Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/85240ca7-41e9-329b-8a29-307187f566aa.roa
File:                     85240ca7-41e9-329b-8a29-307187f566aa.roa (raw, json)
Hash identifier:          q2VQnfkUKQx/q711PH4wbzwSg0uUrX81Teg+0JINPwU=
Subject key identifier:   54:54:14:70:B7:A4:8D:B9:CA:17:4E:9C:91:94:E5:0E:70:65:92:1B
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F432858455B92EA4509B80359EDF89DC0
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/85240ca7-41e9-329b-8a29-307187f566aa.roa
Signing time:             Thu 28 Mar 2024 13:00:36 +0000
ROA not before:           Thu 28 Mar 2024 13:00:36 +0000
ROA not after:            Wed 26 Jun 2024 13:00:36 +0000
asID:                     16509
IP address blocks:        158.115.158.0/24 maxlen: 24
                          2606:7bc0:1093::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5b:92:ea:45:09:b8:03:59:ed:f8:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Mar 28 13:00:36 2024 GMT
            Not After : Jun 26 13:00:36 2024 GMT
        Subject: CN=1cf2f132-3294-46cc-8114-8e4c1eb4c1ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9d:3e:4e:a9:f6:93:67:7a:ea:08:35:3c:6d:
                    46:b5:bc:c3:ea:28:48:bb:a1:55:f3:08:4f:21:71:
                    75:56:b4:84:69:39:2c:69:c5:b8:c2:7b:32:22:11:
                    03:e2:6d:74:26:20:5c:02:d2:8b:06:c9:14:ff:a6:
                    fd:54:47:b1:ff:a6:ad:cb:b8:92:6b:8d:22:9b:71:
                    e1:c7:1f:3d:3d:e5:99:6c:0e:ec:f9:24:5c:ac:d1:
                    53:a0:81:91:00:57:a0:a8:61:b7:66:82:50:df:25:
                    a5:70:5b:4b:0b:b1:7e:cf:6d:67:d5:88:0e:62:90:
                    ad:33:31:bf:d2:ac:16:ea:2c:bc:7b:ae:eb:da:52:
                    3f:10:d2:5c:f8:24:24:27:23:b5:eb:a7:60:3a:91:
                    7c:5d:ef:15:f1:a4:13:ff:5f:43:fd:b3:50:76:50:
                    d7:90:d8:5d:2f:2f:92:2b:fa:23:80:7a:15:d8:8a:
                    2f:2b:29:25:84:d1:10:8d:0e:24:13:77:d3:a8:5b:
                    8c:32:f9:47:f7:af:66:ab:4e:f0:e2:78:08:19:b0:
                    8b:9c:a5:8b:fe:7b:5b:24:d8:b8:96:8e:4a:b1:96:
                    1f:68:3e:c9:44:c1:b2:16:92:5f:b7:94:ac:03:3e:
                    de:78:6a:97:b7:78:75:1c:9d:03:d2:d6:90:39:93:
                    65:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:54:14:70:B7:A4:8D:B9:CA:17:4E:9C:91:94:E5:0E:70:65:92:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/85240ca7-41e9-329b-8a29-307187f566aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.158.0/24
                IPv6:
                  2606:7bc0:1093::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:e7:ba:ff:74:f0:81:6d:7d:30:c8:11:27:54:c5:36:3a:bd:
         6b:59:5a:20:36:ce:85:31:91:b1:5f:45:f4:b4:16:aa:c9:89:
         8a:58:20:9b:42:f9:d0:fd:59:1a:21:72:13:6c:80:81:7a:0e:
         85:e9:38:4e:26:a1:36:b9:fc:dc:32:de:48:35:c6:68:6c:71:
         36:09:67:0e:63:0f:5d:1c:5c:b7:89:60:d3:f1:14:bc:13:2c:
         27:f3:d0:72:0d:14:7c:42:d5:1e:a3:42:09:eb:89:d4:aa:00:
         bc:d2:0c:00:77:9b:96:3d:df:3c:5d:4d:4d:9c:cf:74:77:cf:
         77:a8:77:01:27:6e:9e:0d:22:62:f5:5f:2c:df:89:4c:fc:29:
         78:c2:16:b3:23:bf:a3:6a:d6:5c:ea:70:0f:d8:93:20:29:bb:
         cb:c3:25:88:f8:62:2f:f6:30:47:4c:3e:76:77:b7:e7:6d:e1:
         68:a6:fc:33:5c:c4:76:75:34:8b:42:aa:61:8d:32:df:40:b6:
         6f:a2:9b:ed:b3:91:f1:26:be:0f:e6:b5:54:7a:26:f8:aa:e6:
         9f:6e:b2:5b:7c:34:e8:de:b3:20:8b:f8:04:cd:30:10:2c:e4:
         56:48:42:36:02:eb:4e:2b:1d:4e:5b:56:c3:46:4d:77:9f:73:
         f8:94:94:77
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEVbkupFCbgDWe34ncAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz
M2Q3MB4XDTI0MDMyODEzMDAzNloXDTI0MDYyNjEzMDAzNlowLzEtMCsGA1UEAxMk
MWNmMmYxMzItMzI5NC00NmNjLTgxMTQtOGU0YzFlYjRjMWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu50+Tqn2k2d66gg1PG1GtbzD6ihIu6FV8whP
IXF1VrSEaTksacW4wnsyIhED4m10JiBcAtKLBskU/6b9VEex/6aty7iSa40im3Hh
xx89PeWZbA7s+SRcrNFToIGRAFegqGG3ZoJQ3yWlcFtLC7F+z21n1YgOYpCtMzG/
0qwW6iy8e67r2lI/ENJc+CQkJyO166dgOpF8Xe8V8aQT/19D/bNQdlDXkNhdLy+S
K/ojgHoV2IovKyklhNEQjQ4kE3fTqFuMMvlH969mq07w4ngIGbCLnKWL/ntbJNi4
lo5KsZYfaD7JRMGyFpJft5SsAz7eeGqXt3h1HJ0D0taQOZNlywIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFFRUFHC3pI25yhdOnJGU5Q5wZZIbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl
ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvODUyNDBjYTctNDFlOS0z
MjliLThhMjktMzA3MTg3ZjU2NmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4
NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm
MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2
YzY2ZjMzZDcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAnnOeMA8E
AgACMAkDBwAmBnvAEJMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQOe6/3TwgW19MMgRJ1TFNjq9a1laIDbO
hTGRsV9F9LQWqsmJilggm0L50P1ZGiFyE2yAgXoOhek4TiahNrn83DLeSDXGaGxx
NglnDmMPXRxct4lg0/EUvBMsJ/PQcg0UfELVHqNCCeuJ1KoAvNIMAHeblj3fPF1N
TZzPdHfPd6h3ASdung0iYvVfLN+JTPwpeMIWsyO/o2rWXOpwD9iTICm7y8MliPhi
L/YwR0w+dne3523haKb8M1zEdnU0i0KqYY0y30C2b6Kb7bOR8Sa+D+a1VHom+Krm
n26yW3w06N6zIIv4BM0wECzkVkhCNgLrTisdTltWw0ZNd59z+JSUdw==
-----END CERTIFICATE-----
Generated at Thu May 2 14:53:29 2024 by rpki-client on console-fra.rpki-client.org