Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/23002cf9-daa2-312f-aa9c-f06f11f75bc5.roa
File:                     23002cf9-daa2-312f-aa9c-f06f11f75bc5.roa (raw, json)
Hash identifier:          P+8zYm9JZbyfmdjGCPe+sKsKMWCsLwsFkycYGH0dtKc=
Subject key identifier:   3A:97:E0:36:03:B4:F4:16:10:80:B7:A0:BB:3D:AB:22:94:F3:1E:F6
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584765A0EFC0A291D5AA62777B40
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/23002cf9-daa2-312f-aa9c-f06f11f75bc5.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     395831
IP address blocks:        158.115.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:ef:c0:a2:91:d5:aa:62:77:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=a91fef34-2a97-41b9-9630-697ed0f5ec00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a3:22:c5:f4:c6:7e:98:4e:76:39:d7:f4:54:
                    7b:f4:b3:68:e4:d6:a1:ce:bc:49:1e:b8:0c:2c:77:
                    f8:7b:a9:73:7d:cc:e1:87:d0:9c:2f:f9:5b:ad:be:
                    4d:a0:7d:39:ea:64:fe:f4:28:0b:f5:e0:59:55:c3:
                    e7:3e:68:cd:80:b8:07:97:22:f1:eb:50:91:ad:2c:
                    ae:3c:76:d9:ac:c4:29:3e:70:b3:96:66:d3:8c:d3:
                    1d:57:51:fb:53:b9:4b:57:95:89:8d:7f:3e:18:6a:
                    78:d9:4e:0b:23:28:19:0d:2d:85:71:ff:9d:0f:15:
                    62:4c:52:d4:ab:3c:99:25:65:f9:9a:aa:95:53:05:
                    ab:1e:61:6c:67:c5:f9:41:66:a9:cf:6b:7b:0e:b6:
                    ac:7a:8e:5c:a5:fe:b3:ec:87:4a:e7:8a:a8:fa:09:
                    a2:3a:31:af:90:aa:13:2d:70:a5:ce:70:e3:21:e7:
                    6b:fc:5e:fd:79:0f:ce:6f:19:48:d6:f9:39:75:c1:
                    24:52:f0:b3:3e:01:93:51:e3:51:90:af:bb:f4:d5:
                    5e:14:de:e1:d7:d2:3d:50:33:0a:88:f6:0e:a2:0b:
                    cc:5f:5a:db:b5:ef:96:17:d7:b8:a2:7e:81:92:0b:
                    41:85:4f:70:94:37:6e:d6:16:d5:a7:a9:67:dd:27:
                    bb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:97:E0:36:03:B4:F4:16:10:80:B7:A0:BB:3D:AB:22:94:F3:1E:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/23002cf9-daa2-312f-aa9c-f06f11f75bc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:bb:df:4a:ca:a7:03:a2:8b:41:b5:c6:8f:ae:0c:55:0e:47:
         b8:88:a9:46:61:c6:67:16:88:16:30:b4:4b:2a:92:9e:78:29:
         03:18:31:7c:8a:bc:25:19:80:7d:04:55:f5:0e:26:d5:ad:0e:
         06:63:9b:2c:64:72:f5:4a:a4:91:8f:84:67:6c:13:47:3e:61:
         42:d3:03:3b:35:8c:60:cf:d3:97:e8:d1:67:d2:bd:76:3b:ad:
         a1:7c:7f:51:a9:20:c0:6e:a8:19:51:97:3d:e6:56:e3:fb:a5:
         5b:71:94:02:81:55:aa:22:39:ec:99:30:25:4f:91:8e:e9:d6:
         00:d1:5a:2f:bd:0b:3e:6f:c9:1f:19:cf:8d:41:42:61:8e:6a:
         ed:1e:0f:37:92:fe:94:b7:eb:fd:3d:3f:0f:a0:e0:1b:28:71:
         fe:6f:c7:be:d8:80:84:7b:70:39:bd:4d:24:17:65:d3:32:39:
         76:ea:ae:55:c0:aa:fa:31:c4:d4:8a:56:de:da:0f:a1:e3:0d:
         b4:08:c5:56:2e:ff:63:8d:53:5e:39:d3:6a:99:2d:d7:a8:69:
         03:3c:09:ba:0d:b9:08:3c:8a:4e:16:47:91:0d:70:e1:91:ea:
         5a:f6:bf:2b:86:51:00:d1:e6:65:aa:15:9a:80:2a:ef:86:0e:
         70:64:21:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:20:54 2024 by rpki-client on console-fra.rpki-client.org