Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/689d2a9d-418d-3143-b2c1-3624646b67b1.roa
File:                     689d2a9d-418d-3143-b2c1-3624646b67b1.roa (raw, json)
Hash identifier:          6Uc63ZCSs7kfRkYxGFrKVQEER5AHPTh/HMWHjioxFhg=
Subject key identifier:   17:D6:C0:1E:C7:9F:B1:53:38:E1:14:35:64:08:90:29:68:F4:C6:98
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584B1806DC1A3C536A3E459760C0
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/689d2a9d-418d-3143-b2c1-3624646b67b1.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     18526
IP address blocks:        158.51.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:dc:1a:3c:53:6a:3e:45:97:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=a62262e6-ebda-48a9-bb51-50b0cb737207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4c:29:35:16:f9:68:67:f9:20:a8:66:db:05:
                    7b:12:6c:24:9c:fb:bc:27:20:3e:88:d2:72:8b:07:
                    73:0d:8c:92:25:fb:03:a2:42:f9:b5:50:b8:5f:39:
                    ef:a6:74:d1:e8:3d:80:b6:dd:84:87:4f:d6:ed:69:
                    ca:53:10:97:08:50:78:26:dd:da:4b:d0:2a:95:8a:
                    75:6b:11:13:64:19:30:55:7f:b4:a2:7b:fb:f0:2d:
                    62:32:46:7f:bf:ca:5d:a2:08:9e:08:e4:18:e5:02:
                    a0:78:71:28:58:b9:da:71:6c:ca:1d:73:e2:6a:b6:
                    08:ae:27:ae:b3:40:14:63:19:97:5d:64:70:fd:78:
                    a9:68:82:66:65:80:93:9b:fb:64:39:b5:84:cb:14:
                    33:6c:74:3d:d6:72:28:e7:ba:39:70:8a:d9:96:cf:
                    08:22:9d:a2:c7:c1:d8:14:e6:f5:87:16:97:78:37:
                    93:a0:d5:a1:fd:63:5b:35:c8:6e:f3:ff:ce:27:fe:
                    06:83:e0:5e:ee:21:82:11:6f:5d:10:4c:ce:b7:8c:
                    3f:a5:52:0c:b6:9b:94:27:fa:5f:55:ad:56:5d:55:
                    6f:0f:b4:a2:42:23:82:bd:fd:d2:2b:03:41:e2:bc:
                    44:aa:d8:6f:18:f8:47:27:93:a3:e3:64:8e:69:50:
                    f0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D6:C0:1E:C7:9F:B1:53:38:E1:14:35:64:08:90:29:68:F4:C6:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/689d2a9d-418d-3143-b2c1-3624646b67b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:03:17:d9:6d:2f:16:be:55:e1:c3:a4:ef:43:0d:68:eb:a0:
         27:65:66:6e:58:d8:a6:b7:e7:9d:29:30:dc:96:9b:17:33:67:
         46:9b:b0:7e:00:c6:9b:62:3b:9f:e1:f0:2c:aa:4b:7f:f9:67:
         5c:f2:8a:17:b0:fe:99:df:54:de:0b:cc:5f:b5:0a:4f:8b:86:
         2a:31:8e:84:55:5a:cc:ca:0b:1f:dc:7c:1c:d5:58:80:e2:77:
         17:02:0e:7b:82:45:c5:10:95:c0:02:7f:59:cd:0a:18:4e:13:
         1e:bb:6c:02:3c:ab:c9:25:b6:bc:d2:e0:a9:59:dc:79:38:44:
         ee:fe:d3:03:64:06:d9:e8:43:75:5f:d6:1c:80:da:62:94:5a:
         f8:1f:d8:de:dc:01:f1:c5:3a:29:df:cb:c1:e3:c9:f6:be:a0:
         93:78:1b:4f:15:03:3c:5d:29:f0:39:f6:72:cc:51:89:cb:de:
         92:e8:1d:ea:89:a6:fa:09:15:c6:0a:6d:97:64:db:2f:f8:e9:
         58:0d:35:87:9a:f3:94:d9:a4:db:74:13:65:d0:dc:76:b9:42:
         37:d0:c8:bb:4d:29:37:87:85:68:69:26:de:e5:e1:cd:05:41:
         42:3f:ef:c7:1a:41:87:f2:26:47:20:e1:c8:c5:9a:8c:73:a9:
         dc:8a:d9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:00:38 2025 by rpki-client