Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c/d003fd76-bc86-3c27-95cc-ab7fb41ec048.roa
File:                     d003fd76-bc86-3c27-95cc-ab7fb41ec048.roa (raw, json)
Hash identifier:          aoVygSkNj52Q7FGj4uyRH9hZtq+7TA4/WcQmjP2/S6w=
Subject key identifier:   B5:1B:5E:E3:26:16:98:60:67:C3:4D:EE:45:72:C9:2D:74:76:0E:B0
Certificate issuer:       /CN=5d69368b-4714-4878-9f6c-905e98da853c
Certificate serial:       010D0C9F4328584AB4EB73A45A451CEB3DA40940
Authority key identifier: 3F:56:59:D3:78:18:67:3A:B0:07:CB:FD:BF:EA:03:ED:47:A9:B3:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c/d003fd76-bc86-3c27-95cc-ab7fb41ec048.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     16509
IP address blocks:        158.51.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c/5d69368b-4714-4878-9f6c-905e98da853c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c/5d69368b-4714-4878-9f6c-905e98da853c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:73:a4:5a:45:1c:eb:3d:a4:09:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d69368b-4714-4878-9f6c-905e98da853c
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=9747151b-08e3-48cb-9c45-ce73fbc35c59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cc:9a:7d:b1:57:88:5f:83:82:dd:69:cb:ff:
                    89:a6:3c:3b:bd:45:25:da:b3:0f:4f:22:64:d0:0d:
                    68:31:cd:0c:50:bd:f4:4b:f9:90:f3:28:59:78:bc:
                    12:c9:09:ee:c0:57:97:78:00:8a:66:4a:1a:bf:6f:
                    97:56:65:1b:84:c7:3e:51:7c:7f:8b:29:31:bf:05:
                    7a:f8:c0:56:74:b2:66:26:74:64:9f:16:bf:d4:50:
                    3b:07:53:d5:88:4a:cb:67:c6:4d:4a:66:fe:c0:f8:
                    ee:b3:bc:2b:49:8e:58:83:37:e6:f2:17:b9:70:84:
                    ba:d1:fb:83:44:0e:ea:5d:b3:25:0f:a6:1f:1f:90:
                    56:ca:fd:49:13:42:ba:09:6f:2f:a1:a7:35:e6:7a:
                    f8:e9:6a:c0:cf:64:13:cd:e4:61:b1:12:28:07:fc:
                    d4:2a:86:d2:cd:1b:f9:09:6b:77:ab:43:6d:f9:e2:
                    eb:a8:de:8c:ee:4a:e1:d7:db:71:11:80:3d:c1:79:
                    34:b6:2c:a9:c0:e1:34:94:1f:b7:4d:d9:5d:bb:d2:
                    ed:80:5e:3c:f3:fc:f4:ae:7d:dd:30:e9:5c:4d:43:
                    2a:b5:1b:14:20:c3:7b:7f:dc:d6:a9:1c:fc:0c:a8:
                    03:36:3a:78:71:47:46:16:e0:02:6c:64:c1:11:36:
                    21:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:1B:5E:E3:26:16:98:60:67:C3:4D:EE:45:72:C9:2D:74:76:0E:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c/d003fd76-bc86-3c27-95cc-ab7fb41ec048.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c/5d69368b-4714-4878-9f6c-905e98da853c.crl

            X509v3 Authority Key Identifier:
                keyid:3F:56:59:D3:78:18:67:3A:B0:07:CB:FD:BF:EA:03:ED:47:A9:B3:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:89:a8:fc:1a:46:3a:32:d3:a4:29:ae:86:01:f6:76:15:5d:
         fc:9e:a3:8b:ca:17:10:95:30:52:23:df:76:e1:68:33:3b:59:
         e2:81:a2:06:6d:6d:86:2b:bf:c7:d0:f4:fe:f7:da:b5:ba:ea:
         30:f5:8e:71:f9:b1:9d:cd:af:a3:06:60:7e:c6:57:a6:6b:9a:
         a1:ef:ec:c5:39:eb:96:1d:14:90:dc:27:4c:c0:bd:29:2a:ba:
         18:7a:c1:7d:5b:46:49:83:e8:b2:98:37:53:f7:66:11:59:c3:
         3b:b3:88:64:c0:e6:97:fb:45:ee:31:0b:c2:b1:5a:5d:b5:6e:
         47:1c:38:e2:f1:09:be:ac:d7:ce:3b:09:05:95:15:00:68:ed:
         df:49:13:6a:24:0d:3e:d7:2c:4e:07:ce:e6:b7:92:10:c7:2a:
         39:58:ea:28:bc:0e:7e:57:8b:b0:93:ae:fa:04:5d:0f:6f:7e:
         48:bd:a2:69:09:51:aa:db:38:9e:ce:de:e0:d0:80:5b:02:63:
         4a:f8:3d:ea:af:5c:c6:97:f7:b1:01:da:74:be:42:f6:94:ac:
         15:26:cc:4e:ad:66:30:dd:6c:be:86:71:ca:08:b8:b6:12:b9:
         e8:3d:c1:ad:05:80:34:43:e5:f7:77:ad:a3:59:ba:59:16:3f:
         d3:6a:9e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:26:48 2025 by rpki-client