Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d5c88e45-fe27-3d6c-9869-cdaf57271a09.roa
File:                     d5c88e45-fe27-3d6c-9869-cdaf57271a09.roa (raw, json)
Hash identifier:          amaJY/ZzsVNwBHLUQEH39qn5xPsLsrZCETEvf4t5LFM=
Subject key identifier:   C9:3C:D3:B7:6B:94:BC:3F:9E:A1:81:D3:21:0C:70:24:6D:B1:24:1A
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F432858452AB7E361E7A092150D0BB7C0
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d5c88e45-fe27-3d6c-9869-cdaf57271a09.roa
Signing time:             Mon 11 Mar 2024 01:00:26 +0000
ROA not before:           Mon 11 Mar 2024 01:00:26 +0000
ROA not after:            Sun 09 Jun 2024 01:00:26 +0000
asID:                     16509
IP address blocks:        158.115.146.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2a:b7:e3:61:e7:a0:92:15:0d:0b:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Mar 11 01:00:26 2024 GMT
            Not After : Jun  9 01:00:26 2024 GMT
        Subject: CN=aa3980fc-157f-4c03-a74c-14811327c325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a4:1e:75:77:76:e2:12:64:4e:00:68:23:6a:
                    f5:eb:c5:6d:b4:7d:d2:21:c1:ed:1a:bc:ba:be:d7:
                    16:35:cc:cf:c6:b0:69:dd:de:0a:e4:ff:a5:43:0b:
                    5b:b6:62:02:ad:88:15:ce:fd:97:87:ac:cb:fc:9e:
                    bb:a1:7d:5d:10:84:2b:07:a9:5d:a2:c0:44:81:de:
                    41:e9:46:39:2a:56:50:53:ac:7b:99:21:76:1e:98:
                    e6:a4:51:ca:c3:26:cf:62:61:47:13:f8:0e:8f:d1:
                    e7:1a:b5:18:e2:db:8e:1d:3a:48:cd:cf:5f:73:a2:
                    14:18:75:8e:c2:80:ee:fb:52:13:f1:3b:2e:40:c4:
                    63:95:78:f5:8e:eb:55:f4:c4:c5:a9:18:9a:16:d2:
                    b9:9f:9d:f3:49:5d:4a:91:75:2f:91:7e:b2:34:9a:
                    c0:22:17:c8:c7:6c:eb:43:32:70:11:98:11:43:d8:
                    fb:61:84:f4:4d:b7:40:d2:a5:3e:c7:49:b0:70:f3:
                    c3:09:1d:2e:48:98:89:b8:46:41:75:8f:51:9f:56:
                    8a:73:6a:35:67:ed:ba:48:e8:cc:bb:db:c6:3d:13:
                    20:eb:87:7f:d2:ad:80:60:1e:f6:50:58:c7:3a:18:
                    db:d1:3b:cd:50:c6:2d:b2:cc:49:9a:f2:17:26:07:
                    36:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:3C:D3:B7:6B:94:BC:3F:9E:A1:81:D3:21:0C:70:24:6D:B1:24:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d5c88e45-fe27-3d6c-9869-cdaf57271a09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:69:07:20:10:86:9d:a6:30:fe:d7:a1:87:be:58:42:67:8e:
         c0:bc:d2:b1:ee:05:02:63:ce:b7:71:e7:a2:22:9e:6f:f9:03:
         ae:2d:90:e1:d4:34:ab:79:8a:ca:d7:cf:69:94:61:c8:6d:30:
         5f:68:91:8c:d1:1d:16:72:c8:46:ce:04:85:15:eb:2a:92:73:
         98:77:33:6c:b4:40:40:96:3e:e4:89:68:7d:83:a1:65:af:35:
         c5:8c:3e:2f:da:d5:66:32:71:6f:b0:ad:6a:68:87:5f:d5:cd:
         85:50:4c:80:db:55:94:07:02:36:5e:68:ff:94:99:93:7d:96:
         7c:97:ad:9e:50:13:74:b0:8b:44:9b:f7:86:33:97:e8:bb:fb:
         d9:3b:0d:1b:2f:b2:cc:63:f3:b2:88:6c:a5:a0:47:7e:59:ba:
         a1:ea:72:07:16:a7:ef:d7:65:1b:58:16:75:58:cc:95:b5:04:
         8e:63:3c:57:f3:bb:b6:23:16:89:85:50:bf:61:d7:6a:7b:f3:
         79:b3:97:e1:bc:c8:a3:de:ac:13:e4:61:06:30:05:6c:05:97:
         d5:8e:ac:09:d3:4b:52:05:6f:36:87:1e:5b:a3:d6:89:25:ef:
         78:04:3f:71:e2:16:f9:12:e1:bc:72:11:43:86:7d:e4:8b:46:
         df:ab:5c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:55:59 2024 by rpki-client on console-ams.rpki-client.org