Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2162682b-5ac3-45f6-9093-042c8ec00a00/5118fc9b-6363-3863-bd2d-86930b41977b.roa
File:                     5118fc9b-6363-3863-bd2d-86930b41977b.roa (raw, json)
Hash identifier:          n20Uql8ZAMo8NpeQ/K+7JRQTOdqtxVX7uZ+WnBnQ5Z8=
Subject key identifier:   A8:E8:A5:66:48:BA:01:27:89:D5:90:55:54:97:10:5E:B4:67:E3:43
Certificate issuer:       /CN=2162682b-5ac3-45f6-9093-042c8ec00a00
Certificate serial:       010D0C9F4328584A374AD52ED93AB1DC17B65D58
Authority key identifier: 0D:0F:07:1A:C3:70:53:BD:82:A3:E3:5C:44:0E:1D:2F:24:47:B7:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2162682b-5ac3-45f6-9093-042c8ec00a00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2162682b-5ac3-45f6-9093-042c8ec00a00/5118fc9b-6363-3863-bd2d-86930b41977b.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     53561
IP address blocks:        158.51.88.0/23 maxlen: 24
                          207.167.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2162682b-5ac3-45f6-9093-042c8ec00a00/2162682b-5ac3-45f6-9093-042c8ec00a00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2162682b-5ac3-45f6-9093-042c8ec00a00/2162682b-5ac3-45f6-9093-042c8ec00a00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2162682b-5ac3-45f6-9093-042c8ec00a00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:d5:2e:d9:3a:b1:dc:17:b6:5d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2162682b-5ac3-45f6-9093-042c8ec00a00
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=217eadd1-fd63-4fb5-912b-46235da9af21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:90:11:c4:e9:a0:81:9e:f2:f4:63:d4:bf:02:
                    a9:6c:93:f3:49:7a:6a:80:c0:7d:6f:fc:d3:1b:af:
                    19:18:5d:f4:c4:f0:65:20:09:5d:7f:82:6a:81:77:
                    2d:c1:1a:0b:28:90:24:c6:5f:7e:33:f3:47:58:05:
                    62:0d:22:22:15:5d:e5:bc:dd:9f:28:8f:29:46:38:
                    b5:27:d5:d6:45:67:47:84:bd:22:36:3c:9f:86:d6:
                    f7:3a:65:6c:e5:1c:38:31:d4:cd:f4:a4:3e:11:8b:
                    8d:25:3f:ff:94:01:20:aa:22:b4:08:46:77:f9:04:
                    b3:42:06:52:f3:95:47:34:b9:d2:fc:be:87:83:be:
                    ce:05:2e:11:b9:28:57:b3:4c:ed:03:e5:81:f6:98:
                    3e:4e:95:45:a8:50:49:f3:0d:49:fe:68:2e:a2:5e:
                    95:84:3b:d6:b2:d5:28:88:41:96:2a:97:89:e0:94:
                    36:fa:eb:d4:84:51:ac:30:c1:cc:0e:a3:33:d4:5d:
                    03:43:4e:4d:a8:6a:c9:71:03:3f:d4:55:a4:a5:b8:
                    9a:45:a2:3a:73:a8:a3:93:ee:e8:f8:48:de:e4:c1:
                    09:bf:08:c1:e9:2e:08:b6:40:91:b8:e1:cf:09:6f:
                    fc:1d:0f:44:ee:aa:c0:e1:3b:c1:0b:8e:26:fa:58:
                    2e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E8:A5:66:48:BA:01:27:89:D5:90:55:54:97:10:5E:B4:67:E3:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2162682b-5ac3-45f6-9093-042c8ec00a00/5118fc9b-6363-3863-bd2d-86930b41977b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2162682b-5ac3-45f6-9093-042c8ec00a00/2162682b-5ac3-45f6-9093-042c8ec00a00.crl

            X509v3 Authority Key Identifier:
                keyid:0D:0F:07:1A:C3:70:53:BD:82:A3:E3:5C:44:0E:1D:2F:24:47:B7:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2162682b-5ac3-45f6-9093-042c8ec00a00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.88.0/23
                  207.167.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:a9:2b:6a:7d:5e:f9:86:22:0e:27:08:02:ea:d5:97:4c:d0:
         a5:a7:bc:be:5f:96:a7:75:fe:67:9f:5c:76:0e:7a:f0:00:2c:
         7b:03:75:9d:86:36:bc:31:be:9f:33:3a:90:37:4a:1a:48:79:
         b3:5e:35:90:a7:6f:fc:47:5a:51:7c:e4:53:2a:e4:5e:9a:8b:
         48:94:49:e4:31:8e:75:89:e6:62:ce:0b:6d:73:6d:6b:6f:d0:
         27:f6:7e:0e:73:14:60:c0:f7:99:70:5a:c1:41:30:c9:f4:db:
         87:5c:32:03:9e:89:24:5f:48:8a:09:12:4d:45:d9:66:de:83:
         89:11:ff:5b:13:eb:e8:1e:ad:13:2a:8f:1f:78:e5:32:5f:2c:
         4e:65:1a:c4:ef:3f:ea:ea:fa:36:de:33:af:cd:fb:f7:e5:29:
         87:2d:05:70:78:fb:32:dc:71:3c:0c:60:03:42:73:b6:e9:6a:
         d8:50:ae:8a:a6:a7:35:40:76:d5:bf:4d:f5:64:f0:4f:17:f6:
         ff:b0:fe:97:eb:d6:a5:5f:e3:90:3c:ef:91:6e:62:8d:74:29:
         40:eb:a4:9d:c8:c5:7f:50:af:ee:2b:ca:6e:ea:68:ad:15:b1:
         9b:48:f5:e8:70:ca:aa:8e:89:ad:d9:e9:aa:0c:ac:30:3b:cb:
         6b:38:b6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:00:07 2025 by rpki-client