Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/87a11cca-fa31-3087-90f3-2df253cfddfb.roa
File:                     87a11cca-fa31-3087-90f3-2df253cfddfb.roa (raw, json)
Hash identifier:          6WHJhvP2rwUsLzFvkv6fbms66kwKamy1k4Kgy+4LvPM=
Subject key identifier:   D2:35:8F:89:93:C3:7E:A4:01:E2:F6:E5:B8:6A:B5:B0:E1:19:67:C2
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F43285848DBD669A0A4B5EAD27CAA2C80
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/87a11cca-fa31-3087-90f3-2df253cfddfb.roa
Signing time:             Wed 12 Feb 2025 14:00:53 +0000
ROA not before:           Wed 12 Feb 2025 14:00:53 +0000
ROA not after:            Tue 13 May 2025 13:00:53 +0000
asID:                     14618
IP address blocks:        158.115.158.0/24 maxlen: 24
                          2606:7bc0:1093::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:db:d6:69:a0:a4:b5:ea:d2:7c:aa:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Feb 12 14:00:53 2025 GMT
            Not After : May 13 13:00:53 2025 GMT
        Subject: CN=dca46e4b-b8dc-4224-adae-75f3e6d27936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:50:ba:b7:2c:6a:be:17:93:5f:be:28:bd:38:
                    a6:e0:22:b2:33:cb:02:d4:74:8c:c9:7b:88:70:3f:
                    66:60:76:83:9a:bd:02:02:d6:36:1a:df:55:89:cb:
                    36:9f:63:db:71:24:65:74:ff:56:ad:d2:ed:f4:08:
                    7f:f6:34:eb:23:a2:75:6b:7b:79:c6:5e:06:7c:ed:
                    1a:21:96:e6:57:63:85:5d:b2:15:e1:42:54:51:a9:
                    66:f5:e7:17:f4:d7:f6:35:10:ff:03:d9:27:ec:0a:
                    0a:8a:f5:a2:ad:33:85:22:24:59:2a:c7:b0:a9:8b:
                    57:af:b0:b1:ab:d1:cb:0e:aa:a5:a2:e8:00:c6:b4:
                    00:c4:a0:e9:7a:01:16:aa:08:14:7d:a4:3d:23:c2:
                    c8:35:ab:e3:45:71:53:b9:77:bf:a9:2a:3f:38:53:
                    d4:3b:e5:17:47:c6:ef:67:71:ca:83:20:c3:f0:c8:
                    0a:b2:db:9d:35:df:d1:d4:45:ea:29:4f:e9:97:8b:
                    7e:68:3f:cf:89:a6:8d:ce:47:0d:09:c6:e3:0b:b6:
                    44:a1:80:61:5f:bd:cf:72:1a:28:cf:d8:16:28:72:
                    68:86:3d:8e:ab:fe:c7:f9:58:ff:61:a9:67:46:a4:
                    35:b9:53:92:d2:71:03:e5:f6:4c:65:64:ba:17:53:
                    60:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:35:8F:89:93:C3:7E:A4:01:E2:F6:E5:B8:6A:B5:B0:E1:19:67:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/87a11cca-fa31-3087-90f3-2df253cfddfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.158.0/24
                IPv6:
                  2606:7bc0:1093::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:72:15:2a:26:30:bc:1e:00:60:4f:54:20:80:44:12:d2:1b:
         be:24:15:eb:42:de:7a:ae:2f:dc:18:70:75:3f:c6:44:cd:71:
         0c:cf:30:aa:0d:33:eb:a0:8b:cc:3e:f4:c7:fe:11:a7:78:0e:
         1a:6e:41:f2:c2:ab:47:02:b5:3c:86:03:01:48:ec:1a:5a:0a:
         df:af:a9:e8:be:8f:47:d9:e6:b9:04:93:b1:61:df:23:15:ae:
         8a:b5:b5:7e:11:82:f4:7f:90:e2:51:ab:f2:43:11:10:1a:ca:
         c1:99:94:c0:56:82:c4:4d:40:55:f9:f9:89:01:79:63:62:08:
         1b:43:ba:f0:49:61:66:a7:79:59:92:3d:c3:68:70:69:ad:6f:
         1e:1c:aa:75:fc:77:a3:6b:b0:63:cf:10:3f:57:70:7a:7d:b6:
         9f:67:ce:17:00:46:7e:81:c7:ba:6e:f9:6a:a0:a9:79:ec:da:
         9f:37:b5:91:60:37:5b:20:df:4f:30:19:53:54:a6:0c:d1:eb:
         df:39:7b:ac:8c:66:51:3a:de:39:08:47:17:00:23:73:df:9a:
         e0:52:47:1e:43:de:ba:be:f8:16:aa:b9:e4:79:65:6e:20:55:
         72:da:78:b4:14:19:d9:d7:2c:d1:b1:e1:8e:b0:36:76:09:f1:
         ac:85:ca:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:51:35 2025 by rpki-client