Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/078b78cf-d953-3309-bbf3-6ddd55fee124.roa
File:                     078b78cf-d953-3309-bbf3-6ddd55fee124.roa (raw, json)
Hash identifier:          +qkCLlC1XxA5VJJuEQoliBzR942CX0cNuasH0bA3x2g=
Subject key identifier:   FB:02:77:EF:07:BD:5F:B7:D9:87:31:9D:97:3A:4F:FA:E3:94:ED:D1
Certificate issuer:       /CN=8a8a1a2d-c949-4896-93b9-71f917048e79
Certificate serial:       010D0C9F43285849F17FAF990E672D95E850D400
Authority key identifier: CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/078b78cf-d953-3309-bbf3-6ddd55fee124.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     20150
IP address blocks:        158.51.124.0/24 maxlen: 24
                          158.51.125.0/24 maxlen: 24
                          158.51.126.0/24 maxlen: 24
                          158.51.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:af:99:0e:67:2d:95:e8:50:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a8a1a2d-c949-4896-93b9-71f917048e79
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=b98fd8f2-761c-4461-85bd-c01e32b279e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d6:a2:6e:79:44:b6:c5:2b:d3:55:9c:e7:39:
                    15:c5:a5:1c:1b:a0:37:94:2c:18:cd:92:ee:2a:81:
                    ac:ef:73:38:e2:07:19:d6:1c:7d:75:d7:a8:84:24:
                    c3:83:95:e7:a3:01:b6:f9:66:59:e2:39:a8:ba:fc:
                    f9:a2:aa:2c:29:80:bb:8a:2a:a3:1f:a9:c1:4a:7b:
                    ea:b4:8d:56:2e:da:7d:09:23:ce:01:d4:75:95:07:
                    f9:73:62:ef:e7:7d:73:86:de:4d:42:ef:1c:e0:6d:
                    65:83:a5:0a:31:88:d5:85:2b:76:6c:72:bd:71:72:
                    a4:3c:a9:56:98:6f:ab:d4:34:90:10:8d:18:1c:41:
                    d0:7e:62:a5:eb:dd:7d:45:f6:06:76:da:55:e0:34:
                    8b:f9:1d:90:dc:65:b7:fc:0e:fe:e3:1f:d7:06:6f:
                    78:0c:78:41:5d:af:a8:81:86:3f:42:dd:0a:89:5b:
                    22:24:3c:77:74:bc:dc:a0:c5:28:13:fa:f3:ae:19:
                    bd:50:d7:53:1e:66:43:39:5d:9d:07:08:08:55:3f:
                    e1:37:63:de:08:bd:86:b5:7f:6f:cc:e3:0d:c3:77:
                    cf:06:48:8f:32:74:e2:a5:b3:3b:6b:b8:3d:fa:4c:
                    a0:40:da:15:13:22:32:4b:fb:78:29:cb:d7:a8:6d:
                    b2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:02:77:EF:07:BD:5F:B7:D9:87:31:9D:97:3A:4F:FA:E3:94:ED:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/078b78cf-d953-3309-bbf3-6ddd55fee124.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl

            X509v3 Authority Key Identifier:
                keyid:CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:cc:0d:f7:b5:c5:36:5c:5d:5d:5b:46:12:83:8a:51:35:26:
         61:2b:f4:86:16:67:a0:cf:04:d5:5d:92:b7:a8:92:0d:60:cf:
         58:5c:b8:16:05:f3:1c:62:4e:4c:77:14:99:ed:f3:15:54:d8:
         45:b5:b4:2f:36:53:91:e9:78:75:32:d4:b8:b5:6f:1b:f1:6f:
         80:aa:51:a1:77:17:21:d9:8d:cc:db:eb:c8:c7:b8:dc:a7:75:
         88:a1:1a:b2:41:4a:ac:2a:58:b2:9b:ad:ca:a3:e5:91:f8:a7:
         99:d8:8d:f7:62:9b:47:5e:3b:cb:8b:95:73:e1:39:de:b9:a9:
         cb:99:26:26:a9:62:40:41:f7:85:bc:81:a0:10:89:c9:2d:c7:
         ea:82:47:c5:83:0b:14:f7:bc:77:8d:5d:04:e9:e2:f3:60:c2:
         08:f2:db:47:15:c9:ce:66:76:44:b1:45:34:5e:cc:e8:17:21:
         f4:11:65:15:6a:13:0f:cc:03:4a:72:99:05:b8:69:2a:25:2f:
         f7:39:f0:41:a1:6d:e4:90:b1:90:64:d4:38:4b:89:ef:4e:a5:
         56:1d:03:4b:f1:bb:43:34:ff:28:3e:c9:9a:42:4c:0a:07:e1:
         60:3f:b9:04:d4:50:46:de:88:cd:cd:6b:65:bb:32:48:71:49:
         c9:94:c1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:32:09 2025 by rpki-client