Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/6b69b583-d314-3cbc-92db-88a1fc81de8f.roa
File:                     6b69b583-d314-3cbc-92db-88a1fc81de8f.roa (raw, json)
Hash identifier:          Y7VUE7lPdwI3CyTUIUTF+UCa6MIdMTBO6p9PkBA2kc4=
Subject key identifier:   57:B6:7A:3C:4F:AF:A3:53:EA:7F:32:7B:3C:D5:25:6C:C2:FC:B3:52
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F432858452AB7E37B65D84A7575751000
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/6b69b583-d314-3cbc-92db-88a1fc81de8f.roa
Signing time:             Mon 11 Mar 2024 01:00:26 +0000
ROA not before:           Mon 11 Mar 2024 01:00:26 +0000
ROA not after:            Sun 09 Jun 2024 01:00:26 +0000
asID:                     395831
IP address blocks:        158.115.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2a:b7:e3:7b:65:d8:4a:75:75:75:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Mar 11 01:00:26 2024 GMT
            Not After : Jun  9 01:00:26 2024 GMT
        Subject: CN=96e9ef79-7bd7-440e-a638-f9b5838db411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:09:39:7a:93:af:e6:87:a2:c9:f1:78:7f:bc:
                    0d:6a:ad:83:84:2e:3a:70:d7:c5:3d:29:6a:77:17:
                    51:83:cb:e2:7e:ef:43:33:7e:70:c4:f3:66:74:24:
                    2b:52:3c:a2:ab:ea:b1:53:42:36:fe:89:0d:c3:0b:
                    f4:11:5a:d8:cc:5d:59:2f:28:63:da:d1:3a:4f:0b:
                    56:c1:9b:b3:0f:57:1f:d4:14:08:20:c6:c0:2d:2a:
                    0b:8e:41:9f:c6:66:ab:87:c8:00:d0:ca:43:17:89:
                    63:f2:92:1a:2d:cd:d3:0c:87:9c:e3:f2:de:ec:a1:
                    54:e7:7d:53:24:d3:09:ea:91:32:a9:7f:48:51:95:
                    87:69:96:80:f3:db:48:72:70:b6:c2:e6:98:23:09:
                    81:13:d4:57:aa:6e:88:f6:4c:a6:82:c8:0c:78:3d:
                    4a:dc:9f:f4:aa:6e:2e:4b:8c:61:f2:ff:7e:35:ff:
                    9a:da:be:6c:05:0f:f1:7a:18:b8:9a:b1:99:17:b5:
                    15:bc:6a:fd:72:e9:2b:7e:4f:c5:ff:de:db:41:ea:
                    03:34:db:a4:df:63:3e:8d:56:a7:e0:a6:80:b6:c1:
                    d3:41:b8:42:05:05:03:84:96:25:39:83:23:18:e1:
                    f4:2e:81:84:a1:be:75:51:fc:92:da:75:61:81:bc:
                    4a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B6:7A:3C:4F:AF:A3:53:EA:7F:32:7B:3C:D5:25:6C:C2:FC:B3:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/6b69b583-d314-3cbc-92db-88a1fc81de8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:fe:09:40:6b:24:04:f2:4c:a1:94:8c:cd:6a:77:53:06:63:
         74:d8:74:f5:ee:05:fc:05:47:8e:24:11:e7:04:78:bb:ae:19:
         7b:88:9c:b3:33:e2:ac:35:67:b8:11:db:33:a8:d4:ef:82:21:
         fa:53:e2:2a:82:1f:ba:90:2c:b7:cb:28:b8:01:9f:7d:07:3c:
         ae:d1:b3:87:c1:fb:a3:64:00:d7:63:e1:7c:42:a9:f4:fe:3d:
         0d:0f:92:45:6f:a0:49:6c:c4:b5:dc:9b:8d:18:97:67:26:bf:
         09:89:16:97:a0:89:a3:e1:1e:d9:e3:13:2c:ce:0c:24:13:55:
         32:11:16:a3:a9:3f:f5:51:a5:e6:a6:46:48:f2:05:60:22:90:
         0d:f4:31:30:46:3e:3e:ea:45:4d:09:f4:e2:f6:b2:9d:07:a6:
         81:0c:dd:8e:03:09:ee:1b:e2:42:66:31:de:7f:81:1f:9b:3a:
         14:8f:9d:47:90:be:00:36:cf:a0:8e:36:c0:87:92:c8:c3:94:
         95:95:b3:a7:f0:b9:99:36:43:81:82:42:79:e2:91:06:d5:ae:
         58:39:60:65:46:a5:cd:fb:36:f5:26:aa:67:59:6e:87:8d:bb:
         8f:68:a0:21:44:21:17:20:ed:06:7a:8b:b6:73:b2:63:6a:4d:
         63:40:35:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:30:25 2024 by rpki-client on console-fra.rpki-client.org