Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/0495f8c9-74f9-35fa-b1ed-609f2ca7e573.roa
File:                     0495f8c9-74f9-35fa-b1ed-609f2ca7e573.roa (raw, json)
Hash identifier:          KV0YT9GRHZ6TZOKbacFVXjHKqmR5Yeo4HTyhhQ9Pbzo=
Subject key identifier:   07:AA:3A:36:25:EE:B3:57:2E:B0:3E:D5:90:0C:D9:B7:71:C6:F0:19
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F43285845A6F36AB2AADB52189A5BAC00
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/0495f8c9-74f9-35fa-b1ed-609f2ca7e573.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     14618
IP address blocks:        158.115.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:6a:b2:aa:db:52:18:9a:5b:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=c1a3dd39-ba47-40e1-aa62-c6cb7cb43449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:84:cb:0b:a1:14:78:c4:41:ce:d3:30:22:ef:
                    7a:88:93:fb:62:01:74:c5:27:66:71:97:31:9d:1b:
                    b7:05:2e:cc:15:63:8d:5a:a9:0d:3d:05:9c:f2:9d:
                    c9:ed:f1:67:f2:b0:14:87:e0:24:8d:e8:24:f1:da:
                    92:fb:d5:22:98:59:47:93:e9:c6:68:d4:b2:25:ae:
                    94:29:01:53:eb:2d:0a:9b:7d:96:d6:e7:b0:bf:4c:
                    d1:4a:31:f2:11:4b:89:82:5d:b8:54:bd:14:59:7b:
                    a2:c2:e9:15:d2:9f:7c:9b:60:93:09:b0:77:46:0b:
                    d1:08:3e:02:d8:04:17:a0:9c:69:0a:73:8d:28:e8:
                    a1:03:5b:d8:e8:b1:f1:b6:c7:c5:7f:c1:85:2d:e8:
                    53:09:33:8c:26:b8:73:e7:a0:72:24:41:eb:f8:65:
                    9d:15:3b:8e:c9:2e:dd:24:8e:81:dc:a9:85:ae:63:
                    a8:e6:fc:89:3d:65:91:11:4d:ce:4f:6f:ac:9f:35:
                    82:21:60:32:ba:f3:df:9a:7c:25:b4:c8:7f:bd:1f:
                    83:8e:94:1d:c2:fd:69:3d:51:73:68:96:33:dd:f9:
                    94:c0:f2:b2:bd:66:44:1f:4a:ae:d6:70:1d:8a:d9:
                    5a:ed:cb:11:78:49:50:70:b5:e0:89:4b:a7:c7:7b:
                    8a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:AA:3A:36:25:EE:B3:57:2E:B0:3E:D5:90:0C:D9:B7:71:C6:F0:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/0495f8c9-74f9-35fa-b1ed-609f2ca7e573.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:6d:ed:aa:2d:76:5a:73:1c:e6:a1:91:01:64:2d:1b:a7:c1:
         4b:ce:84:0a:b2:00:75:43:69:c3:2b:54:dd:12:bc:17:f2:e5:
         4f:18:14:cc:b3:b1:e7:56:17:a9:43:eb:66:9c:14:f0:fb:a1:
         37:3f:de:3c:4b:21:0c:00:a9:24:1c:9c:8c:e9:29:2a:b9:97:
         11:31:3b:e5:37:7d:5c:89:76:40:00:cf:52:66:2b:ca:f2:57:
         d0:03:f3:8b:b8:80:7e:f6:f2:b0:80:ae:79:95:1c:65:5e:e6:
         2c:3a:b2:ad:ca:06:0f:aa:fe:08:1f:5e:e0:a2:58:9c:c5:19:
         4a:37:83:f7:d2:f0:2c:ff:e6:c2:25:41:ba:0c:5e:50:a1:5c:
         ef:5e:5e:53:ef:5c:8a:94:96:d5:54:9f:27:6b:c0:e5:9e:0d:
         2d:40:5e:b6:2f:f7:06:eb:7f:49:f4:f4:de:b0:6c:62:d2:b8:
         7b:88:18:92:bd:5f:ea:dd:c0:5d:98:47:07:89:23:46:87:40:
         18:46:ff:55:67:e7:e6:2a:6f:f6:22:2d:ca:87:1b:dc:55:3d:
         bf:60:d8:0a:0f:d8:c3:f3:fe:30:48:e7:32:bc:db:e6:0f:c9:
         24:43:8a:f4:4d:4a:51:be:5d:79:45:39:bb:f5:a9:28:ef:ec:
         ed:63:1d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:12:33 2024 by rpki-client on console-ams.rpki-client.org