Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/886ebbde-d21d-3d71-8347-215aaf18d087.roa
File:                     886ebbde-d21d-3d71-8347-215aaf18d087.roa (raw, json)
Hash identifier:          QtrnNz+m/x5Rj2vNYVTf6MVJz6pMeRuXLBTecykLur0=
Subject key identifier:   2D:17:F0:D9:AE:F8:B6:F8:D6:5E:09:37:9F:EC:3D:31:C4:7B:44:E6
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F43285845D933B6BDD3DB60C80D1CCA20
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/886ebbde-d21d-3d71-8347-215aaf18d087.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     18526
IP address blocks:        158.51.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:b6:bd:d3:db:60:c8:0d:1c:ca:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=5024f6a8-4f56-4ac3-91c3-c717b71fcc14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:43:ae:9c:59:27:8d:b2:44:d5:31:ca:53:38:
                    db:98:dc:6e:b7:55:bd:ca:32:43:0e:46:34:10:89:
                    10:da:a7:36:a7:bf:16:ce:c6:8e:72:5f:62:47:9d:
                    3d:4e:70:af:07:2b:b0:70:31:77:01:99:6a:63:b5:
                    32:de:eb:fa:a2:3b:8e:ce:8b:13:c8:ad:17:fa:e1:
                    ef:4d:35:72:e8:d2:6a:d6:df:a1:79:0f:d1:2e:e7:
                    32:e4:91:0a:85:5d:6f:35:41:08:f1:c2:e8:49:e5:
                    1f:5a:8d:66:f3:fa:aa:d0:c6:8d:c0:92:e1:70:33:
                    79:4f:d7:88:11:ff:e5:e6:4a:13:66:53:6d:02:3e:
                    c7:87:93:05:7a:b8:72:46:02:61:fa:9a:62:eb:0e:
                    cf:2f:59:14:4f:b6:e4:53:28:d3:70:5e:62:15:51:
                    f7:82:d2:9a:82:9a:bf:98:60:05:54:f8:83:00:92:
                    f3:ce:a0:c4:0f:2a:2e:78:a6:6c:e3:df:7d:ad:54:
                    63:81:75:8a:35:fb:cf:cc:c6:32:45:c3:15:28:12:
                    c0:b4:66:d8:b8:8b:7e:ac:50:3a:9b:b1:c0:d9:9b:
                    f4:d2:3b:aa:12:4b:cd:8f:c1:3c:e3:b6:98:97:bd:
                    91:a1:58:f8:c3:f4:f5:2d:44:56:0c:3f:c2:09:89:
                    c7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:17:F0:D9:AE:F8:B6:F8:D6:5E:09:37:9F:EC:3D:31:C4:7B:44:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/886ebbde-d21d-3d71-8347-215aaf18d087.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:fa:9b:3b:a8:d9:a9:b7:0a:3c:bc:11:46:19:1f:0e:8d:03:
         67:fe:cd:6b:e5:5e:fe:b6:20:bb:3e:51:b5:18:a6:6e:52:0c:
         06:e7:a9:ef:f9:4d:e1:83:21:9d:eb:39:ed:19:c7:76:fe:6e:
         72:72:df:26:94:1a:83:f9:5f:ec:a4:95:17:10:e3:6e:00:bc:
         e2:84:26:0f:ad:7c:30:8b:f9:07:23:3d:8c:e4:77:1d:46:75:
         ec:47:27:22:c7:e0:74:25:84:26:f9:44:40:00:49:f1:96:e0:
         cd:0a:d9:8b:6a:af:b5:7f:7c:c0:b3:18:dc:4f:e3:d8:de:9d:
         43:53:5c:81:be:dd:c2:2c:c4:e6:34:11:51:45:18:60:47:71:
         3a:4d:a6:82:dc:d4:0e:bb:51:a0:4e:ea:ed:de:e9:8e:11:d1:
         fa:ce:c1:db:07:6b:36:4e:3c:b0:a3:76:43:dd:52:cc:e8:cf:
         75:7a:56:f3:28:e1:d0:32:bb:a5:28:22:8d:1c:1a:cd:af:75:
         87:02:7e:0a:d4:4a:c1:f1:52:3e:12:9c:b3:ec:b2:dd:a8:08:
         4c:b1:74:b4:68:b4:20:09:77:91:51:55:aa:77:c8:6a:ef:ce:
         78:4f:5e:04:31:d0:f3:90:f8:b8:1f:ca:9c:bc:ca:1a:89:05:
         07:5c:6b:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXZM7a909tgyA0cyiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjE4OTgxMDAtZjQwYy00MDAyLWI2OGEtOGE5N2I1NDhl
NjlkMB4XDTI0MDUxMjEzMDAzNFoXDTI0MDgxMDEzMDAzNFowLzEtMCsGA1UEAxMk
NTAyNGY2YTgtNGY1Ni00YWMzLTkxYzMtYzcxN2I3MWZjYzE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkOunFknjbJE1THKUzjbmNxut1W9yjJDDkY0
EIkQ2qc2p78WzsaOcl9iR509TnCvByuwcDF3AZlqY7Uy3uv6ojuOzosTyK0X+uHv
TTVy6NJq1t+heQ/RLucy5JEKhV1vNUEI8cLoSeUfWo1m8/qq0MaNwJLhcDN5T9eI
Ef/l5koTZlNtAj7Hh5MFerhyRgJh+ppi6w7PL1kUT7bkUyjTcF5iFVH3gtKagpq/
mGAFVPiDAJLzzqDEDyoueKZs4999rVRjgXWKNfvPzMYyRcMVKBLAtGbYuIt+rFA6
m7HA2Zv00juqEkvNj8E847aYl72RoVj4w/T1LURWDD/CCYnHAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC0X8Nmu+Lb41l4JN5/sPTHEe0TmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5
ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3YjU0OGU2OWQvODg2ZWJiZGUtZDIxZC0z
ZDcxLTgzNDctMjE1YWFmMThkMDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjE4OTgxMDAtZjQwYy00MDAyLWI2
OGEtOGE5N2I1NDhlNjlkL2IxODk4MTAwLWY0MGMtNDAwMi1iNjhhLThhOTdiNTQ4
ZTY5ZC5jcmwwHwYDVR0jBBgwFoAUiUz4vQ00NIcYcDP5AHBKyw94UlMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3
YjU0OGU2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjNsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEf6mzuo2am3Cjy8EUYZHw6NA2f+zWvlXv62ILs+UbUYpm5SDAbnqe/5
TeGDIZ3rOe0Zx3b+bnJy3yaUGoP5X+yklRcQ424AvOKEJg+tfDCL+QcjPYzkdx1G
dexHJyLH4HQlhCb5REAASfGW4M0K2Ytqr7V/fMCzGNxP49jenUNTXIG+3cIsxOY0
EVFFGGBHcTpNpoLc1A67UaBO6u3e6Y4R0frOwdsHazZOPLCjdkPdUszoz3V6VvMo
4dAyu6UoIo0cGs2vdYcCfgrUSsHxUj4SnLPsst2oCEyxdLRotCAJd5FRVap3yGrv
znhPXgQx0POQ+Lgfypy8yhqJBQdca84=
-----END CERTIFICATE-----
Generated at Wed May 22 02:59:58 2024 by rpki-client on console-ams.rpki-client.org