Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/158aba70-9dac-3334-884b-43263fb35c26.roa
File:                     158aba70-9dac-3334-884b-43263fb35c26.roa (raw, json)
Hash identifier:          ncHcbbrKqhv1ywYFer90Liq1w4iMPrmpe+VgeNSrP+M=
Subject key identifier:   CA:34:B8:C8:49:92:AB:58:BA:01:84:B4:C3:E6:22:F2:E1:45:9B:17
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F432858494B6424C54E1D0D297F958DF0
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/158aba70-9dac-3334-884b-43263fb35c26.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     54858
IP address blocks:        216.129.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:24:c5:4e:1d:0d:29:7f:95:8d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=05c40f4c-78fc-419e-884d-49db7a061867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:10:5e:b3:9b:05:78:52:c3:b3:c7:aa:07:a8:
                    7b:24:14:0e:c9:9c:32:37:e6:0a:18:e7:19:ab:5e:
                    80:71:75:65:53:e7:36:85:00:8e:59:c3:75:8d:66:
                    23:97:58:88:61:56:d7:ed:8f:a1:4a:6b:26:0a:32:
                    0b:12:2d:03:87:0f:88:32:88:e3:11:5b:56:89:71:
                    38:98:58:bc:17:c0:c3:e2:e1:39:3f:ea:fd:69:6c:
                    9a:69:bd:71:1d:ea:c5:57:d2:ab:9b:37:e4:56:cc:
                    39:28:e9:56:ec:f8:67:ad:24:05:d9:2d:18:d0:1d:
                    72:9f:e0:1c:ba:78:1e:37:18:98:0d:4c:87:c5:b6:
                    99:b0:da:43:0e:dc:ab:a9:e2:f2:1b:4f:e6:e6:37:
                    e0:cf:6e:a7:b0:e7:ea:68:7a:55:9b:f7:66:f3:59:
                    6d:01:a3:bd:06:ce:e9:3d:6c:a4:3a:c7:d5:03:f1:
                    e9:06:f5:4c:fd:98:6f:bd:1d:87:c2:63:24:ee:e5:
                    ef:7c:0d:ea:43:8a:ac:e6:52:7b:55:00:9e:9c:0f:
                    5a:51:37:65:44:29:3a:66:a1:b9:df:4e:3d:1c:c6:
                    56:98:b2:fc:7f:88:4e:e1:7c:27:2c:6f:39:a8:a7:
                    39:d8:8a:ca:e0:91:24:d2:18:ea:a7:3f:d8:21:4d:
                    0d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:34:B8:C8:49:92:AB:58:BA:01:84:B4:C3:E6:22:F2:E1:45:9B:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/158aba70-9dac-3334-884b-43263fb35c26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.129.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:bb:4d:b6:98:50:91:fe:86:dc:2d:d0:84:e3:3f:6a:81:d5:
         96:a4:5c:d4:f6:63:f9:63:a7:17:4c:24:83:f2:1a:5b:c0:24:
         ce:0b:5f:5c:fa:40:e7:d9:66:11:dd:39:86:b1:28:d8:31:3d:
         12:69:b7:3b:cc:0b:c8:5e:59:e2:52:af:47:84:36:f2:2f:20:
         9a:81:f0:ca:00:82:24:e2:46:fb:c0:05:a2:75:10:94:f5:d1:
         c4:d8:c1:bf:fc:0b:5e:40:37:d4:e7:41:1c:9d:fd:0b:83:01:
         6b:a5:32:59:c8:ee:46:b0:57:5c:ad:dd:54:af:c9:a1:9b:52:
         30:17:50:41:0d:82:e1:47:c6:00:9c:8b:ec:ea:83:97:bd:a8:
         dd:d0:6a:10:d6:3d:a5:0b:5f:38:09:e6:d1:04:04:82:67:e3:
         fd:af:39:62:84:f5:4a:f1:d2:44:53:75:4f:dd:97:70:3c:da:
         72:03:33:58:04:93:95:e1:e0:81:95:7f:74:2c:9f:f5:1a:67:
         13:20:5f:8b:fd:e7:dd:39:2f:b7:c1:0f:69:66:15:5f:f1:b9:
         94:d2:04:05:13:a2:dd:6e:2b:76:97:91:61:ac:84:be:6b:da:
         27:54:d6:af:a0:d5:5c:a1:77:c7:b3:f3:d5:e4:3f:87:cb:ed:
         d2:76:c6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:09:50 2025 by rpki-client