Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/7ad28868-3583-3dc2-9e44-d9421298441e.roa
File:                     7ad28868-3583-3dc2-9e44-d9421298441e.roa (raw, json)
Hash identifier:          TCSjYVAK2SnvSdx4N+8CkGLIYzAHXIg4oijFG1L/HTg=
Subject key identifier:   66:E3:A5:0C:1E:57:62:7E:05:B9:FC:F8:93:BD:23:0A:31:46:69:16
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F43285845B38365D638BD3B0D7B121180
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/7ad28868-3583-3dc2-9e44-d9421298441e.roa
Signing time:             Mon 29 Apr 2024 01:00:25 +0000
ROA not before:           Mon 29 Apr 2024 01:00:25 +0000
ROA not after:            Sun 28 Jul 2024 01:00:25 +0000
asID:                     395831
IP address blocks:        158.115.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b3:83:65:d6:38:bd:3b:0d:7b:12:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Apr 29 01:00:25 2024 GMT
            Not After : Jul 28 01:00:25 2024 GMT
        Subject: CN=24082be9-fce4-4413-ae0d-e0bc45bcb9a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0e:61:94:4c:2a:8d:f5:df:8b:88:20:f1:99:
                    90:3d:fa:de:21:20:b2:5d:3e:73:0a:78:bf:69:eb:
                    2e:e8:c7:c1:c8:e1:f7:a0:b8:4d:21:08:c4:66:59:
                    c7:78:b7:cf:7f:10:25:16:de:c4:32:8a:b3:a3:14:
                    f9:c0:11:c3:b3:00:83:7b:e0:82:d6:1b:af:3e:2a:
                    f0:be:01:9f:59:b6:fd:33:16:c6:bb:83:38:04:88:
                    69:c8:91:ea:e5:e5:db:8b:81:28:2b:4f:91:85:d7:
                    78:ea:1b:84:55:6f:7f:b8:e1:40:f2:63:b6:52:8a:
                    d1:03:e0:4d:9e:3b:df:b9:6d:79:9d:1b:ef:37:d0:
                    34:f5:96:f6:f4:b4:b3:b1:7d:dc:76:dc:a2:8c:6e:
                    43:9c:ef:c4:56:8e:04:5f:4e:14:d1:ad:7e:ee:4d:
                    8d:ae:63:70:d7:91:3b:6a:f8:ea:7b:d1:8c:99:ae:
                    cb:14:7d:49:66:07:a5:ae:2e:a3:3d:47:41:21:03:
                    60:52:f6:ff:e8:9a:14:19:a7:e4:5c:bd:9c:23:c0:
                    e6:92:42:ce:2d:44:b5:e4:3c:7b:21:84:a0:69:5b:
                    17:49:85:8b:44:b7:55:b5:e8:03:ae:f7:2c:d3:61:
                    d3:be:13:29:56:36:37:01:17:29:fe:08:a8:eb:78:
                    59:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E3:A5:0C:1E:57:62:7E:05:B9:FC:F8:93:BD:23:0A:31:46:69:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/7ad28868-3583-3dc2-9e44-d9421298441e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:fc:1b:2a:63:e6:58:6f:49:a5:b6:d1:bb:3b:3b:1b:96:c1:
         c8:84:b8:c7:2c:8f:c9:ec:52:aa:a2:9b:bd:7a:57:15:85:d0:
         b6:aa:75:3f:01:f3:e4:e1:37:ea:16:03:cf:91:f1:74:5b:99:
         02:dd:d6:1c:87:54:ea:6f:7d:5f:c8:92:e3:d8:3b:79:5e:9c:
         08:33:6c:ee:b1:63:c0:22:52:87:8d:99:38:73:9d:6a:92:af:
         c6:70:9e:dd:8c:08:2a:cc:11:27:54:62:8e:47:11:30:d4:a6:
         e5:b1:67:af:63:c3:ef:1e:8f:39:fb:91:1c:14:cb:38:3d:bf:
         ff:2c:ea:43:01:2d:61:7e:60:a1:36:4c:50:20:c9:46:20:f6:
         0f:e4:8d:0b:8b:df:bb:e9:c6:da:c5:d1:40:15:cd:07:a6:f7:
         c2:9e:2a:67:79:f2:74:78:84:f2:94:82:66:67:1c:5f:9e:af:
         7f:5e:1f:4d:94:69:1a:6c:05:db:f7:39:a6:5b:b1:50:c1:9e:
         83:cc:c2:c6:86:87:7a:b6:6c:a9:d6:b4:85:be:83:b3:60:80:
         94:34:7a:44:9a:28:3f:7f:95:a7:af:37:dc:98:03:b5:13:d3:
         b3:57:ed:72:ca:0d:fe:96:e9:02:2a:04:f8:fb:69:0c:d0:22:
         da:9a:84:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWzg2XWOL07DXsSEYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz
M2Q3MB4XDTI0MDQyOTAxMDAyNVoXDTI0MDcyODAxMDAyNVowLzEtMCsGA1UEAxMk
MjQwODJiZTktZmNlNC00NDEzLWFlMGQtZTBiYzQ1YmNiOWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQ5hlEwqjfXfi4gg8ZmQPfreISCyXT5zCni/
aesu6MfByOH3oLhNIQjEZlnHeLfPfxAlFt7EMoqzoxT5wBHDswCDe+CC1huvPirw
vgGfWbb9MxbGu4M4BIhpyJHq5eXbi4EoK0+Rhdd46huEVW9/uOFA8mO2UorRA+BN
njvfuW15nRvvN9A09Zb29LSzsX3cdtyijG5DnO/EVo4EX04U0a1+7k2NrmNw15E7
avjqe9GMma7LFH1JZgelri6jPUdBIQNgUvb/6JoUGafkXL2cI8DmkkLOLUS15Dx7
IYSgaVsXSYWLRLdVtegDrvcs02HTvhMpVjY3ARcp/gio63hZ7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGbjpQweV2J+Bbn8+JO9IwoxRmkWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl
ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvN2FkMjg4NjgtMzU4My0z
ZGMyLTllNDQtZDk0MjEyOTg0NDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4
NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm
MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2
YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIH8Gypj5lhvSaW20bs7OxuWwciEuMcsj8nsUqqim716VxWF0LaqdT8B
8+ThN+oWA8+R8XRbmQLd1hyHVOpvfV/IkuPYO3lenAgzbO6xY8AiUoeNmThznWqS
r8Zwnt2MCCrMESdUYo5HETDUpuWxZ69jw+8ejzn7kRwUyzg9v/8s6kMBLWF+YKE2
TFAgyUYg9g/kjQuL37vpxtrF0UAVzQem98KeKmd58nR4hPKUgmZnHF+er39eH02U
aRpsBdv3OaZbsVDBnoPMwsaGh3q2bKnWtIW+g7NggJQ0ekSaKD9/laevN9yYA7UT
07NX7XLKDf6W6QIqBPj7aQzQItqahD8=
-----END CERTIFICATE-----
Generated at Fri May 10 16:50:11 2024 by rpki-client on console-ams.rpki-client.org