Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/693a7f7c-ef92-3044-b13d-b2ec55d3212a.roa
File:                     693a7f7c-ef92-3044-b13d-b2ec55d3212a.roa (raw, json)
Hash identifier:          8aZXB29wMAFYzeiUm6rCuXMPgoEoMD9Z3EGy4atFk/c=
Subject key identifier:   52:7A:76:B6:15:9A:23:1F:6A:1B:1E:39:22:C0:29:78:59:8D:78:AA
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F43285845B21E2B82F98CF87EC45679C0
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/693a7f7c-ef92-3044-b13d-b2ec55d3212a.roa
Signing time:             Sun 28 Apr 2024 13:00:34 +0000
ROA not before:           Sun 28 Apr 2024 13:00:34 +0000
ROA not after:            Sat 27 Jul 2024 13:00:34 +0000
asID:                     395831
IP address blocks:        158.115.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b2:1e:2b:82:f9:8c:f8:7e:c4:56:79:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Apr 28 13:00:34 2024 GMT
            Not After : Jul 27 13:00:34 2024 GMT
        Subject: CN=ba55488e-3606-4194-9166-f94491f31440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:54:0b:48:ed:c1:f8:e0:ee:5e:2e:76:61:7b:
                    f5:bc:f3:b3:83:ec:fc:15:bb:44:d4:e2:c1:41:42:
                    b4:f9:f5:75:b0:77:b3:13:14:7d:5e:1f:09:96:a0:
                    31:1f:c4:a7:10:41:2e:b6:bf:0b:68:36:18:c0:2c:
                    d5:cd:ca:d2:d0:bb:bc:eb:c6:11:83:a1:ae:67:9b:
                    a4:ee:9f:3d:c0:78:be:22:d5:8b:38:c2:31:5a:1f:
                    1f:67:24:cc:3b:af:94:22:7e:cf:d4:30:69:17:5c:
                    22:5c:db:e7:8c:a7:a8:f6:59:3d:21:7c:b9:af:ab:
                    60:f8:7a:59:ac:a9:b9:26:96:3e:fa:e9:97:a9:de:
                    39:3a:80:dd:a7:fc:61:01:80:c9:27:b2:8d:65:a7:
                    b8:9b:c7:f4:dc:e4:5c:82:7d:cc:67:7d:27:35:63:
                    e5:4a:35:58:1a:27:21:25:77:99:ed:d8:cb:64:b1:
                    07:b7:11:2b:a4:f7:35:6d:01:d9:1c:53:cb:d1:52:
                    8e:fc:8e:3a:3a:c8:7f:58:16:19:8a:65:69:08:3b:
                    c6:b6:09:d5:83:5e:e7:f0:21:80:5b:22:83:c1:66:
                    24:9b:47:99:06:3e:1c:12:bc:31:51:cd:b1:86:b2:
                    d3:ff:42:5f:c2:35:4a:4d:11:b1:67:91:5e:87:1f:
                    34:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7A:76:B6:15:9A:23:1F:6A:1B:1E:39:22:C0:29:78:59:8D:78:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/693a7f7c-ef92-3044-b13d-b2ec55d3212a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:4e:7c:00:7b:7a:59:c0:72:e2:e8:4b:52:05:c1:27:fd:78:
         5c:aa:d1:bc:6c:89:6d:84:63:de:5f:55:4c:02:2d:23:e5:b5:
         07:81:ef:43:59:68:5e:1d:bd:5b:4b:6b:78:22:3c:f7:39:1c:
         80:8b:fa:2d:3f:12:93:2f:eb:42:bc:aa:4f:cf:5f:31:a1:48:
         77:6f:75:24:f1:6d:fc:87:a5:06:44:f7:06:eb:8d:2f:38:26:
         c6:a9:c7:98:43:f4:1b:9c:af:72:0d:ce:dd:d1:59:ec:01:6b:
         d6:7b:6e:56:8a:ea:70:65:b3:da:ee:fe:d9:13:bc:41:2b:34:
         ad:54:d6:4b:f7:da:c8:84:76:27:7f:3f:d7:12:3e:0b:94:3a:
         89:72:68:94:93:68:11:bc:9b:81:cb:8c:4a:2c:5d:b9:22:86:
         a8:c5:07:7f:dc:6c:d5:20:0c:53:d3:7a:51:4f:27:22:3b:c1:
         c9:3e:56:75:39:5f:49:3c:f3:b9:89:77:00:bc:59:70:b4:4c:
         9f:81:bd:80:ca:af:b4:fa:26:e1:61:80:69:ba:bf:e0:9a:56:
         c9:3d:3d:56:a2:1d:64:09:cb:c8:e4:df:72:0c:ad:df:c6:04:
         1d:60:2d:56:92:20:ce:8e:e1:61:8c:62:70:f6:80:bb:0e:31:
         4c:24:d9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 17:21:05 2024 by rpki-client on console-fra.rpki-client.org