Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/689d2a9d-418d-3143-b2c1-3624646b67b1.roa
File:                     689d2a9d-418d-3143-b2c1-3624646b67b1.roa (raw, json)
Hash identifier:          A1y5gefJQ68e3KI3O/JfUmh7GV3C7P1jsaShoX/1lTg=
Subject key identifier:   E7:A3:28:32:8E:85:D8:3D:FB:6D:0E:F3:06:CA:28:D7:29:B5:4D:74
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F43285844F8955FAA9FD13B23B68DD040
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/689d2a9d-418d-3143-b2c1-3624646b67b1.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     18526
IP address blocks:        158.51.108.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:5f:aa:9f:d1:3b:23:b6:8d:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=5df49d0c-8245-45cc-ab6d-36b756642fc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fe:5a:14:9d:84:df:ff:da:8a:12:ef:10:3e:
                    8f:79:9f:77:17:3e:27:c4:b1:fd:ab:bd:b6:b6:78:
                    80:9a:50:9f:1d:3d:2b:d6:eb:a3:65:4a:6f:cd:32:
                    55:7d:ef:7e:3a:97:cb:b8:e2:1c:41:b8:ca:3b:8f:
                    30:72:58:78:02:93:0b:d2:bd:90:0d:73:b7:8b:a5:
                    b1:13:75:b8:23:e3:2c:8f:5e:c1:3e:ed:55:a7:30:
                    ef:a0:db:6e:76:db:88:94:cb:52:25:c5:65:4e:32:
                    e8:33:d6:aa:58:b0:25:8a:ca:58:ec:b2:a8:d8:f7:
                    cd:d5:e9:2b:4c:d9:84:dd:17:7b:bd:2c:5d:57:4e:
                    50:9b:65:82:d7:64:59:83:3c:44:12:7c:55:c2:f5:
                    2b:b9:e7:7f:11:9e:d4:87:88:c9:53:b6:07:f8:d6:
                    01:88:a2:60:89:59:26:6d:28:34:3a:09:5e:62:90:
                    1d:02:8c:f4:1b:c9:fd:f1:2c:0f:3d:5a:af:0b:1d:
                    d2:d2:b9:96:1e:46:b1:34:e5:a4:f9:3f:68:10:7e:
                    83:2c:8f:60:d3:af:14:4a:cf:63:28:a0:d8:83:12:
                    0a:13:13:9e:0b:84:e6:cf:83:9e:8b:37:81:aa:ea:
                    0b:b3:8d:74:5e:4c:13:fb:1c:cc:58:d6:e1:12:d1:
                    0a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A3:28:32:8E:85:D8:3D:FB:6D:0E:F3:06:CA:28:D7:29:B5:4D:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/689d2a9d-418d-3143-b2c1-3624646b67b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:28:ea:4d:2b:74:ac:2d:b4:fb:4b:7c:45:3a:d2:2f:bd:b9:
         ed:db:83:63:1f:6e:8d:43:2e:18:7f:5f:c5:1e:a8:32:b3:db:
         a8:bd:13:c6:bf:ac:ed:4d:8b:c6:99:1c:92:a0:62:fc:9b:53:
         77:60:88:5f:56:93:77:7d:0c:d5:aa:08:d9:f3:2b:96:8e:24:
         e9:64:f8:da:00:b9:f9:44:95:11:a3:3a:a6:08:3d:db:5a:09:
         94:13:13:7b:63:b5:cc:bb:e9:8f:49:e5:af:4b:08:97:19:a6:
         db:bd:fe:e8:41:c9:c2:a6:fe:1d:8a:ba:39:46:0c:71:4f:92:
         95:67:4c:65:ab:01:3b:a8:55:13:9f:b3:1b:fe:ed:20:18:df:
         db:a2:94:b9:a5:03:dc:ce:8b:86:1b:fc:50:7e:58:85:47:13:
         2a:ad:01:1a:ea:ab:ae:14:f8:10:66:03:41:d6:46:e6:43:f1:
         18:f5:2f:07:c8:5b:b1:2d:d1:dc:91:41:4a:d2:ac:9f:04:e8:
         c9:2d:78:04:02:63:36:b4:8c:c7:16:cc:e0:c7:9b:cb:b5:42:
         8c:73:09:cb:8e:7c:80:d0:4d:90:d5:6e:64:86:bd:2c:61:a6:
         70:6f:3d:84:1c:9a:64:c1:a3:5d:1c:86:43:e3:25:01:46:9d:
         56:a3:78:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET4lV+qn9E7I7aN0EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjE4OTgxMDAtZjQwYy00MDAyLWI2OGEtOGE5N2I1NDhl
NjlkMB4XDTI0MDIyMjAyMDAyN1oXDTI0MDUyMjAxMDAyN1owLzEtMCsGA1UEAxMk
NWRmNDlkMGMtODI0NS00NWNjLWFiNmQtMzZiNzU2NjQyZmM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv5aFJ2E3//aihLvED6PeZ93Fz4nxLH9q722
tniAmlCfHT0r1uujZUpvzTJVfe9+OpfLuOIcQbjKO48wclh4ApML0r2QDXO3i6Wx
E3W4I+Msj17BPu1VpzDvoNtudtuIlMtSJcVlTjLoM9aqWLAlispY7LKo2PfN1ekr
TNmE3Rd7vSxdV05Qm2WC12RZgzxEEnxVwvUrued/EZ7Uh4jJU7YH+NYBiKJgiVkm
bSg0OgleYpAdAoz0G8n98SwPPVqvCx3S0rmWHkaxNOWk+T9oEH6DLI9g068USs9j
KKDYgxIKExOeC4Tmz4OeizeBquoLs410XkwT+xzMWNbhEtEKHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOejKDKOhdg9+20O8wbKKNcptU10MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5
ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3YjU0OGU2OWQvNjg5ZDJhOWQtNDE4ZC0z
MTQzLWIyYzEtMzYyNDY0NmI2N2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjE4OTgxMDAtZjQwYy00MDAyLWI2
OGEtOGE5N2I1NDhlNjlkL2IxODk4MTAwLWY0MGMtNDAwMi1iNjhhLThhOTdiNTQ4
ZTY5ZC5jcmwwHwYDVR0jBBgwFoAUiUz4vQ00NIcYcDP5AHBKyw94UlMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3
YjU0OGU2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnjNsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIEo6k0rdKwttPtLfEU60i+9ue3bg2Mfbo1DLhh/X8UeqDKz26i9E8a/
rO1Ni8aZHJKgYvybU3dgiF9Wk3d9DNWqCNnzK5aOJOlk+NoAuflElRGjOqYIPdta
CZQTE3tjtcy76Y9J5a9LCJcZptu9/uhBycKm/h2KujlGDHFPkpVnTGWrATuoVROf
sxv+7SAY39uilLmlA9zOi4Yb/FB+WIVHEyqtARrqq64U+BBmA0HWRuZD8Rj1LwfI
W7Et0dyRQUrSrJ8E6MkteAQCYza0jMcWzODHm8u1QoxzCcuOfIDQTZDVbmSGvSxh
pnBvPYQcmmTBo10chkPjJQFGnVajeO4=
-----END CERTIFICATE-----
Generated at Wed May 8 02:22:24 2024 by rpki-client on console-ams.rpki-client.org