Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/361a16d3-f3cf-464c-8fba-a435adeb72cb/56e4d8b0-2117-34ce-b8e6-34ec9b6a0cf6.roa
File:                     56e4d8b0-2117-34ce-b8e6-34ec9b6a0cf6.roa (raw, json)
Hash identifier:          FGqtiNC5bjleTHKwoOnUCW2VZb7IkSPCv70cuhl+Vxk=
Subject key identifier:   32:D4:F3:89:45:75:E3:CC:99:BD:37:00:B9:2C:20:7F:63:89:41:AC
Certificate issuer:       /CN=361a16d3-f3cf-464c-8fba-a435adeb72cb
Certificate serial:       010D0C9F43285849B9AA0159B750406A12BB2D80
Authority key identifier: 90:87:F8:2E:3D:D9:DD:17:A2:09:70:EA:A9:D9:08:41:DC:E1:89:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/361a16d3-f3cf-464c-8fba-a435adeb72cb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/361a16d3-f3cf-464c-8fba-a435adeb72cb/56e4d8b0-2117-34ce-b8e6-34ec9b6a0cf6.roa
Signing time:             Sat 03 May 2025 01:00:47 +0000
ROA not before:           Sat 03 May 2025 01:00:47 +0000
ROA not after:            Fri 01 Aug 2025 01:00:47 +0000
asID:                     138633
IP address blocks:        168.151.40.0/24 maxlen: 24
                          168.151.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/361a16d3-f3cf-464c-8fba-a435adeb72cb/361a16d3-f3cf-464c-8fba-a435adeb72cb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/361a16d3-f3cf-464c-8fba-a435adeb72cb/361a16d3-f3cf-464c-8fba-a435adeb72cb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/361a16d3-f3cf-464c-8fba-a435adeb72cb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b9:aa:01:59:b7:50:40:6a:12:bb:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=361a16d3-f3cf-464c-8fba-a435adeb72cb
        Validity
            Not Before: May  3 01:00:47 2025 GMT
            Not After : Aug  1 01:00:47 2025 GMT
        Subject: CN=b5d5e589-a48d-45f1-884d-e49ebfb34dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:31:d2:a0:f9:3a:7a:25:f1:50:3e:2e:04:d5:
                    1d:e6:93:d4:aa:5a:75:0d:42:9e:df:6c:c7:d8:fe:
                    22:40:d6:b7:ad:a5:8b:14:cd:df:09:2d:65:94:48:
                    b6:3e:1e:94:5d:a4:c7:5b:f7:1f:80:29:57:30:86:
                    04:19:12:62:4a:d4:65:26:98:43:70:28:9b:a5:44:
                    71:26:ff:d9:ac:79:5c:0c:92:65:86:55:45:c2:3d:
                    22:61:2f:cc:20:c0:34:3a:41:3b:6a:08:86:29:2e:
                    a5:dd:a1:e0:c5:39:8d:8a:ef:43:c8:9e:0c:00:d6:
                    b3:6d:75:29:bb:de:63:09:73:b3:9f:ed:31:bc:56:
                    39:af:7c:e6:78:82:8a:26:ef:4a:c5:7f:57:dd:64:
                    75:68:35:97:a3:ec:00:40:4e:87:24:1d:f7:7b:ca:
                    c8:74:d3:da:9e:33:d7:ce:b6:0d:54:1e:fb:3b:ce:
                    ec:58:a0:a2:e3:6e:72:05:77:00:7d:51:46:d1:7e:
                    0d:c6:f7:5e:7d:30:92:0c:fb:f1:8c:80:69:02:c9:
                    ff:16:f8:f2:f6:ed:a6:04:e9:76:1b:29:fb:0b:5d:
                    cf:b9:9a:af:51:a3:3e:5b:74:84:61:44:ea:f2:cc:
                    e8:91:93:20:05:43:5c:13:f2:54:08:6d:85:1d:a2:
                    10:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D4:F3:89:45:75:E3:CC:99:BD:37:00:B9:2C:20:7F:63:89:41:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/361a16d3-f3cf-464c-8fba-a435adeb72cb/56e4d8b0-2117-34ce-b8e6-34ec9b6a0cf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/361a16d3-f3cf-464c-8fba-a435adeb72cb/361a16d3-f3cf-464c-8fba-a435adeb72cb.crl

            X509v3 Authority Key Identifier:
                keyid:90:87:F8:2E:3D:D9:DD:17:A2:09:70:EA:A9:D9:08:41:DC:E1:89:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/361a16d3-f3cf-464c-8fba-a435adeb72cb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.151.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:94:1f:e0:39:06:18:71:d3:5b:f6:c3:b9:e4:19:5a:0e:26:
         e6:7b:af:b3:21:07:1a:39:c6:23:1b:85:09:e8:21:d2:9b:36:
         62:a9:e4:55:6d:1e:22:cd:43:94:8d:25:c4:10:a5:8f:e4:5d:
         0c:33:78:e1:8d:6e:15:5c:56:9f:9d:45:80:30:3a:3d:d3:24:
         e3:62:34:ac:2c:89:c3:d5:79:3a:f2:06:29:b4:40:93:58:a8:
         ec:d8:c3:61:24:e0:b3:93:a1:58:bc:5e:81:09:8c:94:67:c2:
         91:d6:3a:47:8b:5b:3e:14:9e:12:a5:76:89:04:68:75:cc:bb:
         ad:ec:8e:83:08:af:f7:d0:57:2f:4b:27:0e:7f:f7:5f:c2:ff:
         98:f6:cd:67:cd:54:97:c0:2a:c9:1a:e0:e3:88:54:ae:4f:45:
         27:bf:ca:88:af:63:e7:95:94:a9:92:1e:15:e7:41:42:b6:0b:
         56:27:2c:e3:0e:b1:37:d9:84:61:b0:fe:cc:ff:53:38:78:ef:
         86:2f:74:ad:0b:d8:5e:0f:87:47:ee:e2:6a:07:de:1c:de:66:
         73:d0:ef:41:4c:ea:f3:b7:ed:dd:14:b6:7f:4a:3d:a2:bf:c3:
         23:0d:9e:98:f5:8c:21:1b:a4:18:5a:72:0f:95:38:e9:ed:3a:
         30:93:f6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 04:03:09 2025 by rpki-client