Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/07793d1d-c3a4-3cdf-a5b8-9a11d0293535.roa
File:                     07793d1d-c3a4-3cdf-a5b8-9a11d0293535.roa (raw, json)
Hash identifier:          3frlokRiCxZDW4NKF6IXn3zmWScRPWljozJDybI1WSk=
Subject key identifier:   4D:19:7A:E2:FF:91:FE:85:C1:DD:C1:91:2F:04:A7:C0:6A:C5:F9:47
Certificate issuer:       /CN=458adead-fc85-4377-ae8f-70e00c42b223
Certificate serial:       010D0C9F43285848CDE10FA6EE688AC521534D00
Authority key identifier: 80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/07793d1d-c3a4-3cdf-a5b8-9a11d0293535.roa
Signing time:             Fri 07 Feb 2025 14:00:53 +0000
ROA not before:           Fri 07 Feb 2025 14:00:53 +0000
ROA not after:            Thu 08 May 2025 13:00:53 +0000
asID:                     14618
IP address blocks:        157.248.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:e1:0f:a6:ee:68:8a:c5:21:53:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458adead-fc85-4377-ae8f-70e00c42b223
        Validity
            Not Before: Feb  7 14:00:53 2025 GMT
            Not After : May  8 13:00:53 2025 GMT
        Subject: CN=cf3d4236-49b5-4153-8a4c-7609196681a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:01:65:ce:38:1b:3d:49:67:a1:dd:19:3d:13:
                    fe:a0:12:d5:de:cf:e5:c0:7e:2d:ba:ab:3b:39:32:
                    39:84:64:c7:37:65:23:ac:e5:da:fc:3a:a0:01:ec:
                    b7:5a:54:24:d0:9b:4d:83:7a:b6:98:14:35:07:c8:
                    7b:28:2d:15:b9:04:61:a8:2d:ea:48:d7:23:dd:af:
                    b0:d1:64:3f:56:90:08:57:f4:2c:29:11:d5:ad:1a:
                    d5:52:4f:f6:09:a0:8d:6e:b0:92:8b:72:51:12:48:
                    4d:43:46:be:82:b4:c7:46:66:a3:2c:7b:44:a3:df:
                    8a:96:f3:70:d1:4a:12:95:10:30:65:a1:b5:39:54:
                    48:d3:51:3b:ae:73:5c:a4:97:08:44:89:4f:94:cc:
                    27:22:6a:43:93:9f:12:0c:56:bc:35:17:07:44:69:
                    75:dd:f5:ba:1f:3b:ed:67:bd:2a:9b:09:2a:58:9f:
                    26:fd:9a:f2:41:6d:d2:52:71:ce:40:ac:8c:30:00:
                    6b:aa:27:fe:1e:76:f7:82:bd:67:0b:f4:03:85:67:
                    3c:91:f7:fd:90:c2:14:f6:81:05:25:69:69:27:04:
                    8f:1f:f0:9c:33:74:b9:a0:52:f1:20:99:aa:b2:cb:
                    95:c3:36:fc:63:d8:8a:f8:5a:b6:52:2f:31:8b:56:
                    8f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:19:7A:E2:FF:91:FE:85:C1:DD:C1:91:2F:04:A7:C0:6A:C5:F9:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/07793d1d-c3a4-3cdf-a5b8-9a11d0293535.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl

            X509v3 Authority Key Identifier:
                keyid:80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.248.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:0c:ff:2a:a2:99:b5:c4:e1:24:94:6a:06:b7:7f:73:c3:87:
         50:fd:0e:50:cc:e9:0c:32:f9:df:87:be:cb:da:00:c0:f0:26:
         7c:44:f3:0c:b2:2e:87:7e:18:91:ac:cd:4e:92:21:23:67:c9:
         58:91:0a:d1:df:8e:dc:2d:7f:0b:48:8f:7e:43:0f:57:df:71:
         82:c4:f0:1f:1c:e9:f8:16:26:22:79:0d:0e:65:15:e6:f6:67:
         33:6a:ba:e3:7f:70:e2:16:25:c7:5a:4c:5c:90:87:23:c7:b3:
         33:2a:85:39:1b:6a:3c:60:ce:7b:ed:d6:5b:d4:cb:e0:46:78:
         9a:aa:86:09:a8:da:52:87:84:62:b5:09:43:35:42:d7:f4:9b:
         31:0b:50:e4:fd:bd:24:9c:fe:47:af:2a:a9:c0:12:fe:bc:ef:
         40:23:95:ca:d6:5d:8b:ec:12:43:36:99:a7:2a:7b:d4:d4:ff:
         8b:1a:81:cd:7a:31:19:8c:b6:76:6f:68:6e:d5:85:a8:a5:42:
         17:35:9c:8d:40:96:d5:b1:9d:21:f7:d8:0e:13:c0:8a:43:87:
         69:03:98:07:45:b6:d7:69:e9:d0:62:db:98:cd:0a:1b:cd:0c:
         6f:94:0b:d6:c2:1b:da:90:2c:af:12:d3:8b:91:21:f4:4c:4f:
         9f:57:52:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:37:28 2025 by rpki-client