Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b3d1be67-5383-349f-9c24-699e17fb4c78.roa
File:                     b3d1be67-5383-349f-9c24-699e17fb4c78.roa (raw, json)
Hash identifier:          FVFi8V/YIhB361T5yXkEHkd8sVXcvQgAxxrr0jkl/7g=
Subject key identifier:   FE:B2:56:FB:76:9C:F1:BB:7A:52:99:A6:CA:EF:EB:B1:32:12:6F:E8
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F43285845A6F36DE313A3FAC5F2E95B00
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b3d1be67-5383-349f-9c24-699e17fb4c78.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     16509
IP address blocks:        158.115.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:6d:e3:13:a3:fa:c5:f2:e9:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=74412b8e-1d35-4552-81e3-5683bfdc26e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ce:a7:88:ee:fa:9c:d0:88:a7:c2:5d:b6:fa:
                    32:07:8e:73:7f:a3:ca:cf:49:34:20:74:73:5d:00:
                    67:94:ef:9c:cb:d7:c1:90:59:6e:9a:33:03:cc:09:
                    4e:cb:c3:0c:d0:6c:46:2e:74:ca:59:d3:94:8b:45:
                    da:ca:4e:2d:9b:2b:6d:51:98:d1:dd:82:d9:c1:9c:
                    83:47:5d:cd:a5:ba:8e:9e:e0:53:84:70:6b:f8:2b:
                    56:f3:fe:27:68:f0:a9:6d:ac:8f:13:d1:00:ca:72:
                    05:71:5b:94:aa:20:06:58:dd:4c:71:b2:5a:9a:a8:
                    45:d7:88:1d:07:af:ff:eb:fe:53:8c:1f:03:e5:8d:
                    82:be:6f:ad:58:ac:17:1c:52:76:25:14:b5:10:3c:
                    ff:06:36:44:6a:93:69:50:b0:f9:fc:46:ec:1d:8d:
                    fa:02:b6:d1:c9:bd:36:e1:13:b8:5f:4b:69:31:44:
                    16:73:82:54:e4:1a:d3:e0:08:3c:5a:de:79:a5:dc:
                    49:39:ef:f3:bc:e3:63:6b:2b:f6:cd:fa:9e:32:84:
                    af:70:e2:f8:dd:cc:75:9c:0d:e5:91:58:0b:c6:7d:
                    e1:fe:68:eb:b7:b0:c8:40:88:18:de:09:61:61:fa:
                    8c:7d:f2:5e:a6:23:c2:f6:81:de:c9:d4:df:25:8c:
                    dd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B2:56:FB:76:9C:F1:BB:7A:52:99:A6:CA:EF:EB:B1:32:12:6F:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b3d1be67-5383-349f-9c24-699e17fb4c78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:e6:93:3b:18:64:dd:b3:03:3c:74:35:85:d4:66:6c:84:e4:
         57:3a:12:5d:98:87:9c:1f:91:d4:1a:f9:28:f1:6c:b1:b2:6f:
         07:7e:10:45:c5:68:33:ff:88:da:1d:d7:9d:f1:4c:2f:04:d3:
         c3:91:70:24:19:d6:12:d2:b4:16:0c:aa:5f:6a:b3:7d:d8:74:
         4c:7b:34:29:13:aa:de:6f:1b:b7:1c:09:60:9e:84:b4:d4:f1:
         40:b5:aa:91:1f:2d:d4:61:df:0e:2f:d2:3b:92:5e:90:15:fa:
         af:ab:7d:8d:47:ad:74:56:c9:f8:38:79:d3:40:8c:d4:41:20:
         80:3c:ec:d3:b1:d7:d3:7c:0e:85:05:8e:51:6d:b9:0e:2d:73:
         2e:ab:fc:43:13:a3:8a:7e:fc:04:d8:e6:9d:f6:61:2a:cc:94:
         33:79:0c:bd:af:4f:e0:94:ee:7d:bd:5a:7a:97:ad:2b:cf:b1:
         eb:33:44:ba:9a:d5:d5:e7:56:2b:73:0e:bb:6a:dc:ca:e4:65:
         65:27:64:b1:71:dd:aa:30:63:d9:b8:8f:1d:02:6d:af:de:e3:
         4b:c0:f2:39:8e:91:cc:c1:2a:f3:08:b1:24:d9:ea:af:96:86:
         d5:b6:b3:ed:76:99:c8:bf:48:55:01:0f:da:6e:4e:c2:32:b2:
         43:44:51:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:55:59 2024 by rpki-client on console-ams.rpki-client.org