Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/73161134-fbde-3082-942f-dc98bec7bbfc.roa
File:                     73161134-fbde-3082-942f-dc98bec7bbfc.roa (raw, json)
Hash identifier:          n6ua3IfZzDSuGhCLWqUklabuHcEFGbPooGw8lHl+FV8=
Subject key identifier:   81:C8:E0:5A:6E:ED:7A:5D:B5:FE:C7:0F:71:98:7B:C1:EA:30:E1:B3
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F432858455B92EA647DF5639833896BC0
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/73161134-fbde-3082-942f-dc98bec7bbfc.roa
Signing time:             Thu 28 Mar 2024 13:00:36 +0000
ROA not before:           Thu 28 Mar 2024 13:00:36 +0000
ROA not after:            Wed 26 Jun 2024 13:00:36 +0000
asID:                     395831
IP address blocks:        158.115.158.0/24 maxlen: 24
                          2606:7bc0:1093::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5b:92:ea:64:7d:f5:63:98:33:89:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Mar 28 13:00:36 2024 GMT
            Not After : Jun 26 13:00:36 2024 GMT
        Subject: CN=80b59b09-df8c-489e-b355-3430023eb0e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9c:46:ae:2f:7e:41:86:30:2a:25:42:d0:5a:
                    ae:9b:6a:ee:16:e5:a3:c1:30:7b:ad:62:91:44:6c:
                    c6:e0:1c:02:63:e9:6b:86:c7:64:20:65:84:14:51:
                    a3:89:37:2c:d6:1c:9c:6f:a1:d6:cc:78:19:20:50:
                    fd:8c:d6:70:b7:14:c0:13:70:b8:9c:b3:e1:0a:3c:
                    2c:b8:53:78:10:68:54:d6:07:e5:e9:9a:0a:64:f0:
                    11:e6:0d:b8:76:c8:53:7d:8e:89:f5:0a:74:9f:dd:
                    06:c9:0c:30:33:21:c5:1d:90:df:59:71:0a:0a:84:
                    3c:6e:b5:4a:d0:97:70:14:aa:39:12:f2:d2:17:b4:
                    fe:cb:6e:8d:57:20:52:a9:47:d9:a0:42:57:18:e1:
                    7b:86:62:fa:bb:e1:3d:6d:7e:f1:d9:50:0e:f3:32:
                    02:ce:e1:4c:a9:8b:82:f4:65:37:b2:19:c5:2a:31:
                    26:5e:b3:c6:58:54:5c:c0:59:a8:bf:94:99:44:00:
                    2b:b3:c5:df:33:2b:5b:1b:58:5b:e1:66:65:50:0c:
                    a8:40:29:5c:1b:da:e0:5f:b5:1f:50:88:0a:80:d5:
                    c7:69:0a:45:f6:58:c9:b0:31:5a:d9:bf:6f:83:7d:
                    fe:2f:77:e8:e9:e6:d7:4a:c6:8e:0a:ed:3c:2c:bf:
                    bc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C8:E0:5A:6E:ED:7A:5D:B5:FE:C7:0F:71:98:7B:C1:EA:30:E1:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/73161134-fbde-3082-942f-dc98bec7bbfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.158.0/24
                IPv6:
                  2606:7bc0:1093::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:a4:04:25:a4:86:63:8c:ec:b4:1f:d1:dc:55:1e:08:38:92:
         f0:df:b7:80:8b:27:0e:c9:b5:0e:c8:3d:b3:09:a8:8d:d3:f9:
         78:c0:67:45:4c:e1:8d:91:a9:27:4c:cb:35:bd:b3:fc:dc:4a:
         b3:93:a6:c3:fb:63:b6:28:2c:c4:d7:03:3d:5b:af:7d:b7:14:
         00:03:c6:10:e5:14:bc:ac:3c:92:17:86:ed:14:48:ce:78:13:
         19:50:fe:97:b0:2f:51:c5:00:39:c9:0c:0c:da:a4:e5:47:d3:
         5e:00:7f:dd:c3:93:72:fd:5c:af:d0:fa:83:21:0e:01:6a:0b:
         b3:67:17:b7:f8:ac:6a:b2:7b:4c:28:62:2d:75:89:5d:38:b5:
         14:70:c4:37:25:e8:af:42:c4:08:d3:2b:bf:27:d0:3a:b1:5d:
         63:cb:8e:fb:94:a2:8b:87:43:7a:53:a8:5c:b5:3f:df:0f:42:
         20:94:4b:a6:84:d0:3f:78:3b:dd:69:41:bd:78:49:32:da:fb:
         0d:87:53:ff:38:e5:57:3e:60:9e:a4:2c:4e:bf:8b:00:14:4c:
         f2:af:96:60:17:c1:76:cc:04:d3:d1:a1:ec:c0:a5:fa:bf:11:
         ab:4b:78:96:56:a7:53:81:2c:66:b4:6b:7a:ab:01:75:a7:58:
         04:73:91:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 15:30:25 2024 by rpki-client on console-fra.rpki-client.org