Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/3e297adb-169e-3352-bbb2-8260355bfd1a.roa
File:                     3e297adb-169e-3352-bbb2-8260355bfd1a.roa (raw, json)
Hash identifier:          3S+TffmA64999s6E+QqFawidFPPtYPbrNSnVbPfbUV0=
Subject key identifier:   8C:CC:99:BE:68:E0:CC:81:A6:2F:47:06:5F:C0:5E:44:A3:C8:AE:FA
Certificate issuer:       /CN=458adead-fc85-4377-ae8f-70e00c42b223
Certificate serial:       010D0C9F43285848CDE10FB50672B80BCE6312C0
Authority key identifier: 80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/3e297adb-169e-3352-bbb2-8260355bfd1a.roa
Signing time:             Fri 07 Feb 2025 14:00:53 +0000
ROA not before:           Fri 07 Feb 2025 14:00:53 +0000
ROA not after:            Thu 08 May 2025 13:00:53 +0000
asID:                     16509
IP address blocks:        157.248.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:e1:0f:b5:06:72:b8:0b:ce:63:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458adead-fc85-4377-ae8f-70e00c42b223
        Validity
            Not Before: Feb  7 14:00:53 2025 GMT
            Not After : May  8 13:00:53 2025 GMT
        Subject: CN=bba00308-1455-4b02-8cbb-d51a7bafc1c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:75:4e:94:9c:aa:67:88:28:4e:c5:ad:2c:c6:
                    48:19:18:a4:27:68:9d:6b:e5:5e:28:14:7f:d2:82:
                    2c:3d:96:d5:ff:2f:ef:e6:36:bd:1f:fe:e5:b5:22:
                    2e:fd:c8:01:b9:1a:22:2b:03:bb:3f:a5:03:93:51:
                    53:d2:8b:e5:cb:fe:d2:b8:c5:98:f4:45:93:ce:33:
                    f6:94:a9:60:f1:34:4a:92:5f:ed:82:76:ce:2e:68:
                    f2:25:02:7e:6c:bb:ed:c5:6d:5f:83:4f:b3:4d:14:
                    b9:0e:2d:69:22:26:5c:db:ad:f3:11:bb:aa:16:f5:
                    4d:9c:40:fc:96:31:e2:10:e6:b5:75:7f:f1:53:f1:
                    f1:05:83:c9:8f:18:39:43:5d:b7:ed:e9:b4:72:f6:
                    7b:46:c1:5b:5e:d3:dc:15:f0:8b:d5:73:d0:4f:ba:
                    d7:0d:24:dc:2d:05:d0:25:a2:92:46:a6:11:24:79:
                    3e:1c:4f:a3:68:99:48:23:f9:39:91:2c:5b:6a:05:
                    9e:87:21:1e:81:6d:30:14:d8:8a:03:93:ef:2e:17:
                    c9:46:f7:35:40:44:d0:06:bb:b4:0a:c3:dc:1e:43:
                    34:46:65:f9:ea:cb:fa:bc:f6:3d:ff:fa:3d:ae:d5:
                    a4:b9:89:53:02:e0:d5:cb:68:d7:82:d8:c8:8d:39:
                    19:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CC:99:BE:68:E0:CC:81:A6:2F:47:06:5F:C0:5E:44:A3:C8:AE:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/3e297adb-169e-3352-bbb2-8260355bfd1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl

            X509v3 Authority Key Identifier:
                keyid:80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.248.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:ea:a8:00:85:1d:a5:eb:d1:2a:ee:7c:b0:cd:e2:b5:12:67:
         66:13:bb:10:3f:48:b3:46:bc:fa:f6:19:02:f3:6d:85:d0:7d:
         33:fd:d0:78:20:9b:92:84:98:d2:41:c4:71:a0:94:d7:fb:36:
         3e:0d:8e:b3:77:c5:e7:31:f5:70:0e:75:ca:be:d3:d8:db:31:
         94:5d:7c:bc:a8:73:74:e5:3d:54:32:fb:06:2b:8e:14:ba:f8:
         8f:08:01:c4:8a:60:ec:d6:91:4f:84:64:71:04:31:e5:7c:db:
         9e:de:3d:d7:a4:94:6b:23:42:e8:ad:4c:da:18:87:56:12:8e:
         64:d8:5a:4a:7d:3b:82:21:6f:ea:7e:8a:57:de:3f:3e:5d:83:
         13:7b:6a:f8:90:69:ad:75:8b:dc:95:0e:60:e0:60:61:a7:bb:
         15:bf:df:38:80:a8:05:18:9a:52:ba:37:92:2a:60:16:38:e8:
         d4:d8:0e:9d:33:8c:96:c4:d2:ad:01:55:b0:8e:f2:76:82:76:
         06:85:b7:31:74:29:e6:7a:49:2c:62:b5:48:9c:9f:09:f4:1a:
         ea:b3:3a:34:79:7d:ee:d1:fc:02:df:0d:c6:9b:7d:1e:f9:58:
         9f:8f:31:c3:9a:00:f0:7e:3a:f1:46:c0:39:5a:c6:42:68:d9:
         33:c3:8a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:21:19 2025 by rpki-client