Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/c24e6a3a-c40a-3eac-bef2-a8039c545265.roa
File:                     c24e6a3a-c40a-3eac-bef2-a8039c545265.roa (raw, json)
Hash identifier:          zMLQZcOUAh+0lXy/5GfRdKxIuSM+D6xr3uVZ+c2LoZg=
Subject key identifier:   F3:86:96:8B:65:F3:1D:79:A8:5F:CA:D2:C0:5C:DA:D0:CE:44:54:DD
Certificate issuer:       /CN=458adead-fc85-4377-ae8f-70e00c42b223
Certificate serial:       010D0C9F43285848F65BD964C2A2237D74814E80
Authority key identifier: 80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/c24e6a3a-c40a-3eac-bef2-a8039c545265.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     14618
IP address blocks:        157.248.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:d9:64:c2:a2:23:7d:74:81:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458adead-fc85-4377-ae8f-70e00c42b223
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=eb994aec-78b5-4694-b1cc-20f70cb81ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b8:d3:a5:13:9d:c2:f7:bd:b7:fe:ea:25:c4:
                    70:ae:71:ac:6f:78:7d:a4:ca:86:8d:18:ff:06:1f:
                    31:9d:a7:f2:33:2e:30:34:f1:55:ad:57:62:8a:b5:
                    9e:7a:13:ce:8d:ed:28:b4:80:48:22:70:88:78:f6:
                    00:65:2a:26:da:6f:26:9b:bc:2e:2e:80:ec:6b:6b:
                    99:ba:14:f7:45:a2:9f:87:35:ee:e0:a7:1c:40:72:
                    76:9c:f3:7d:28:b2:87:13:f6:c5:f4:27:bd:27:a6:
                    d4:fd:13:85:5d:1f:ab:c3:d5:70:73:7c:92:54:59:
                    2c:95:06:38:e7:28:ac:28:19:54:33:1f:84:02:b7:
                    ec:a0:8c:bd:da:d1:4b:d2:59:d6:ec:01:64:4a:a7:
                    ad:93:61:69:93:46:4b:8c:27:0e:95:cd:ce:fe:b5:
                    d2:02:31:15:82:de:d4:c0:ba:d1:ff:f8:58:42:6a:
                    a0:36:1d:43:74:28:7d:77:ba:2c:fa:53:8e:29:51:
                    ee:ff:2e:6d:0b:9a:ed:fd:56:59:6e:08:be:cd:00:
                    14:37:45:dd:11:24:2d:a4:cb:f5:d2:75:18:f5:b5:
                    6b:74:2b:73:0f:d9:0a:1f:ff:c4:47:56:2e:a1:9d:
                    85:26:fd:4f:b4:14:d9:11:aa:c2:58:b1:05:87:2d:
                    6b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:86:96:8B:65:F3:1D:79:A8:5F:CA:D2:C0:5C:DA:D0:CE:44:54:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/c24e6a3a-c40a-3eac-bef2-a8039c545265.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl

            X509v3 Authority Key Identifier:
                keyid:80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.248.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:50:0d:27:df:2e:5f:21:98:eb:4a:9f:d6:e0:39:7d:49:e5:
         79:b4:23:f5:4b:a5:b3:20:c9:f0:bb:15:a8:7b:db:44:7b:5f:
         cd:2f:c0:52:e1:ee:50:0e:d8:16:6a:5c:f7:98:68:53:88:de:
         b2:77:85:8a:46:61:dc:32:e5:18:cf:db:c2:ff:6b:4f:fe:64:
         b5:84:d5:84:64:e1:0f:2a:ea:47:ca:0a:a1:65:83:68:da:ac:
         f3:02:da:d9:8f:1b:58:ba:89:32:89:66:b1:bc:cf:9f:f7:0e:
         ad:d8:e3:f1:b9:46:ea:ea:38:98:0d:34:93:34:c5:94:17:bc:
         68:90:d8:3d:b3:b0:18:da:91:93:6c:c0:6f:76:06:ed:b3:f8:
         73:48:8c:86:63:56:7f:56:c3:2a:e9:af:f5:de:db:93:13:8c:
         33:ab:9d:c3:4c:2d:83:13:7b:99:4b:e8:f8:ff:c9:bd:4d:75:
         fc:f7:76:d4:db:2b:fd:e1:58:07:20:75:dc:3b:7b:01:ee:10:
         2c:33:72:e8:3b:78:32:e4:5c:bd:8e:cd:9a:62:de:44:67:a8:
         8c:0c:da:0f:96:6a:18:16:4c:0c:60:2b:46:0d:ee:ee:48:6f:
         69:e8:65:4f:dd:7f:e4:f6:a9:b8:1c:a3:c8:5c:c3:ca:c7:ac:
         df:bd:e4:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W9lkwqIjfXSBToAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU4YWRlYWQtZmM4NS00Mzc3LWFlOGYtNzBlMDBjNDJi
MjIzMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk
ZWI5OTRhZWMtNzhiNS00Njk0LWIxY2MtMjBmNzBjYjgxZmYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirjTpROdwve9t/7qJcRwrnGsb3h9pMqGjRj/
Bh8xnafyMy4wNPFVrVdiirWeehPOje0otIBIInCIePYAZSom2m8mm7wuLoDsa2uZ
uhT3RaKfhzXu4KccQHJ2nPN9KLKHE/bF9Ce9J6bU/ROFXR+rw9Vwc3ySVFkslQY4
5yisKBlUMx+EArfsoIy92tFL0lnW7AFkSqetk2Fpk0ZLjCcOlc3O/rXSAjEVgt7U
wLrR//hYQmqgNh1DdCh9d7os+lOOKVHu/y5tC5rt/VZZbgi+zQAUN0XdESQtpMv1
0nUY9bVrdCtzD9kKH//ER1YuoZ2FJv1PtBTZEarCWLEFhy1roQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPOGlotl8x15qF/K0sBc2tDORFTdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NThh
ZGVhZC1mYzg1LTQzNzctYWU4Zi03MGUwMGM0MmIyMjMvYzI0ZTZhM2EtYzQwYS0z
ZWFjLWJlZjItYTgwMzljNTQ1MjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDU4YWRlYWQtZmM4NS00Mzc3LWFl
OGYtNzBlMDBjNDJiMjIzLzQ1OGFkZWFkLWZjODUtNDM3Ny1hZThmLTcwZTAwYzQy
YjIyMy5jcmwwHwYDVR0jBBgwFoAUgFwvkgT+eRfx4bKa4aKlQkaLRQowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80NThhZGVhZC1mYzg1LTQzNzctYWU4Zi03MGUw
MGM0MmIyMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnfjWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADFQDSffLl8hmOtKn9bgOX1J5Xm0I/VLpbMgyfC7Fah720R7X80vwFLh
7lAO2BZqXPeYaFOI3rJ3hYpGYdwy5RjP28L/a0/+ZLWE1YRk4Q8q6kfKCqFlg2ja
rPMC2tmPG1i6iTKJZrG8z5/3Dq3Y4/G5RurqOJgNNJM0xZQXvGiQ2D2zsBjakZNs
wG92Bu2z+HNIjIZjVn9Wwyrpr/Xe25MTjDOrncNMLYMTe5lL6Pj/yb1Ndfz3dtTb
K/3hWAcgddw7ewHuECwzcug7eDLkXL2OzZpi3kRnqIwM2g+WahgWTAxgK0YN7u5I
b2noZU/df+T2qbgco8hcw8rHrN+95Gs=
-----END CERTIFICATE-----
Generated at Fri Mar 14 09:17:44 2025 by rpki-client