Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/d7f10099-ddab-3aa0-9212-05ea67884445.roa
File:                     d7f10099-ddab-3aa0-9212-05ea67884445.roa (raw, json)
Hash identifier:          T2mEvMsZIbGHsagC1VL3QMmMiNocnuDMSIely6dHhsI=
Subject key identifier:   68:8A:A7:3D:42:23:88:BB:05:E1:A8:B6:F1:ED:06:2F:01:D8:24:4D
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F43285845B21E32B7C807430013A8AA00
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/d7f10099-ddab-3aa0-9212-05ea67884445.roa
Signing time:             Sun 28 Apr 2024 13:00:34 +0000
ROA not before:           Sun 28 Apr 2024 13:00:34 +0000
ROA not after:            Sat 27 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        158.51.108.0/24 maxlen: 24
                          2602:fd6f:40::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b2:1e:32:b7:c8:07:43:00:13:a8:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Apr 28 13:00:34 2024 GMT
            Not After : Jul 27 13:00:34 2024 GMT
        Subject: CN=48dcb216-1eb9-490e-a032-ea8d04b7531d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d7:88:1a:21:19:1a:89:62:76:8b:c7:ef:d9:
                    d0:60:c7:b7:6d:67:56:ac:ad:bf:11:83:08:52:4b:
                    4b:0b:6a:ad:6a:1f:4b:2e:f3:a6:88:4c:b4:cf:86:
                    65:a3:d3:47:5b:34:85:c3:84:e4:f8:ac:e1:4d:91:
                    12:f3:a6:67:bc:db:84:fc:a7:1c:07:8b:79:f4:ca:
                    8e:d3:8b:fe:5a:5c:94:88:ba:3d:20:25:16:e7:85:
                    e2:ac:2d:20:7f:5a:cc:99:b5:8b:0d:9c:30:66:0c:
                    f1:75:cd:89:05:11:63:f5:9c:8b:ca:5f:e7:e7:52:
                    ec:25:48:3d:f5:7e:c4:3c:d1:e8:61:24:aa:e2:50:
                    5c:93:0e:7d:cd:cb:f3:88:50:aa:e6:0f:39:1f:48:
                    12:72:c2:1a:e8:8c:5c:09:2f:55:10:b1:09:91:e4:
                    71:de:c6:91:a5:df:a4:ca:2b:c7:00:b4:44:70:d1:
                    e6:f0:dc:48:95:b5:4f:13:4e:f0:57:e0:88:1e:cd:
                    81:66:3b:40:20:fb:1c:d8:10:b1:4f:ad:7c:f5:c6:
                    12:69:4d:69:4f:46:03:4c:59:1c:ec:0b:6a:2e:2f:
                    3e:c6:b7:ea:42:0c:90:80:25:bd:16:16:0b:3c:0c:
                    2f:9d:d2:24:35:f2:f3:18:0a:b2:0c:0d:74:86:01:
                    b5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:8A:A7:3D:42:23:88:BB:05:E1:A8:B6:F1:ED:06:2F:01:D8:24:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/d7f10099-ddab-3aa0-9212-05ea67884445.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.108.0/24
                IPv6:
                  2602:fd6f:40::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:36:91:6c:95:b3:06:f6:90:c8:0a:27:2c:54:0f:77:3c:de:
         d8:84:d3:3a:16:7c:49:2c:1d:b9:9a:1a:56:59:77:0c:c2:61:
         fc:a3:15:7c:d1:36:04:d8:1d:27:ea:67:be:e0:07:ab:24:03:
         08:16:f5:26:cf:08:8f:fd:f4:36:ad:56:78:e3:61:57:b7:90:
         c9:69:7f:65:26:38:5b:b7:83:ef:34:78:ab:d1:b3:f5:9d:7c:
         dc:4e:a9:ec:40:31:79:85:0d:e9:fb:d7:9f:16:2a:93:93:35:
         02:9d:b9:32:66:07:04:64:34:15:c6:a3:cc:90:85:f7:88:2a:
         aa:b1:f0:0a:e5:50:a4:3e:54:d9:72:8b:98:47:f0:80:08:5f:
         5a:72:26:30:46:a4:d8:2a:d1:2b:4a:25:7c:68:8d:cd:d6:09:
         f7:5e:0e:1e:4e:2a:60:ae:11:3a:86:45:a3:c4:3c:2d:01:8f:
         4e:a0:d3:5b:4f:c3:73:2e:ea:28:55:51:5d:70:b2:c3:84:6e:
         ac:7c:69:11:a2:dc:31:85:d9:a6:d8:c1:4e:e0:52:50:51:49:
         79:c2:9e:3a:3c:8a:15:5a:5d:d2:14:8f:ea:38:04:ec:62:3d:
         e9:c4:db:16:65:30:68:8a:ce:a6:97:41:43:9a:5c:b7:bf:f3:
         12:53:81:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:59:59 2024 by rpki-client on console-ams.rpki-client.org