Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/886ebbde-d21d-3d71-8347-215aaf18d087.roa
File:                     886ebbde-d21d-3d71-8347-215aaf18d087.roa (raw, json)
Hash identifier:          2/0RaYtNSv3JxbebNSrtdWCpByUyqUQ3etV+bxAsJNg=
Subject key identifier:   DA:5E:FE:7F:96:2D:B1:93:8D:0A:59:B0:21:F9:7F:3D:35:ED:79:0B
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584797E1447D25CA6728B73CA8B0
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/886ebbde-d21d-3d71-8347-215aaf18d087.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     18526
IP address blocks:        158.51.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:44:7d:25:ca:67:28:b7:3c:a8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=26a1ac2d-1f26-4eea-ba2f-e41cd76daefd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5b:55:98:6a:31:8f:fe:82:b0:ed:89:de:51:
                    41:a3:d9:66:e5:72:4c:ed:6c:0a:61:06:fc:1d:a6:
                    d2:7c:35:2e:9c:73:e7:10:cd:e6:ab:2c:be:64:84:
                    2f:ba:17:15:ee:01:16:1d:eb:81:10:c9:4f:a8:da:
                    5c:49:a0:c9:ae:ee:79:1d:10:19:c5:a5:ce:c8:dd:
                    d8:5c:3a:d9:98:89:4d:0a:57:01:61:f9:88:83:c6:
                    6f:cf:36:36:86:e4:76:ac:6b:7b:8f:cc:4d:72:72:
                    38:d2:6e:cf:76:96:f2:37:43:79:c4:6f:44:94:9c:
                    db:18:96:6c:2b:a3:4e:3d:e2:8d:10:d6:98:01:2f:
                    d1:b8:e1:a3:a4:cd:a5:76:ad:aa:e5:50:1a:29:a8:
                    d4:e3:cc:34:cf:87:a5:c2:d9:9b:f3:56:bd:28:9e:
                    a6:0d:b9:61:23:84:38:c5:67:ad:57:f3:b7:b4:35:
                    79:f7:45:27:a4:0c:3a:58:e1:3b:cc:f4:61:f3:1e:
                    4e:d3:19:5f:b8:f9:66:14:33:c4:fe:ac:30:07:40:
                    e8:e4:78:26:d5:ea:51:10:aa:5d:42:75:33:ab:ad:
                    62:85:5d:e4:81:91:b4:4d:b7:87:a1:a4:49:ec:24:
                    89:8e:00:6c:03:51:ad:28:71:86:a1:03:bf:fd:a9:
                    5d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:5E:FE:7F:96:2D:B1:93:8D:0A:59:B0:21:F9:7F:3D:35:ED:79:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/886ebbde-d21d-3d71-8347-215aaf18d087.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:c8:f1:e1:01:69:3c:1d:10:c8:ff:86:3c:3e:4d:03:3f:47:
         3d:2c:a9:cf:ae:b0:48:29:f0:ff:f9:9c:7e:e9:54:6a:eb:bf:
         dc:d5:64:d4:8c:91:4e:48:75:4d:76:58:e4:ea:74:dc:ef:0b:
         00:1d:0a:a6:24:b0:c5:7f:b9:52:19:7e:7e:88:4f:17:80:13:
         44:db:1e:d5:27:6d:f7:fb:53:7e:b2:08:09:22:c7:bf:38:0b:
         2d:4f:16:65:65:4b:44:0c:be:c8:a9:3f:be:35:d6:9a:45:9b:
         14:9b:c3:54:bc:34:6f:97:d2:63:22:63:f1:98:59:37:46:77:
         dc:c1:fb:6a:07:6a:c4:3f:fb:1f:a0:95:ba:db:a2:c1:bf:df:
         cc:fa:d8:7f:5f:45:06:74:e2:6c:13:e3:32:ec:2a:30:d4:96:
         14:93:c4:86:66:1e:e8:18:a6:f4:65:62:71:e1:7b:2f:24:40:
         a5:05:c5:9a:ca:a3:62:51:dc:7f:b6:33:8c:1e:0d:33:09:92:
         64:a6:01:a1:42:d1:57:21:7f:d5:5c:a6:c4:e6:16:2a:12:a7:
         99:13:bf:aa:69:96:4a:0c:c2:43:2f:29:38:35:0b:39:05:6c:
         81:14:bc:85:59:8c:dc:fb:15:8a:ec:51:b8:46:60:6a:c5:87:
         8e:e6:ea:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:58 2024 by rpki-client on console-ams.rpki-client.org