:44:3b:4e:61:87:f3:b7:2e:c2:72:
                    b5:5e:89:cd:10:d9:78:d5:5f:61:2a:0c:32:59:ae:
                    f3:1f:b0:93:33:f5:45:47:03:d7:58:aa:a2:87:94:
                    ba:f3:25:23:07:82:07:32:62:31:71:1c:a2:4d:f0:
                    b3:c6:cf:85:fb:aa:62:a1:84:25:9e:0c:79:bc:92:
                    dd:52:71:42:69:f7:88:c9:b8:ab:9b:97:58:cc:df:
                    d8:f9:69:8d:8b:de:e9:a5:75:51:7f:dc:45:98:bf:
                    c1:a7:43:15:95:01:42:71:8f:7c:04:b7:26:fb:06:
                    cd:a3:2b:3f:36:50:6b:36:76:a4:82:ae:37:4d:1b:
                    14:7b:3f:ed:a7:ad:ba:1e:ae:10:8d:5b:6b:6b:48:
                    65:4a:ff:36:ed:42:5f:73:3d:0f:c4:c0:59:df:83:
                    8e:c7:5c:73:c1:03:52:87:21:56:77:84:fa:27:0b:
                    8e:9d:4c:57:fd:c5:09:21:49:bd:ba:72:7d:83:06:
                    6f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:27:83:82:12:47:6A:7F:6D:BD:EC:75:AC:72:37:03:05:A5:69:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b1916065-963e-45ee-bb47-eb3db73641d3/e61337aa-3d86-3d6b-b494-b662d7e14525.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b1916065-963e-45ee-bb47-eb3db73641d3/b1916065-963e-45ee-bb47-eb3db73641d3.crl

            X509v3 Authority Key Identifier:
                keyid:22:2A:D5:36:8D:B7:D8:A5:42:CB:75:2A:1E:01:68:6E:51:CF:D4:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b1916065-963e-45ee-bb47-eb3db73641d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:f2:4c:39:bb:e8:8a:d1:c9:94:92:8f:f6:83:5c:ea:a1:5c:
         bd:53:14:4f:c7:57:18:4c:82:ff:e0:5d:7f:af:f5:a3:82:22:
         a2:93:4d:a3:83:0f:44:eb:0a:21:42:95:ce:6d:bb:95:94:97:
         76:d8:fb:7b:a9:26:17:26:45:07:2b:0a:54:49:0f:d1:1e:55:
         53:8f:9f:59:78:85:f7:28:4f:82:2f:ca:94:3e:c6:8c:05:44:
         03:b8:da:93:cf:4e:1c:02:ea:56:26:a3:9d:24:b6:18:b6:55:
         cf:43:7c:4e:2d:d3:34:82:ee:2e:89:74:9c:21:44:82:36:3a:
         1e:2a:21:86:f7:dd:17:a2:a0:13:b3:95:37:9e:0a:27:95:c8:
         2d:cd:0a:fc:62:b8:2a:4b:1e:ee:89:4e:a4:03:95:e3:b5:df:
         91:4b:91:99:0b:d4:94:71:19:48:98:67:70:78:83:4e:da:36:
         5c:04:96:6f:72:6f:13:2b:33:62:4c:18:1a:41:7f:d0:e9:17:
         6f:a6:04:7d:f4:4a:be:8d:87:cb:1b:f4:5d:6c:11:f2:d4:40:
         49:b0:b4:03:76:f0:e6:a8:c2:b3:18:07:c6:d9:31:f5:40:ca:
         4c:3b:85:01:97:2f:e1:8c:32:1d:63:7a:a2:df:c8:95:e8:ed:
         ad:59:ce:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:36:48 2025 by rpki-client