Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/a5c5b016-cf10-329d-abb7-002e0ccfb803.roa
File:                     a5c5b016-cf10-329d-abb7-002e0ccfb803.roa (raw, json)
Hash identifier:          8dpLZSJrdc63jEx1082cbiGv0FscDGROmIQEONNPXxg=
Subject key identifier:   D8:B8:D3:F5:77:18:70:59:AF:4F:45:32:0D:6E:0B:ED:3B:4A:5E:42
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F43285847CA3F80DB7AD16F7D6DCD6E00
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/a5c5b016-cf10-329d-abb7-002e0ccfb803.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     395831
IP address blocks:        158.115.146.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:80:db:7a:d1:6f:7d:6d:cd:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=f8f9bcad-cbb1-4260-96ff-7ea8f433ecd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a0:2d:07:ff:22:44:35:58:bd:ac:6a:dc:4d:
                    99:74:04:f0:50:3f:64:ff:bf:e0:b1:5a:80:a4:45:
                    65:e2:f5:86:46:9f:1b:14:cf:cd:6a:c3:c8:b9:fa:
                    d8:47:b7:cc:c8:fc:a1:b1:81:23:2c:22:3b:d9:bc:
                    c4:ae:b3:3e:e4:35:5b:22:ce:2d:ea:1e:67:a3:3a:
                    22:2f:c4:72:7f:a8:21:d6:f2:27:e7:15:01:a0:12:
                    7a:cb:ae:93:00:65:04:be:b9:ba:6b:a3:ce:72:a3:
                    cd:16:bc:25:6e:32:1a:c2:8c:32:2f:52:24:bc:02:
                    15:c4:ce:e0:32:a3:fd:09:48:7f:38:17:1b:f4:c4:
                    86:6f:78:44:e4:ab:3d:6e:d3:51:b3:d2:cd:0f:fd:
                    7b:ac:da:7e:cf:54:f0:5d:e4:1c:6b:88:dd:2d:00:
                    8f:67:18:5a:63:5d:67:a9:b3:7f:ba:70:0c:5a:9a:
                    8b:06:ad:5f:13:b5:03:23:d1:e6:f1:c6:e1:45:93:
                    95:dc:c8:2c:46:d8:30:33:24:32:00:d7:14:d8:24:
                    0e:44:d3:01:bc:e4:09:ea:36:5e:43:5e:44:3d:85:
                    52:f1:b6:55:19:d8:ae:ae:f9:f3:67:55:65:69:5e:
                    f5:5f:ff:b1:11:ac:39:2c:ff:1d:77:5a:f2:b1:ad:
                    36:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B8:D3:F5:77:18:70:59:AF:4F:45:32:0D:6E:0B:ED:3B:4A:5E:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/a5c5b016-cf10-329d-abb7-002e0ccfb803.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:79:33:3b:41:3b:8f:ce:cb:51:b9:ab:b2:29:77:cc:54:95:
         ab:89:2a:bb:00:c6:be:74:7d:06:4f:94:06:b8:a2:ca:c3:5e:
         a0:30:02:1e:77:36:5e:b4:2d:aa:ba:3b:1d:e5:82:45:7f:62:
         bd:4a:a0:49:9c:89:55:c3:71:71:e2:4e:f6:a9:b6:c6:b1:20:
         54:86:1b:80:5d:7b:40:9e:0e:f5:14:da:7b:0d:84:56:86:b1:
         30:f2:3c:8b:ee:19:94:ec:83:87:34:76:c0:9a:85:c3:9e:76:
         f9:01:6b:3c:e0:39:9a:44:a3:b9:04:03:36:13:0c:bd:17:9d:
         65:01:7d:7c:f9:50:7d:7f:06:a3:5c:43:cf:bd:00:eb:11:b6:
         56:a6:dd:6b:d6:bc:e0:7d:8b:23:22:56:d4:1d:08:6b:08:58:
         67:c9:71:29:64:63:c2:1e:c8:b4:70:30:43:ae:00:12:a2:4e:
         a3:2c:d9:e1:b4:ee:7a:be:8c:13:7c:91:60:e1:c4:5f:ae:ce:
         da:7a:a4:f8:bf:72:55:7f:dc:0e:60:5d:9f:f3:fb:54:54:cc:
         a7:d0:dd:fe:72:86:8f:57:9b:48:f6:07:48:c0:9a:4c:8c:0a:
         3b:77:cc:fa:0c:3a:db:15:97:66:4e:cb:42:59:e5:b8:a0:d2:
         6b:8f:e1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:20:54 2024 by rpki-client on console-fra.rpki-client.org