Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/089b0e00-21fd-333b-ab34-115e31016ef4.roa
File:                     089b0e00-21fd-333b-ab34-115e31016ef4.roa (raw, json)
Hash identifier:          OVrTMqe1W4N6ZoMldARkU0bj+dpmCZl7Uk2CA5940H8=
Subject key identifier:   65:2A:26:C6:85:EA:07:6F:1C:CF:52:F5:93:DF:03:54:A3:A8:72:64
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285849BDDA219404619E37FCC23910
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/089b0e00-21fd-333b-ab34-115e31016ef4.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     30103
IP address blocks:        159.124.128.0/23 maxlen: 24
                          159.124.130.0/23 maxlen: 24
                          159.124.132.0/23 maxlen: 24
                          159.124.134.0/23 maxlen: 24
                          159.124.136.0/23 maxlen: 24
                          159.124.138.0/23 maxlen: 24
                          159.124.140.0/23 maxlen: 24
                          159.124.142.0/23 maxlen: 24
                          159.124.144.0/23 maxlen: 24
                          159.124.146.0/23 maxlen: 24
                          159.124.148.0/23 maxlen: 24
                          159.124.150.0/23 maxlen: 24
                          159.124.152.0/23 maxlen: 24
                          159.124.154.0/23 maxlen: 24
                          159.124.156.0/23 maxlen: 24
                          159.124.158.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:21:94:04:61:9e:37:fc:c2:39:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=5154a6bc-82bf-4565-a975-72fc005a3877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e7:1b:b8:7d:6c:83:02:22:06:90:9d:e3:31:
                    2b:1f:5f:0c:5e:c1:9f:1a:f4:81:6d:7e:84:80:8d:
                    cf:9a:25:2b:a5:54:c4:b5:f8:37:3a:d9:c9:94:36:
                    f5:08:dc:37:52:b0:05:72:1a:a9:76:4f:94:80:f5:
                    cd:f7:06:90:da:fc:05:67:bd:1e:1e:71:ac:0d:d9:
                    0c:dd:bf:76:ac:ec:fc:76:ec:a1:90:6f:89:b7:c7:
                    1f:30:39:cf:be:19:2e:a8:03:21:10:06:0a:ec:3f:
                    f0:58:6a:48:32:83:e3:e1:04:04:79:dd:e1:79:3f:
                    8a:fa:aa:a7:19:da:5a:b4:be:0f:a3:21:26:c9:76:
                    af:31:27:95:bd:bd:57:fa:83:24:0c:9f:8f:6f:6e:
                    c0:38:6e:c1:09:3a:7e:7c:c2:9d:49:91:64:ee:42:
                    cb:8c:9a:09:58:fa:76:52:aa:f3:13:7d:e3:b3:6f:
                    c1:0b:61:ba:9d:97:1c:6f:af:40:fd:4b:f2:15:62:
                    1e:f3:08:ea:ac:76:15:39:94:fb:29:d7:b1:18:e9:
                    6a:76:0c:9e:c7:da:9a:a8:9a:74:f1:3b:ee:e0:c2:
                    d9:ad:23:79:cf:78:46:e5:0d:a7:17:32:f5:7f:73:
                    dc:21:cf:97:14:f7:34:68:3d:fb:2b:85:23:32:ab:
                    e9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:2A:26:C6:85:EA:07:6F:1C:CF:52:F5:93:DF:03:54:A3:A8:72:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/089b0e00-21fd-333b-ab34-115e31016ef4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.124.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:42:18:cc:ba:f3:90:80:fe:b1:14:78:c4:e3:f2:6f:1c:bd:
         5a:6a:4f:2c:08:0b:37:e3:cd:11:a6:24:59:db:51:dc:c8:5c:
         18:e4:ce:3e:94:22:cb:82:78:c5:a6:69:8d:a7:eb:8b:53:db:
         dd:c9:00:da:9d:65:49:17:a8:17:17:4b:44:3c:03:6a:3d:6a:
         73:29:b7:e7:a2:9d:53:26:a4:3c:1f:99:61:16:bc:4e:f7:f0:
         34:57:45:14:ca:0b:e5:98:94:e0:80:16:15:c7:58:49:86:dd:
         c2:56:ca:02:cf:cb:a1:4a:4b:d3:81:df:aa:c4:4e:85:41:d3:
         9d:97:db:39:4d:4d:2d:8f:fa:7e:f9:6e:6d:80:6b:17:2f:ab:
         ce:0a:ae:fb:b8:1e:9c:a7:ea:03:49:35:b8:29:6d:4f:7d:38:
         03:2f:b2:6d:8a:a9:73:4f:2d:88:51:46:74:d9:fc:cf:fe:c5:
         58:74:41:3d:03:5e:38:3e:da:f9:81:72:24:e5:6d:56:4e:03:
         6e:f7:da:d5:56:d8:8b:15:be:dd:fb:94:84:6d:f8:df:f8:3e:
         70:32:1e:77:bd:b2:39:dc:25:b2:3f:ce:93:fe:66:9d:24:53:
         1a:f2:73:c7:1e:b8:84:84:4e:98:7f:00:0e:26:88:5b:38:ca:
         93:6f:e3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:30:57 2025 by rpki-client