Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4/d8f68052-942f-3f9b-bf26-34d9c4b2ba3c.roa
File:                     d8f68052-942f-3f9b-bf26-34d9c4b2ba3c.roa (raw, json)
Hash identifier:          zEDcxOhLZdeZSNdYAL6Bzj5qs4jFG7rqdlAHfgu2ZCk=
Subject key identifier:   7B:99:7C:7B:79:4E:8B:AE:06:7F:C0:31:DA:FF:62:12:9F:C0:60:FC
Certificate issuer:       /CN=2085ad50-174f-4646-80aa-6de9c61a11a4
Certificate serial:       010D0C9F43285849D42FAA3BF1B1CEB1DFF08980
Authority key identifier: 37:86:19:60:3B:61:D3:A2:F3:43:DA:42:0F:B3:32:2E:8E:29:2F:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4/d8f68052-942f-3f9b-bf26-34d9c4b2ba3c.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     208188
IP address blocks:        158.51.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4/2085ad50-174f-4646-80aa-6de9c61a11a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4/2085ad50-174f-4646-80aa-6de9c61a11a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:aa:3b:f1:b1:ce:b1:df:f0:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2085ad50-174f-4646-80aa-6de9c61a11a4
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=fa8a1673-d63b-4813-b06b-bfe0bf37b16b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:46:92:11:56:99:e9:e5:2b:e2:39:92:fb:3a:
                    ce:74:b1:2d:49:8e:a0:f2:93:fe:e4:ee:d5:26:3f:
                    07:4d:24:4c:dd:27:fa:51:47:9e:d6:6a:af:0e:c9:
                    90:ba:09:36:36:f2:f9:96:3b:82:a5:c2:87:4a:82:
                    9b:6b:a6:41:f4:c0:58:a7:fc:5d:f8:8c:36:f9:a6:
                    89:b6:6f:9e:d0:de:52:03:57:34:75:36:84:23:53:
                    e8:ef:28:b6:e0:61:c1:18:84:19:c5:45:59:f0:78:
                    65:0a:93:83:86:f4:0c:d2:84:51:65:db:c8:77:f8:
                    84:83:03:27:50:6e:95:67:83:9a:57:37:de:df:f6:
                    6a:f4:b1:1a:d7:01:27:e5:83:c7:e4:7d:06:83:a1:
                    34:34:5c:a0:90:2c:aa:58:f1:fc:47:ab:c2:00:82:
                    7e:06:eb:64:d9:74:08:d8:8a:bc:8e:8b:77:c5:4e:
                    51:ee:81:76:26:07:8b:bd:43:a8:8f:ec:08:eb:43:
                    cd:06:f4:72:77:d1:66:e5:9a:c7:9d:aa:7e:f8:22:
                    2b:6b:48:dc:bc:62:60:ed:74:51:57:d6:f3:58:71:
                    c3:d0:90:9f:ef:8d:79:b8:1d:ad:a7:61:40:a5:b4:
                    6c:cb:8c:08:f7:7a:2a:ad:db:bd:ac:f0:9d:09:fe:
                    8b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:99:7C:7B:79:4E:8B:AE:06:7F:C0:31:DA:FF:62:12:9F:C0:60:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4/d8f68052-942f-3f9b-bf26-34d9c4b2ba3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4/2085ad50-174f-4646-80aa-6de9c61a11a4.crl

            X509v3 Authority Key Identifier:
                keyid:37:86:19:60:3B:61:D3:A2:F3:43:DA:42:0F:B3:32:2E:8E:29:2F:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:33:25:c8:b6:24:ef:47:59:55:ff:b8:c1:68:e4:81:58:9c:
         b9:b6:67:d3:2c:d5:31:58:66:4d:ce:ef:1a:b1:fa:61:00:cb:
         46:f6:d2:f6:17:52:c2:de:74:25:5e:43:4e:75:d7:b6:c5:68:
         e9:7f:a4:31:fa:72:58:4c:27:2d:fe:d8:ab:8b:a9:c2:f3:ae:
         44:4e:f8:a2:9a:3e:b6:35:66:41:f0:82:34:2c:a9:97:4b:15:
         19:0d:32:39:5b:e7:39:f8:5f:83:e4:d7:77:e5:d2:b0:ee:08:
         cb:30:38:64:3d:59:a7:2f:12:ee:d5:c1:ba:24:0e:60:ee:ee:
         18:f2:44:be:ed:dd:68:5f:77:3b:63:0c:f5:a4:41:93:44:fa:
         bd:77:df:f3:1c:38:49:12:9f:0b:99:af:db:2e:ea:79:47:8d:
         70:75:ce:1f:c2:ff:89:3e:6d:f1:2b:80:f9:21:99:c0:19:6b:
         a7:db:cb:b8:ae:e5:5c:24:3a:50:99:ee:5f:78:2f:f7:e8:e0:
         8b:2d:71:e8:c7:cb:34:97:e3:d0:b6:3a:20:69:fb:9c:8f:1f:
         06:3d:5d:8b:01:22:d8:97:35:b5:9a:00:7d:93:64:0b:06:b4:
         a6:fa:02:90:f5:41:b9:97:e4:da:92:84:ef:93:70:a0:ce:75:
         bc:26:9b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:14:28 2025 by rpki-client