Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/6b69b583-d314-3cbc-92db-88a1fc81de8f.roa
File:                     6b69b583-d314-3cbc-92db-88a1fc81de8f.roa (raw, json)
Hash identifier:          0SnVjXztDa3FJzp7cvlG5Bf9Um3/qc09g/1RUY8mh9A=
Subject key identifier:   0C:BB:E4:F5:CD:9B:5D:F8:05:1D:23:56:AF:87:12:05:5A:21:1E:96
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F43285847CA3F810654DC8D50881B8A80
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/6b69b583-d314-3cbc-92db-88a1fc81de8f.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     395831
IP address blocks:        158.115.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:81:06:54:dc:8d:50:88:1b:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=b5deb02b-f7e5-4828-ab44-ab93a6ad2621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:68:08:47:86:5a:c0:33:e6:7e:53:c4:d5:65:
                    a2:7a:42:58:83:94:42:5b:37:c5:36:5d:37:fd:67:
                    0a:0b:6a:2f:a7:aa:02:03:68:1d:84:5b:14:c3:50:
                    d2:ad:ea:5d:6e:2d:9a:8f:12:94:5d:7e:48:13:8b:
                    a6:25:df:65:c7:78:24:68:b1:ee:da:32:25:59:8d:
                    ed:ae:b7:75:90:92:67:56:82:92:8e:bb:d7:6b:10:
                    e1:dc:59:c0:52:7a:3e:76:bc:1e:8b:4a:ba:be:6e:
                    d9:92:e9:95:a3:86:e6:83:19:a7:ac:b0:55:ac:71:
                    94:bb:6d:0a:88:2c:a9:7a:ed:ed:16:83:ab:9c:e8:
                    28:7e:60:b4:6f:7b:34:fb:01:f7:67:a3:37:08:dc:
                    9b:7a:7f:c1:25:2a:3f:fb:f6:5e:e6:98:b9:0c:b0:
                    1d:67:ea:fb:d4:76:55:2f:08:31:d7:ed:cf:72:b1:
                    63:4e:aa:40:8e:4f:5d:d4:cc:cb:e6:f3:71:f7:3b:
                    27:20:d2:db:97:f9:5e:e9:9f:57:69:e9:9e:d6:63:
                    15:64:5f:74:68:65:f5:08:26:5c:4f:f5:ef:42:19:
                    4e:99:28:d5:2e:ab:6f:ab:d3:9d:c9:a7:8c:13:85:
                    a0:40:7c:de:db:18:ef:69:aa:4c:cb:0f:14:af:45:
                    d0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BB:E4:F5:CD:9B:5D:F8:05:1D:23:56:AF:87:12:05:5A:21:1E:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/6b69b583-d314-3cbc-92db-88a1fc81de8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:ee:fc:c5:e3:c4:48:9a:2c:06:2e:d5:32:d8:88:57:79:ea:
         4d:27:b7:f4:10:58:2d:05:e4:d2:87:27:8b:0c:e5:11:98:a1:
         b3:5e:61:63:46:89:42:ac:00:9c:1e:e2:c4:57:95:b2:b4:25:
         d6:91:d7:ba:4d:82:af:ac:0a:bd:ee:01:46:94:e6:51:dd:40:
         fc:2a:97:00:cd:d3:3e:10:9a:49:b4:91:5f:b8:8c:47:a7:cf:
         a4:2d:21:ae:26:88:22:ec:15:88:1e:99:f0:49:11:6c:8b:e5:
         cd:10:87:9e:a6:7a:e7:bf:14:a5:e1:6b:4c:7c:c3:d7:5b:ac:
         19:42:6d:54:69:45:99:f6:c1:d8:33:9f:b1:a2:4f:89:da:75:
         88:0b:1a:09:24:4e:f4:ab:03:64:be:9e:a2:39:83:3f:5d:23:
         de:b6:33:a1:86:87:bb:9d:95:d9:5e:6f:86:55:b9:5d:5e:10:
         88:6e:df:38:6e:c1:4b:26:c2:a5:20:9f:e2:cf:28:b0:1f:62:
         70:31:57:77:92:b8:91:ec:3e:2c:12:f9:b2:2f:ef:f6:06:b2:
         c5:99:79:c9:5c:64:13:4e:94:c6:fb:65:c8:94:83:85:92:f0:
         1d:6b:07:d0:1b:71:02:61:76:6b:fa:b8:7f:85:07:c5:9a:5b:
         66:8c:c1:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP4EGVNyNUIgbioAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz
M2Q3MB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
YjVkZWIwMmItZjdlNS00ODI4LWFiNDQtYWI5M2E2YWQyNjIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmgIR4ZawDPmflPE1WWiekJYg5RCWzfFNl03
/WcKC2ovp6oCA2gdhFsUw1DSrepdbi2ajxKUXX5IE4umJd9lx3gkaLHu2jIlWY3t
rrd1kJJnVoKSjrvXaxDh3FnAUno+drwei0q6vm7ZkumVo4bmgxmnrLBVrHGUu20K
iCypeu3tFoOrnOgofmC0b3s0+wH3Z6M3CNyben/BJSo/+/Ze5pi5DLAdZ+r71HZV
Lwgx1+3PcrFjTqpAjk9d1MzL5vNx9zsnINLbl/le6Z9Xaeme1mMVZF90aGX1CCZc
T/XvQhlOmSjVLqtvq9OdyaeME4WgQHze2xjvaapMyw8Ur0XQ1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAy75PXNm134BR0jVq+HEgVaIR6WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl
ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNmI2OWI1ODMtZDMxNC0z
Y2JjLTkyZGItODhhMWZjODFkZThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4
NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm
MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2
YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADru/MXjxEiaLAYu1TLYiFd56k0nt/QQWC0F5NKHJ4sM5RGYobNeYWNG
iUKsAJwe4sRXlbK0JdaR17pNgq+sCr3uAUaU5lHdQPwqlwDN0z4Qmkm0kV+4jEen
z6QtIa4miCLsFYgemfBJEWyL5c0Qh56meue/FKXha0x8w9dbrBlCbVRpRZn2wdgz
n7GiT4nadYgLGgkkTvSrA2S+nqI5gz9dI962M6GGh7udldleb4ZVuV1eEIhu3zhu
wUsmwqUgn+LPKLAfYnAxV3eSuJHsPiwS+bIv7/YGssWZeclcZBNOlMb7ZciUg4WS
8B1rB9AbcQJhdmv6uH+FB8WaW2aMwVI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:30 2024 by rpki-client on console-ams.rpki-client.org