Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/e1b4deef-a5c7-357e-9598-ba8dbf40e0ea.roa
File:                     e1b4deef-a5c7-357e-9598-ba8dbf40e0ea.roa (raw, json)
Hash identifier:          nWl6CjAIoXCn+wkWtFedf0p9P485QnhCGqLJ5zBjg80=
Subject key identifier:   49:2F:33:2B:97:21:5A:D8:60:56:EB:57:FC:07:3B:73:5E:59:4A:39
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F43285848FD56AC08FAF7E3D8442935C0
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/e1b4deef-a5c7-357e-9598-ba8dbf40e0ea.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     18526
IP address blocks:        158.51.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:ac:08:fa:f7:e3:d8:44:29:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=14df6d0b-aeb8-47d8-88bb-ec3f3d20842f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e1:b8:0c:04:94:e8:b2:f9:05:2f:fa:f5:dd:
                    f0:6d:52:89:4c:cf:e4:fb:e5:0f:15:32:24:4f:4f:
                    38:bf:5e:f2:c3:09:dc:ab:07:c7:e2:28:11:07:70:
                    cc:1a:45:59:fa:3f:8e:cf:3e:99:c8:bd:ee:88:eb:
                    a7:88:c8:9c:ed:b0:ad:6a:8e:cf:21:e8:52:d2:b3:
                    09:57:f6:5f:6d:38:5a:00:6c:22:72:94:b2:d1:0c:
                    32:98:38:a5:91:32:27:9e:db:86:22:14:0b:e6:80:
                    84:f6:92:d3:d9:59:da:76:3c:a9:ad:96:72:bf:fa:
                    ac:cb:d1:f2:36:0b:48:29:23:52:45:8e:89:52:0a:
                    a9:ad:63:e9:86:e6:15:0d:f9:89:dd:37:c8:d0:70:
                    a0:8d:62:14:78:bd:d3:c0:a3:dd:02:23:aa:7a:b9:
                    ac:9a:60:f4:8f:d4:28:2c:cd:a9:e4:8d:35:ae:8d:
                    61:42:8c:c6:be:c6:c3:49:48:f8:0f:b5:67:39:35:
                    b2:74:8e:31:97:17:3a:99:91:da:04:8b:f7:54:92:
                    35:30:c3:8f:f6:c9:35:0d:89:ee:86:48:71:47:9c:
                    3e:19:a5:f6:a3:ed:48:2d:be:35:75:ec:7a:05:f5:
                    fb:ce:70:03:45:1e:a5:63:a8:97:4b:74:45:fe:6d:
                    e7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2F:33:2B:97:21:5A:D8:60:56:EB:57:FC:07:3B:73:5E:59:4A:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/e1b4deef-a5c7-357e-9598-ba8dbf40e0ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:ec:c5:88:ac:80:37:9d:da:65:ae:16:77:ec:4d:81:ea:1a:
         a9:cc:c9:26:7f:ef:c5:16:26:31:e9:f6:c8:6b:8a:96:eb:30:
         6c:4a:21:fb:0c:c0:9e:68:64:59:1b:97:e6:72:41:ed:95:2b:
         2b:c7:eb:46:5f:49:30:99:e9:a2:e5:34:57:e4:ec:8d:2e:55:
         eb:09:b1:28:89:a9:43:78:8b:6c:33:f7:c3:57:3f:d8:f5:86:
         b1:90:6e:81:f5:c5:0d:44:37:bb:e2:ad:f4:04:90:a3:28:45:
         e4:37:a2:96:7a:98:4e:2a:62:fb:4e:9f:0e:16:1f:93:f7:19:
         72:53:39:8c:b3:dc:62:b5:2c:1f:c2:dd:f7:f8:55:b3:71:be:
         30:f4:12:fa:15:4f:80:94:47:77:71:d1:7b:59:87:d2:04:6f:
         3a:11:40:84:26:e3:ff:b8:20:6b:71:46:9c:d7:94:fe:fd:5f:
         d5:16:67:59:59:89:12:e2:b5:ab:07:e4:46:5d:61:12:37:3e:
         8a:dd:9e:1f:be:4a:db:b3:76:92:77:d9:9e:bf:14:fb:dc:99:
         70:62:7a:70:f7:ce:1a:c9:19:e2:ef:6f:98:9d:fc:a8:bd:8d:
         74:8e:e2:dd:50:02:4f:4d:a6:71:40:bd:21:06:21:d6:5c:57:
         e9:00:2c:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VqwI+vfj2EQpNcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjE4OTgxMDAtZjQwYy00MDAyLWI2OGEtOGE5N2I1NDhl
NjlkMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk
MTRkZjZkMGItYWViOC00N2Q4LTg4YmItZWMzZjNkMjA4NDJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeG4DASU6LL5BS/69d3wbVKJTM/k++UPFTIk
T084v17ywwncqwfH4igRB3DMGkVZ+j+Ozz6ZyL3uiOuniMic7bCtao7PIehS0rMJ
V/ZfbThaAGwicpSy0QwymDilkTInntuGIhQL5oCE9pLT2VnadjyprZZyv/qsy9Hy
NgtIKSNSRY6JUgqprWPphuYVDfmJ3TfI0HCgjWIUeL3TwKPdAiOqermsmmD0j9Qo
LM2p5I01ro1hQozGvsbDSUj4D7VnOTWydI4xlxc6mZHaBIv3VJI1MMOP9sk1DYnu
hkhxR5w+GaX2o+1ILb41dex6BfX7znADRR6lY6iXS3RF/m3n1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEkvMyuXIVrYYFbrV/wHO3NeWUo5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5
ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3YjU0OGU2OWQvZTFiNGRlZWYtYTVjNy0z
NTdlLTk1OTgtYmE4ZGJmNDBlMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjE4OTgxMDAtZjQwYy00MDAyLWI2
OGEtOGE5N2I1NDhlNjlkL2IxODk4MTAwLWY0MGMtNDAwMi1iNjhhLThhOTdiNTQ4
ZTY5ZC5jcmwwHwYDVR0jBBgwFoAUiUz4vQ00NIcYcDP5AHBKyw94UlMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iMTg5ODEwMC1mNDBjLTQwMDItYjY4YS04YTk3
YjU0OGU2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjNvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIPsxYisgDed2mWuFnfsTYHqGqnMySZ/78UWJjHp9shripbrMGxKIfsM
wJ5oZFkbl+ZyQe2VKyvH60ZfSTCZ6aLlNFfk7I0uVesJsSiJqUN4i2wz98NXP9j1
hrGQboH1xQ1EN7virfQEkKMoReQ3opZ6mE4qYvtOnw4WH5P3GXJTOYyz3GK1LB/C
3ff4VbNxvjD0EvoVT4CUR3dx0XtZh9IEbzoRQIQm4/+4IGtxRpzXlP79X9UWZ1lZ
iRLitasH5EZdYRI3Pordnh++StuzdpJ32Z6/FPvcmXBienD3zhrJGeLvb5id/Ki9
jXSO4t1QAk9NpnFAvSEGIdZcV+kALDk=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:57:20 2025 by rpki-client