Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/c24e6a3a-c40a-3eac-bef2-a8039c545265.roa
File:                     c24e6a3a-c40a-3eac-bef2-a8039c545265.roa (raw, json)
Hash identifier:          ZDAx4jwJN3bemaPVV35yvBYGIgRyphXYfdxZhCXrlus=
Subject key identifier:   B4:78:A2:0E:DF:2C:6F:83:AB:CC:F9:E5:5A:10:8F:B7:83:A6:5B:18
Certificate issuer:       /CN=458adead-fc85-4377-ae8f-70e00c42b223
Certificate serial:       010D0C9F43285845777DE0AD2C3DA0FCA9088040
Authority key identifier: 80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/c24e6a3a-c40a-3eac-bef2-a8039c545265.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     14618
IP address blocks:        157.248.214.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:e0:ad:2c:3d:a0:fc:a9:08:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458adead-fc85-4377-ae8f-70e00c42b223
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=38e18e3e-009f-4112-b3ed-2f68a1459d0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:37:81:c8:56:3e:f8:fc:e5:01:b3:99:05:57:
                    45:79:f3:2c:bb:4f:09:b2:7c:19:18:a9:f6:8f:db:
                    0b:35:12:60:0c:eb:5b:e5:d1:25:f2:67:8b:19:b7:
                    50:15:7a:80:8a:f7:56:42:02:13:7d:5d:d0:aa:9e:
                    41:6b:8c:5d:71:31:ce:e9:ed:23:fe:b0:62:29:bb:
                    c9:74:ae:5b:90:e1:c0:db:73:a0:41:70:a6:82:ca:
                    0d:9f:db:c0:c4:05:55:f3:83:63:8f:4c:3b:31:c2:
                    de:52:b1:e1:38:b8:77:fa:c6:48:9b:be:dc:f3:13:
                    d8:b6:3b:13:ba:df:48:02:b6:2b:14:75:53:83:64:
                    9c:43:18:4a:af:8d:a8:52:5f:35:b4:be:fc:4c:16:
                    8d:dc:b9:20:0e:fa:34:bd:11:f8:4e:c4:9e:f8:81:
                    47:d8:78:8d:97:20:74:a8:c4:8a:57:84:c3:27:7f:
                    de:ec:7b:5a:be:41:83:85:ae:2d:dc:22:24:70:ae:
                    7f:87:2c:77:b4:a4:30:a6:52:09:17:91:c6:6a:9a:
                    c4:76:1b:b4:92:67:d9:54:00:68:e6:e6:c4:0e:c5:
                    42:ab:c3:e3:0d:c2:b8:92:f6:5a:45:05:76:7e:a0:
                    7f:64:0e:cb:4c:eb:4a:50:81:fd:34:e5:23:a9:97:
                    67:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:78:A2:0E:DF:2C:6F:83:AB:CC:F9:E5:5A:10:8F:B7:83:A6:5B:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/c24e6a3a-c40a-3eac-bef2-a8039c545265.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl

            X509v3 Authority Key Identifier:
                keyid:80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.248.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:8d:01:da:4c:ab:c6:ac:0e:55:39:96:7c:29:c5:97:0b:e1:
         aa:6b:f2:4b:69:5d:f4:57:08:85:e6:b6:ca:80:9c:48:83:80:
         59:2c:7d:5c:78:d7:e2:f1:4e:53:d5:28:bd:7e:65:cb:04:c1:
         bd:18:99:7a:bb:f9:5c:c4:2a:a0:b4:64:85:3c:3b:e0:ec:f3:
         38:7c:ce:d3:f1:b1:be:7c:b6:d6:6d:06:2a:25:45:96:f6:39:
         a6:2b:39:a1:74:a5:46:00:eb:8c:48:9e:e6:10:ff:96:3c:62:
         95:7b:81:d5:df:0e:a1:66:d4:a7:20:5d:24:1f:4d:8e:6c:d9:
         8b:33:90:a2:50:83:3a:39:7b:53:69:a7:03:bd:ce:9a:1d:d5:
         f5:f9:68:ee:1c:c8:63:76:37:57:11:48:7f:67:03:ef:46:15:
         11:f4:cd:44:9a:3b:b7:1e:b8:15:6c:e9:1d:05:f4:63:95:93:
         c3:e2:00:9e:ae:ab:37:b5:36:a2:31:13:7a:96:26:ed:fd:d5:
         30:9c:ce:37:94:3f:a8:d9:6e:49:56:bb:c9:a3:f4:0e:1e:d3:
         ca:66:1e:e2:1a:99:c3:bb:ed:29:4f:f7:84:bd:b7:38:b0:66:
         1f:2e:d4:26:d1:0c:fb:e9:32:52:b6:06:ae:cd:f8:f3:47:b0:
         e9:4a:8e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:13:58 2024 by rpki-client on console-ams.rpki-client.org