Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/78b5f4cc-a772-3d53-8635-41b66acd5c95.roa
File:                     78b5f4cc-a772-3d53-8635-41b66acd5c95.roa (raw, json)
Hash identifier:          veesxBcXmeDwwsE3DA00ufKdtigKrEn6tQr+lOLPOZE=
Subject key identifier:   76:0A:2D:E4:60:94:F2:49:62:89:57:3E:0E:F7:8A:8B:E1:2F:37:E2
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F43285845B38365A8A872C4890FEF6C60
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/78b5f4cc-a772-3d53-8635-41b66acd5c95.roa
Signing time:             Mon 29 Apr 2024 01:00:25 +0000
ROA not before:           Mon 29 Apr 2024 01:00:25 +0000
ROA not after:            Sun 28 Jul 2024 01:00:25 +0000
asID:                     14618
IP address blocks:        158.115.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b3:83:65:a8:a8:72:c4:89:0f:ef:6c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Apr 29 01:00:25 2024 GMT
            Not After : Jul 28 01:00:25 2024 GMT
        Subject: CN=bbb51209-276b-4a6f-bc3c-fcb4c1a817f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:97:95:7e:2f:12:73:80:33:07:bf:65:50:3b:
                    d8:20:27:d5:64:cd:6e:f9:62:89:4a:e0:94:ff:6c:
                    cc:eb:d2:0f:c0:8a:5e:b3:d8:c7:c9:b1:c0:4b:e8:
                    4f:3a:d0:24:bb:6d:30:68:2a:2b:ba:b9:d7:a6:81:
                    ba:e7:f0:6a:be:e8:df:16:84:8e:f7:1f:80:95:14:
                    ba:a2:84:f6:2f:e9:3a:a5:82:4f:02:16:b4:65:06:
                    c4:2e:4c:79:90:91:a5:1e:b9:4a:b0:f4:f3:4f:33:
                    b9:eb:9d:f9:60:79:63:00:51:6c:ea:93:52:8e:28:
                    55:b1:22:cb:04:90:0d:74:b7:f8:d8:68:23:28:77:
                    5b:6f:39:15:80:43:85:6c:ea:21:fe:2f:48:31:c2:
                    ce:7f:0e:f2:aa:0a:d2:d2:9f:18:94:de:44:74:c4:
                    b2:af:35:39:45:d7:cb:d3:bb:5d:15:92:45:3f:2b:
                    25:52:60:89:88:20:97:c3:23:95:1b:d6:0e:96:43:
                    36:f9:83:4e:ee:f8:5b:dd:9f:d5:0d:3a:2e:34:24:
                    74:e5:77:08:ec:2d:37:cc:a7:65:f9:87:3f:68:0a:
                    ed:0e:46:af:ea:5c:61:bb:9d:b8:19:a1:03:f7:cc:
                    40:fd:fe:03:91:36:c3:1c:43:73:4f:de:ff:eb:82:
                    98:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:0A:2D:E4:60:94:F2:49:62:89:57:3E:0E:F7:8A:8B:E1:2F:37:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/78b5f4cc-a772-3d53-8635-41b66acd5c95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:97:32:24:be:04:4b:9a:87:51:e2:19:f3:86:74:c7:8c:97:
         b2:43:35:fc:d8:88:23:1f:6a:7e:42:95:b1:f1:6a:b1:26:38:
         b3:ab:a6:6a:e7:ac:5f:e8:8a:75:14:2e:c5:4d:16:df:bc:a3:
         de:36:f4:49:69:16:0c:86:bb:4d:5d:17:61:fa:73:b4:db:3e:
         b9:ab:fd:c3:5f:c7:d3:66:20:55:e9:7c:5e:85:7c:dd:74:4b:
         0d:55:94:5b:ce:0f:ab:de:01:31:1b:13:46:82:8c:6e:84:8a:
         da:28:aa:10:af:a2:ed:e1:9a:56:51:47:55:f9:bc:63:e6:23:
         93:23:3a:5b:c9:6c:df:86:6e:93:46:4f:c6:d3:82:78:3c:61:
         2d:9b:e4:16:f8:00:5a:ea:d2:fd:15:98:50:c4:cf:b9:1b:81:
         90:cb:bc:2b:b0:b3:41:85:9e:35:f5:af:e8:b5:e7:4a:7d:4c:
         1a:e7:f1:ce:ec:ef:36:ad:20:3d:32:78:80:aa:33:5e:6d:fb:
         5f:d7:c1:31:5c:bf:86:28:a0:bf:1e:53:a9:3a:98:dd:a6:5c:
         d4:92:d8:77:12:ed:1a:5f:4d:1f:4f:ff:7e:95:86:69:0a:62:
         0c:3d:77:35:41:01:d9:20:16:b8:90:27:25:3e:14:e6:b6:0b:
         a9:55:dc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:25:46 2024 by rpki-client on console-ams.rpki-client.org