Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/2f247cbb-2a74-3f35-b54f-a42a2616a74a.roa
File:                     2f247cbb-2a74-3f35-b54f-a42a2616a74a.roa (raw, json)
Hash identifier:          k/SrnRibJalo8xm9gXTqqcxQqkpq5MzEu1dmv8EEJjQ=
Subject key identifier:   65:DE:37:B5:16:C6:4F:91:0E:0D:24:8A:2D:1B:8D:E6:83:65:A4:35
Certificate issuer:       /CN=8a8a1a2d-c949-4896-93b9-71f917048e79
Certificate serial:       010D0C9F43285849DF5A69EBDFE56C74A475A860
Authority key identifier: CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/2f247cbb-2a74-3f35-b54f-a42a2616a74a.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     399804
IP address blocks:        158.51.124.0/24 maxlen: 24
                          158.51.125.0/24 maxlen: 24
                          158.51.126.0/24 maxlen: 24
                          158.51.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:69:eb:df:e5:6c:74:a4:75:a8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a8a1a2d-c949-4896-93b9-71f917048e79
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=ac233d34-8e7b-496f-92e2-65b7d6eba7b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1e:fe:63:00:0f:17:0e:77:69:22:d9:ab:ee:
                    5e:89:94:b4:90:50:dc:6d:54:8c:a8:df:a8:f5:da:
                    07:a4:14:5a:33:ca:e2:23:1a:7f:e0:aa:a5:02:f4:
                    04:a2:40:99:51:54:0c:1a:2c:6f:c3:f1:20:0f:45:
                    f8:88:8f:83:65:a1:ca:e2:e0:d2:32:f5:16:c8:13:
                    ab:26:05:24:8f:77:10:98:5f:b0:54:c2:1a:4e:28:
                    78:57:c6:20:18:36:5d:87:01:93:33:3d:bb:4d:24:
                    64:f8:55:2f:53:31:93:9b:3f:16:41:29:a9:9b:1c:
                    60:1a:e7:6f:34:c4:10:cd:83:f5:cd:4d:31:9a:cd:
                    cc:d8:2c:5d:92:67:7d:7b:38:e7:4b:a0:6a:4a:31:
                    f7:7a:43:f6:39:1f:ca:8e:f6:ab:33:b4:49:20:3f:
                    aa:09:57:57:be:dc:a7:69:ff:90:b9:5f:6c:dd:3d:
                    d6:6f:63:44:63:b3:33:80:be:b9:2b:1d:71:36:a9:
                    4f:19:e5:df:48:1b:fe:6a:ab:83:71:e9:d1:f5:76:
                    5a:d9:02:2a:e1:2b:28:38:ef:e2:32:fc:84:c9:c1:
                    3e:80:c7:97:2b:85:b8:e8:59:15:26:ff:f1:3e:15:
                    ec:e8:21:0b:a6:89:ad:44:fa:09:87:44:d5:08:ca:
                    43:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DE:37:B5:16:C6:4F:91:0E:0D:24:8A:2D:1B:8D:E6:83:65:A4:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/2f247cbb-2a74-3f35-b54f-a42a2616a74a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl

            X509v3 Authority Key Identifier:
                keyid:CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:33:9e:1a:8a:e7:09:b5:c9:6b:e5:52:e7:45:a5:7a:29:af:
         d2:aa:1e:a3:24:f5:f2:2d:60:f8:b1:fa:7c:ee:16:db:b5:7b:
         3f:0c:5b:37:af:48:a6:ce:ef:07:f0:88:49:6a:29:0c:da:1b:
         3b:75:8c:c8:53:a8:be:98:6d:e0:3c:f4:f6:be:2d:c7:1a:cd:
         38:41:b9:93:89:7b:99:ae:49:3d:82:b0:af:31:26:07:33:c8:
         94:ee:db:54:c9:2b:de:76:8c:ef:9f:ee:da:bb:07:0d:3f:64:
         57:db:0d:8c:e5:39:72:e2:92:64:86:84:65:c2:6a:ff:0f:77:
         35:7f:06:27:a5:d9:57:76:a7:c6:6e:fe:92:09:05:d2:be:4e:
         eb:02:03:10:b2:1b:92:b7:ab:50:d7:e3:dd:57:14:a9:87:0d:
         9c:37:64:5b:90:0a:0a:fe:5b:e5:4e:46:6d:95:61:96:de:22:
         50:1d:18:9d:0f:03:04:0f:f9:fb:a5:46:fe:13:35:d1:b9:fe:
         17:b6:b5:09:cc:d7:04:07:f7:01:7c:16:b0:35:9f:15:00:fe:
         85:71:76:73:24:04:8e:3e:fa:86:ee:e5:87:72:0d:95:4a:c8:
         85:63:d7:6d:12:c6:96:93:88:ce:8e:4f:30:8f:fe:38:f7:3a:
         54:77:05:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:03:08 2025 by rpki-client