Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/78b5f4cc-a772-3d53-8635-41b66acd5c95.roa
File:                     78b5f4cc-a772-3d53-8635-41b66acd5c95.roa (raw, json)
Hash identifier:          CNH72qO4V11bnLUe9XeoGXLL6/86Rv/dKEV1DusTZIE=
Subject key identifier:   6D:1C:16:AF:EA:26:E5:FE:E4:5E:0B:1C:9A:A6:3D:27:40:D4:3E:D3
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F43285848530AE66ACCA551C1B7D260A0
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/78b5f4cc-a772-3d53-8635-41b66acd5c95.roa
Signing time:             Wed 25 Dec 2024 14:00:52 +0000
ROA not before:           Wed 25 Dec 2024 14:00:52 +0000
ROA not after:            Tue 25 Mar 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        158.115.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:53:0a:e6:6a:cc:a5:51:c1:b7:d2:60:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Dec 25 14:00:52 2024 GMT
            Not After : Mar 25 13:00:52 2025 GMT
        Subject: CN=2d4e6965-19f5-4a77-a6f2-36fac01805fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:30:39:84:60:ba:82:3c:e8:c5:00:a8:e6:7c:
                    bc:a0:b9:f5:ca:95:82:53:82:18:be:3e:25:6e:e8:
                    c8:d2:63:2e:1b:39:09:90:e0:62:56:92:62:af:c0:
                    ff:14:df:94:c0:38:bb:66:ab:7e:f0:f0:14:0d:9b:
                    6f:6c:3f:b7:e1:01:a5:d8:38:86:ff:b1:a0:70:73:
                    02:d0:80:81:88:8e:69:3a:46:1b:00:f4:f8:d3:bf:
                    90:17:8a:91:a0:e9:f8:76:bb:34:7d:9c:66:a8:18:
                    d2:d5:65:87:3c:77:3e:d4:81:6e:15:81:cf:d1:1b:
                    4d:90:99:b2:4a:27:92:dd:ae:85:b3:6d:09:bb:a1:
                    8a:d9:c2:e1:b3:2c:69:85:01:c7:34:44:86:91:20:
                    d1:58:89:0c:31:51:70:4e:99:8d:1f:12:c8:86:b2:
                    c2:d3:87:f1:cc:92:ca:ee:2c:92:69:d4:65:7b:07:
                    19:a0:7e:f3:97:79:e4:0d:3c:89:24:73:d3:f1:50:
                    f6:26:49:11:69:6f:61:6b:1c:3c:f1:27:6c:e2:8a:
                    e5:c2:ac:3d:e4:61:ec:33:81:50:56:31:70:62:f3:
                    a5:26:dc:e6:0f:71:a6:d3:15:b4:10:05:98:9f:35:
                    5a:7a:19:51:81:d0:fe:5b:75:b4:48:94:1f:03:7b:
                    38:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1C:16:AF:EA:26:E5:FE:E4:5E:0B:1C:9A:A6:3D:27:40:D4:3E:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/78b5f4cc-a772-3d53-8635-41b66acd5c95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:40:0f:48:18:6e:d4:a0:98:61:1e:d1:d2:43:72:82:fb:b3:
         50:20:51:05:d1:b8:c7:76:c8:e7:8a:11:ad:26:92:9c:c7:9f:
         08:49:07:cc:d6:60:41:5b:00:3a:47:01:15:f7:2f:93:89:1b:
         94:d7:e7:41:b1:40:b6:ca:57:1c:af:65:88:54:a8:86:aa:c7:
         62:35:7a:0a:34:3e:08:0e:f1:b4:1d:dd:4a:fd:5f:61:80:01:
         3f:cd:80:18:eb:eb:20:de:7b:64:18:6d:12:43:e4:3a:5a:5f:
         9e:3f:e4:58:2c:77:4f:fc:fb:34:31:86:0d:bb:8d:ce:ae:3f:
         1e:97:c4:0a:83:c2:8b:0a:61:51:ca:9c:3e:97:a5:95:f4:53:
         58:55:2f:7e:44:ee:67:dd:74:c1:27:22:f4:3e:26:85:0d:47:
         f7:78:f0:0e:67:8e:0c:48:52:2f:70:f8:3c:8e:48:a2:0a:16:
         74:2d:1d:c1:18:f7:7b:34:58:90:9d:87:f3:d1:a6:e9:7c:56:
         01:89:31:82:11:71:d3:63:ea:8e:c0:33:17:9b:b9:95:d9:94:
         9a:6c:16:98:a5:d2:4d:24:18:5b:f6:86:35:b5:24:ef:e9:cc:
         2b:62:19:60:40:82:29:27:55:cd:ba:f2:33:03:41:56:0c:22:
         6b:bf:f1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:34 2025 by rpki-client