Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/5a27232a-feac-3474-9b25-16a64cc19512.roa
File:                     5a27232a-feac-3474-9b25-16a64cc19512.roa (raw, json)
Hash identifier:          UDHCjI1M4fpRSapqDwruqecQX9HJ0vgnLzBZN8PkZMc=
Subject key identifier:   26:8C:C6:9F:AC:9B:46:D0:3A:0F:46:84:62:A3:00:29:BE:EF:7A:EE
Certificate issuer:       /CN=458adead-fc85-4377-ae8f-70e00c42b223
Certificate serial:       010D0C9F432858455EB5CB2A7F2506B1C7866440
Authority key identifier: 80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/5a27232a-feac-3474-9b25-16a64cc19512.roa
Signing time:             Fri 29 Mar 2024 15:58:21 +0000
ROA not before:           Fri 29 Mar 2024 15:58:21 +0000
ROA not after:            Thu 27 Jun 2024 15:58:21 +0000
asID:                     16509
IP address blocks:        157.248.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5e:b5:cb:2a:7f:25:06:b1:c7:86:64:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458adead-fc85-4377-ae8f-70e00c42b223
        Validity
            Not Before: Mar 29 15:58:21 2024 GMT
            Not After : Jun 27 15:58:21 2024 GMT
        Subject: CN=df3d5f95-f685-4fdd-b7a6-7dff1a6a44a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:68:18:1f:b6:b1:40:03:eb:c4:4e:d0:d8:d8:
                    c4:ac:b6:e6:a9:fa:52:24:3a:d7:0e:8d:c2:6d:db:
                    60:af:cc:f9:64:ff:04:af:c3:02:17:49:1c:54:14:
                    51:39:d2:f7:a2:b1:7c:5c:ca:3d:94:6a:b4:57:6a:
                    9b:14:f9:a7:dc:b2:a8:ec:36:aa:14:46:86:49:46:
                    5c:86:15:c0:87:39:6b:1c:f5:3c:34:db:bf:d4:b9:
                    c6:28:a2:df:a5:c2:64:6f:26:5c:e5:db:d5:27:69:
                    72:e6:de:2b:5a:e2:56:15:8d:57:cc:2d:0b:f1:f0:
                    94:da:f6:48:e9:93:06:76:51:3d:77:ae:b3:35:3b:
                    6b:bd:b5:09:aa:35:5d:26:ce:3d:59:e9:f0:61:39:
                    f1:6a:56:44:d8:64:c1:b7:c6:bd:ae:03:ed:b2:74:
                    1c:0a:4f:0e:fe:15:85:bb:cc:5d:7b:c6:aa:8d:76:
                    0b:ab:54:0e:9e:7b:22:9e:6a:2e:44:e0:3a:55:54:
                    fd:8a:25:f6:e2:3e:85:cc:d4:a7:93:03:61:3c:ed:
                    8e:56:82:55:58:24:0a:f9:4b:b2:3a:6f:04:d1:08:
                    44:30:2e:33:cd:d5:77:37:70:22:b5:c4:ce:bd:84:
                    21:33:9e:99:0b:27:e4:78:02:75:b0:bf:4a:0c:c0:
                    fb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8C:C6:9F:AC:9B:46:D0:3A:0F:46:84:62:A3:00:29:BE:EF:7A:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/5a27232a-feac-3474-9b25-16a64cc19512.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl

            X509v3 Authority Key Identifier:
                keyid:80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.248.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:b6:8a:ce:17:2c:3c:60:82:79:b7:eb:55:4e:3a:28:96:40:
         1d:d2:73:c8:35:84:5a:70:bc:bc:6e:64:cc:9e:cf:63:09:38:
         84:17:0a:34:f9:d9:08:5b:36:60:b2:ba:d6:e2:46:e1:e4:50:
         5d:86:1a:08:74:31:c8:14:a1:35:e9:57:13:57:f2:fc:6e:06:
         26:a3:18:7d:f3:1d:62:27:a0:56:0c:81:91:e6:54:52:6d:2c:
         93:41:9b:63:f5:1e:ee:fa:59:63:c9:e0:9f:a7:55:32:fd:23:
         ba:4d:8c:aa:28:7f:99:d0:60:54:f8:68:9b:ee:99:79:0c:b1:
         b4:bd:34:6e:d5:60:be:2e:8f:a3:fb:4a:0f:53:87:62:7d:e7:
         95:61:72:ce:2d:4f:8c:51:2e:f5:58:38:f4:0d:ac:20:20:3d:
         d8:41:d6:df:c2:ae:12:4f:63:0d:cd:e4:4a:fe:44:26:07:93:
         36:fe:15:16:9e:28:b3:27:28:1d:06:d0:56:06:dc:ac:6a:28:
         7e:3a:f8:b9:31:1b:04:6d:80:cf:6c:c4:35:01:a2:92:41:b1:
         f3:a5:7e:57:bb:fc:cb:1f:ca:b1:16:79:f2:58:00:01:85:7d:
         8d:ed:32:cf:66:39:b7:09:9a:17:6f:ec:be:a3:e4:57:15:4b:
         5b:8f:07:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:40 2024 by rpki-client on console-ams.rpki-client.org