Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5863efda-fb1f-333c-9e74-1e8e0363fbe8.roa
File:                     5863efda-fb1f-333c-9e74-1e8e0363fbe8.roa (raw, json)
Hash identifier:          M2xetmlbuIgD9ij8GkX7xP23Vp2kWErTxq9uDGA4Gic=
Subject key identifier:   83:99:98:90:DA:2B:EB:59:56:70:7B:9F:5F:AD:00:A4:B0:FA:E2:95
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F432858493243D85053C0DB9C16B0EA00
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5863efda-fb1f-333c-9e74-1e8e0363fbe8.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        158.115.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:d8:50:53:c0:db:9c:16:b0:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=ba72ee3c-e3b7-4dbb-bb9e-7a7e07ee9eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1d:09:b7:e6:24:fa:57:51:89:e7:3b:74:b6:
                    b4:78:69:2e:f0:84:bf:2f:fa:ff:c2:41:ff:a4:fe:
                    c2:21:65:c6:9c:b1:ba:a8:46:1a:e4:08:c1:0b:ee:
                    1b:06:37:a2:aa:7b:51:0a:21:98:ea:00:51:67:f1:
                    1c:f5:5d:64:c9:69:12:7b:e5:10:43:e0:bc:1c:74:
                    4b:f1:73:a6:23:92:5c:9b:75:32:82:bc:b6:b8:75:
                    26:db:da:e0:7b:31:de:e2:74:ce:25:c5:0b:93:cd:
                    2f:6a:48:87:db:6f:00:10:bf:3a:4c:20:ba:b5:d3:
                    7c:aa:ee:47:6a:ee:3f:40:63:55:8a:64:16:3e:ac:
                    9e:5f:89:86:32:55:f7:14:36:8d:ee:de:73:57:e0:
                    8f:e8:0b:70:ec:64:42:d8:9b:cb:fa:14:25:9e:a6:
                    a6:4d:37:7e:fb:a7:41:ac:1c:82:6d:a2:d6:53:91:
                    46:61:ba:9d:d1:78:fe:dd:0a:d4:a9:98:cd:16:fd:
                    ad:fa:88:88:8e:aa:9a:54:d0:7b:f5:98:8b:9e:1a:
                    10:d8:34:0b:3f:dc:1e:9f:5b:75:7a:e2:96:de:09:
                    fa:27:fc:d6:8d:62:81:c2:0f:b5:2c:8a:fc:ae:cf:
                    24:9d:5f:42:95:fa:ae:a9:3f:2c:93:f7:7c:88:89:
                    4a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:99:98:90:DA:2B:EB:59:56:70:7B:9F:5F:AD:00:A4:B0:FA:E2:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5863efda-fb1f-333c-9e74-1e8e0363fbe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:d3:fd:28:70:24:30:51:59:e4:f3:ff:d1:ac:93:3d:d0:bc:
         b6:08:21:d7:d3:72:e2:a5:21:08:0f:ea:5a:48:64:02:37:87:
         26:b7:1e:f7:ff:15:3a:ca:bf:74:f5:61:43:df:69:e6:c1:28:
         32:14:ee:42:8d:62:98:a1:44:b0:5b:d0:fc:31:7d:8c:90:e5:
         f4:ee:fa:30:aa:6a:e3:de:79:84:05:a6:a7:fa:69:81:83:63:
         d4:5a:0f:53:e7:8d:4e:21:a0:66:d9:20:18:9c:96:e4:39:29:
         59:a0:79:ee:be:42:27:03:06:42:76:51:51:52:97:e2:78:2f:
         c0:4a:7c:a0:ef:63:73:4e:5a:58:dc:d1:4d:44:e8:01:31:32:
         57:c0:8a:28:02:02:fb:d1:b2:84:1f:c6:f9:bc:99:7b:de:c9:
         0f:09:9c:81:a1:40:63:24:b9:a8:f2:b8:f3:67:e5:83:a7:d6:
         e9:15:0c:9d:1a:4f:65:a8:89:0f:33:20:ec:cd:47:cf:86:48:
         d2:da:f4:99:96:dc:25:b7:b3:86:f8:57:d0:05:3d:f4:97:a2:
         c0:67:13:d1:8f:dd:d8:37:31:96:1e:c8:3a:c5:ed:87:a4:be:
         a6:e5:ee:35:82:9a:62:fb:a3:c0:e2:dd:3c:9b:24:52:c6:6f:
         06:5f:21:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:00 2025 by rpki-client