Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/886ebbde-d21d-3d71-8347-215aaf18d087.roa
File:                     886ebbde-d21d-3d71-8347-215aaf18d087.roa (raw, json)
Hash identifier:          DE+LUeR4HghjnEnOPDl1GJGQXg4wgPsvgWBPiyObZRc=
Subject key identifier:   F8:35:32:52:95:17:9F:FB:30:D1:54:EA:B4:28:41:09:56:69:3A:E5
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584A374AD93E9E8140574CAF5300
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/886ebbde-d21d-3d71-8347-215aaf18d087.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     18526
IP address blocks:        158.51.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:d9:3e:9e:81:40:57:4c:af:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=f3b3d26f-3ed7-4d53-a355-85c05dc308fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:77:32:65:3c:7c:20:5c:6f:1c:1b:01:92:a6:
                    4e:88:79:2a:ce:9f:2f:e6:25:e3:c2:34:00:77:3c:
                    d8:56:92:ff:c1:bc:af:d6:22:be:46:15:ff:bc:1d:
                    a6:a9:6a:15:9c:b4:c9:d4:ed:63:03:0e:f6:ca:91:
                    b5:d0:08:9c:23:36:8f:16:41:17:4c:7b:0e:0b:46:
                    28:62:74:ab:70:d6:8d:92:e7:71:6b:05:cd:95:56:
                    f4:a4:91:85:86:06:82:be:cd:2d:7c:46:9e:37:13:
                    1c:42:8e:cf:c9:c2:5d:82:05:45:24:ce:8b:21:41:
                    26:4a:0c:45:f8:76:e8:d7:4a:6c:f2:3f:6a:df:99:
                    a1:ac:94:45:16:ab:f7:0d:6a:47:8a:37:9b:dd:da:
                    25:bf:92:9d:7f:98:f1:ff:87:e9:f2:e7:4a:1c:31:
                    2e:98:9b:d4:f5:7d:20:ab:a8:ec:e5:a2:0b:53:61:
                    99:da:c8:c9:c5:e6:fe:e4:f6:aa:97:ee:e0:a1:d0:
                    25:02:57:a3:de:1f:7d:11:dd:2d:a2:3b:25:88:39:
                    4c:fd:7b:06:ec:cc:e2:8d:ee:d6:33:f5:08:b8:9b:
                    ab:f4:ce:85:30:04:26:c5:bd:a0:6d:e8:6d:30:2b:
                    17:23:08:fa:68:71:05:53:b3:50:fd:07:7e:5c:19:
                    8d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:35:32:52:95:17:9F:FB:30:D1:54:EA:B4:28:41:09:56:69:3A:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/886ebbde-d21d-3d71-8347-215aaf18d087.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:69:ea:1d:64:44:f3:27:ad:aa:2d:28:dd:69:14:8d:e5:f9:
         aa:7a:c4:1b:ac:f7:66:08:e9:8e:af:73:72:5c:1a:d3:fc:fc:
         58:b5:58:b3:a7:18:1d:df:05:21:2f:d3:04:bd:98:02:95:9c:
         40:00:18:d4:d3:f2:94:3b:7e:39:07:e0:cb:13:ca:e3:9c:31:
         1d:e3:b2:12:20:c5:31:93:89:51:bd:21:9f:97:ab:fa:05:b6:
         e3:58:22:d5:57:d3:01:44:b7:39:2e:c6:ed:e3:58:5b:9d:c4:
         d9:f0:db:31:36:ae:8c:3e:eb:15:95:36:66:40:79:2a:01:6c:
         f8:4f:9d:d7:14:d0:1b:30:7c:d2:7f:50:8e:ac:78:b7:fb:1e:
         b1:f7:b9:9e:a9:98:20:d2:c9:fe:c1:f0:85:03:c7:a9:5e:27:
         f3:e8:6c:2f:7d:41:ad:93:95:28:d0:94:3e:03:78:12:ef:3f:
         ba:f4:93:cf:cd:c8:3c:29:3c:51:c2:0b:9f:fc:55:6a:56:f6:
         04:d0:06:6c:a3:7f:81:7c:0c:26:71:6f:a5:ec:e5:25:2e:36:
         11:77:5d:1e:71:ca:cc:bf:de:a5:69:ec:9b:91:d2:a6:2b:38:
         6b:25:a6:14:1f:3c:81:34:64:70:41:62:c7:da:b2:92:6b:4d:
         83:82:d0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:45:59 2025 by rpki-client