Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/58aeb374-4580-308b-ae98-aac0b8248fa1.roa
File:                     58aeb374-4580-308b-ae98-aac0b8248fa1.roa (raw, json)
Hash identifier:          Xm+pSYzz9BXv/cB/Ev4i3YGy7RwiQTZixIfuUR2H1UQ=
Subject key identifier:   D1:DD:FE:EA:20:D6:FB:EC:D6:D0:7C:36:D8:AE:C1:9B:4F:6B:09:36
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584AF0F147F635F878A437A9D340
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/58aeb374-4580-308b-ae98-aac0b8248fa1.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        158.51.108.0/24 maxlen: 24
                          2602:fd6f:40::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:47:f6:35:f8:78:a4:37:a9:d3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=3ef70838-255b-4438-a6a0-cb2618db3838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ed:c2:da:4e:d0:95:b7:a5:3e:e3:bb:e7:9b:
                    4b:2e:d6:0c:19:8f:9e:3d:52:b5:ab:a9:9f:33:3a:
                    21:7f:8c:5c:c7:18:6b:f1:ee:cb:8f:0a:2b:9e:e3:
                    e8:48:2f:29:f4:02:ce:6a:37:6c:58:b2:64:bc:84:
                    c4:d8:02:9b:a0:f4:73:f5:f9:4b:57:9e:0f:30:10:
                    38:4b:66:75:da:70:e3:b9:b5:3e:d8:87:2b:6f:22:
                    18:19:d6:2c:70:b9:87:41:74:05:8d:e2:df:65:bc:
                    d2:6a:09:16:61:c6:7a:17:fa:5a:15:e8:58:b2:29:
                    c5:1d:a1:e9:3e:f8:7d:29:12:c0:e9:a2:47:bc:6e:
                    00:4c:bd:fb:66:c1:11:4a:75:82:b7:cd:7f:70:5c:
                    1d:ac:a5:d3:b5:7f:3c:d4:e7:61:0e:41:05:b7:55:
                    ce:11:f3:2a:6c:13:18:3a:2d:bf:2d:f0:24:cc:ad:
                    ff:a4:fe:90:f5:2b:c4:96:a3:4c:70:cc:8a:8e:77:
                    e4:c4:20:40:31:f6:dc:9c:69:4a:01:75:08:ed:e0:
                    8e:1f:50:ca:ba:11:08:40:f5:37:c3:45:e5:90:fd:
                    9f:0f:38:c7:25:eb:27:5a:f7:47:9d:6b:ea:92:04:
                    5e:33:48:f2:8b:ad:f5:9d:70:e8:c4:2c:3d:7e:be:
                    9a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DD:FE:EA:20:D6:FB:EC:D6:D0:7C:36:D8:AE:C1:9B:4F:6B:09:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/58aeb374-4580-308b-ae98-aac0b8248fa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.108.0/24
                IPv6:
                  2602:fd6f:40::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:b5:35:58:52:eb:af:13:db:37:b9:bd:f6:cc:39:5d:f5:37:
         b4:a3:d6:08:63:62:74:c2:96:ca:44:c6:e5:e7:a2:88:e0:93:
         2e:88:67:aa:28:cf:5f:3d:7e:12:58:a6:0a:1f:fa:bc:15:a0:
         5c:14:56:81:6b:29:f2:15:b7:2c:37:de:96:78:79:68:7e:d2:
         b1:c6:c1:a1:db:3e:d2:87:99:72:84:24:32:1e:df:8c:ce:19:
         c8:7b:d5:d0:f5:14:17:fa:6f:bf:c1:75:80:27:10:ee:20:7a:
         82:48:c8:99:90:56:e5:1e:6b:ce:60:e9:41:6b:1e:ec:92:63:
         4a:be:55:c5:19:50:3a:02:2d:e8:6a:25:63:65:73:cf:f4:4b:
         a5:ac:57:d0:b1:22:c5:57:ac:f5:17:0e:c6:51:2c:8d:c2:1d:
         d7:5f:9f:5f:08:fb:5c:5c:a7:9d:66:f0:54:89:92:1b:ba:b5:
         8b:8e:01:6b:d7:ea:6c:bc:70:a0:ae:cf:6f:4a:70:a4:db:95:
         45:3b:6e:b8:00:68:51:f4:d8:2d:cb:da:99:96:d8:3a:cb:46:
         47:88:85:8e:fd:08:9b:ba:0c:9e:78:5e:4d:9f:c1:ae:e9:db:
         1d:ca:2c:4c:71:ed:3b:6e:0c:98:6d:bc:1c:ff:e5:a5:44:b5:
         3b:6a:6b:a7
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWErw8Uf2Nfh4pDep00AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjE4OTgxMDAtZjQwYy00MDAyLWI2OGEtOGE5N2I1NDhl
NjlkMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk
M2VmNzA4MzgtMjU1Yi00NDM4LWE2YTAtY2IyNjE4ZGIzODM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe3C2k7QlbelPuO755tLLtYMGY+ePVK1q6mf
Mzohf4xcxxhr8e7LjwornuPoSC8p9ALOajdsWLJkvITE2AKboPRz9flLV54PMBA4
S2Z12nDjubU+2IcrbyIYGdYscLmHQXQFjeLfZbzSagkWYcZ6F/paFehYsinFHaHp
Pvh9KRLA6aJHvG4ATL37ZsERSnWCt81/cFwdrKXTtX881OdhDkEFt1XOEfMqbBMY
Oi2/LfAkzK3/pP6Q9SvElqNMcMyKjnfkxCBAMfbcnGlKAXUI7eCOH1DKuhEIQPU3
w0XlkP2fDzjHJesnWvdHnWvqkgReM0jyi631nXDoxCw9fr6aVwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFNHd/uog1vvs1tB8NtiuwZtPawk2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5
ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3YjU0OGU2OWQvNThhZWIzNzQtNDU4MC0z
MDhiLWFlOTgtYWFjMGI4MjQ4ZmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjE4OTgxMDAtZjQwYy00MDAyLWI2
OGEtOGE5N2I1NDhlNjlkL2IxODk4MTAwLWY0MGMtNDAwMi1iNjhhLThhOTdiNTQ4
ZTY5ZC5jcmwwHwYDVR0jBBgwFoAUiUz4vQ00NIcYcDP5AHBKyw94UlMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3
YjU0OGU2OWQuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAnjNsMA8E
AgACMAkDBwQmAv1vAEAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAhrU1WFLrrxPbN7m99sw5XfU3tKPWCGNi
dMKWykTG5eeiiOCTLohnqijPXz1+ElimCh/6vBWgXBRWgWsp8hW3LDfelnh5aH7S
scbBods+0oeZcoQkMh7fjM4ZyHvV0PUUF/pvv8F1gCcQ7iB6gkjImZBW5R5rzmDp
QWse7JJjSr5VxRlQOgIt6GolY2Vzz/RLpaxX0LEixVes9RcOxlEsjcId11+fXwj7
XFynnWbwVImSG7q1i44Ba9fqbLxwoK7Pb0pwpNuVRTtuuABoUfTYLcvamZbYOstG
R4iFjv0Im7oMnnheTZ/BrunbHcosTHHtO24MmG28HP/lpUS1O2prpw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:47 2025 by rpki-client