Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/d7f10099-ddab-3aa0-9212-05ea67884445.roa
File:                     d7f10099-ddab-3aa0-9212-05ea67884445.roa (raw, json)
Hash identifier:          ZNTKoCsQ0Dy3OcVm1m7Ks8z7z17YrJHHlxaLwbN8+o0=
Subject key identifier:   16:1F:92:0C:9E:67:AE:58:4F:B6:CA:C2:A6:1E:EA:29:4F:D8:71:8C
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584930DE78AC31DF52DD43C69E00
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/d7f10099-ddab-3aa0-9212-05ea67884445.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        158.51.108.0/24 maxlen: 24
                          2602:fd6f:40::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:78:ac:31:df:52:dd:43:c6:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=0605d895-63c2-46c0-ae88-f031ddfe49b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:de:81:80:aa:bf:1e:1e:79:fd:e6:03:0b:0d:
                    71:68:00:c9:fb:6f:41:ca:31:ae:f1:db:24:5b:1a:
                    c5:9f:f6:46:af:4c:52:bd:df:13:b8:0d:fd:b2:2b:
                    ae:c5:63:3f:9f:ae:fd:a3:18:90:b0:ea:e8:76:e6:
                    27:81:fe:c2:72:36:22:45:10:08:dc:77:e4:de:ee:
                    a2:bb:ae:25:ba:5c:1a:a5:7a:06:fe:d3:32:dd:d1:
                    a6:77:29:6e:a3:d1:b7:ec:04:b2:0c:66:78:06:ad:
                    96:b0:08:c1:c2:1b:82:b3:c2:47:ab:1d:dc:b1:77:
                    61:20:27:7e:1a:50:62:1c:33:16:6c:7a:f9:dc:5b:
                    5e:d2:7b:77:e3:ab:55:80:ba:9e:86:e8:e0:23:2b:
                    96:bc:bf:61:1b:f9:71:de:5f:58:24:f1:57:e5:fd:
                    f7:d5:3e:75:cd:d9:a9:88:b3:17:f4:ed:a2:a4:60:
                    d0:2d:1b:ec:05:a9:02:68:71:1b:2a:96:0c:d3:92:
                    d1:df:cc:24:cb:1c:9a:f2:0c:1c:79:5e:fb:72:37:
                    8e:bf:33:c3:66:af:a1:98:dd:35:f2:d7:b3:e1:2e:
                    dd:64:a7:55:f1:1e:d7:4f:6c:b3:b3:a8:18:24:fd:
                    17:8d:45:00:d4:be:e7:2b:a3:77:29:e6:da:16:fd:
                    7c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:1F:92:0C:9E:67:AE:58:4F:B6:CA:C2:A6:1E:EA:29:4F:D8:71:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/d7f10099-ddab-3aa0-9212-05ea67884445.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.108.0/24
                IPv6:
                  2602:fd6f:40::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:1c:ef:c7:31:69:85:5a:b1:d6:e0:ae:c3:a3:7c:df:33:6b:
         cc:ca:36:c9:df:8a:34:e8:a7:f4:22:cd:b7:a4:ab:0d:b9:32:
         d6:0c:74:3f:69:42:e4:e1:a4:60:7a:e8:42:29:e9:7f:d5:54:
         9b:f1:ec:0a:1f:ff:90:aa:c1:b1:b5:1b:da:2d:70:be:02:cf:
         2b:55:c8:20:e5:db:be:96:62:92:75:e2:c2:84:b1:db:29:6f:
         87:9e:91:08:bd:5c:2b:17:12:23:23:81:89:d2:da:85:9b:53:
         1c:7a:f6:f7:88:2d:89:82:f2:3f:c7:3c:37:b2:42:cb:67:17:
         e3:f0:68:40:6b:fb:7c:a2:b6:b1:73:f4:25:6d:4b:d1:64:db:
         90:b8:95:8c:20:23:fc:82:d5:a6:e6:f2:cc:96:ba:d1:8e:74:
         c1:b3:c3:96:1f:60:3c:12:23:1d:71:fc:2c:92:48:cf:a9:7e:
         e3:cf:4d:2c:97:00:8f:94:13:c1:26:49:7f:46:c8:52:b5:0f:
         36:13:30:65:3b:80:00:94:89:21:61:ef:aa:d4:1b:14:0c:79:
         20:ad:e4:67:f0:1c:89:53:1d:26:28:e1:f2:d0:32:14:6b:50:
         9b:cf:35:86:e6:e3:a2:98:23:28:88:9e:aa:78:77:19:2e:3b:
         09:cd:ac:f6
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEkw3nisMd9S3UPGngAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjE4OTgxMDAtZjQwYy00MDAyLWI2OGEtOGE5N2I1NDhl
NjlkMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk
MDYwNWQ4OTUtNjNjMi00NmMwLWFlODgtZjAzMWRkZmU0OWI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt6BgKq/Hh55/eYDCw1xaADJ+29ByjGu8dsk
WxrFn/ZGr0xSvd8TuA39siuuxWM/n679oxiQsOroduYngf7CcjYiRRAI3Hfk3u6i
u64lulwapXoG/tMy3dGmdyluo9G37ASyDGZ4Bq2WsAjBwhuCs8JHqx3csXdhICd+
GlBiHDMWbHr53Fte0nt346tVgLqehujgIyuWvL9hG/lx3l9YJPFX5f331T51zdmp
iLMX9O2ipGDQLRvsBakCaHEbKpYM05LR38wkyxya8gwceV77cjeOvzPDZq+hmN01
8tez4S7dZKdV8R7XT2yzs6gYJP0XjUUA1L7nK6N3KebaFv18+wIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFBYfkgyeZ65YT7bKwqYe6ilP2HGMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5
ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3YjU0OGU2OWQvZDdmMTAwOTktZGRhYi0z
YWEwLTkyMTItMDVlYTY3ODg0NDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjE4OTgxMDAtZjQwYy00MDAyLWI2
OGEtOGE5N2I1NDhlNjlkL2IxODk4MTAwLWY0MGMtNDAwMi1iNjhhLThhOTdiNTQ4
ZTY5ZC5jcmwwHwYDVR0jBBgwFoAUiUz4vQ00NIcYcDP5AHBKyw94UlMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3
YjU0OGU2OWQuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAnjNsMA8E
AgACMAkDBwQmAv1vAEAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAHRzvxzFphVqx1uCuw6N83zNrzMo2yd+K
NOin9CLNt6SrDbky1gx0P2lC5OGkYHroQinpf9VUm/HsCh//kKrBsbUb2i1wvgLP
K1XIIOXbvpZiknXiwoSx2ylvh56RCL1cKxcSIyOBidLahZtTHHr294gtiYLyP8c8
N7JCy2cX4/BoQGv7fKK2sXP0JW1L0WTbkLiVjCAj/ILVpubyzJa60Y50wbPDlh9g
PBIjHXH8LJJIz6l+489NLJcAj5QTwSZJf0bIUrUPNhMwZTuAAJSJIWHvqtQbFAx5
IK3kZ/AciVMdJijh8tAyFGtQm881hubjopgjKIieqnh3GS47Cc2s9g==
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:47:24 2025 by rpki-client