Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/d7f7ed3c-a517-3141-8690-21fd5e8ce6b8.roa
File:                     d7f7ed3c-a517-3141-8690-21fd5e8ce6b8.roa (raw, json)
Hash identifier:          HwljS1cmx9GDnVBmVUjqImVf0q+DTgx5UiYwr5RFq3w=
Subject key identifier:   64:9D:1D:B9:DA:A2:4B:00:33:62:B5:42:19:2D:44:DD:53:2F:01:76
Certificate issuer:       /CN=458adead-fc85-4377-ae8f-70e00c42b223
Certificate serial:       010D0C9F432858455EB6737117FD5843BB395EC0
Authority key identifier: 80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/d7f7ed3c-a517-3141-8690-21fd5e8ce6b8.roa
Signing time:             Fri 29 Mar 2024 15:59:41 +0000
ROA not before:           Fri 29 Mar 2024 15:59:41 +0000
ROA not after:            Thu 27 Jun 2024 15:59:41 +0000
asID:                     14618
IP address blocks:        157.248.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5e:b6:73:71:17:fd:58:43:bb:39:5e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458adead-fc85-4377-ae8f-70e00c42b223
        Validity
            Not Before: Mar 29 15:59:41 2024 GMT
            Not After : Jun 27 15:59:41 2024 GMT
        Subject: CN=90f513a4-7302-4229-b9d4-a4bff9463d42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:aa:39:aa:1d:ca:e0:50:80:6d:61:f6:d0:8f:
                    5a:8a:7e:a9:8c:ee:3f:cb:5a:b6:9c:44:3e:7b:6a:
                    09:00:79:6c:a2:de:b8:69:3d:ff:aa:65:2a:d4:c6:
                    5e:78:31:19:65:84:84:b5:79:54:3b:66:d5:dd:d4:
                    29:d2:25:55:dd:be:cf:cf:52:94:17:b9:39:ef:a1:
                    53:cf:05:91:66:b4:07:43:01:c8:25:14:49:8b:7a:
                    ba:e5:2e:43:58:ea:c6:7a:c9:69:ca:d9:b6:d7:5f:
                    ed:16:6a:61:28:e5:d8:45:3f:de:dc:ed:0b:60:61:
                    d3:71:49:f5:51:77:0c:04:89:82:eb:73:74:fe:86:
                    ee:b2:8f:37:27:f9:78:65:95:77:fc:23:14:a7:62:
                    e1:b0:2b:c3:08:8e:be:06:b4:cd:8e:09:91:fc:f5:
                    c0:10:ce:dc:ba:b2:80:a4:8a:20:f4:d5:9c:9c:e5:
                    c0:67:84:a7:8f:69:16:05:b8:eb:0d:f8:db:b5:54:
                    76:b1:59:7b:d4:8f:4d:c8:14:91:7a:5a:d4:f4:f8:
                    16:8d:31:f2:f3:6c:d3:35:56:82:cb:c6:6c:8f:cb:
                    cf:81:43:c7:a4:45:38:48:99:36:ec:53:67:3f:55:
                    44:10:ba:8f:be:15:00:08:63:5b:4c:98:81:2c:c2:
                    f4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9D:1D:B9:DA:A2:4B:00:33:62:B5:42:19:2D:44:DD:53:2F:01:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/d7f7ed3c-a517-3141-8690-21fd5e8ce6b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl

            X509v3 Authority Key Identifier:
                keyid:80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.248.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:bc:1f:21:9a:ac:bf:ba:63:8a:fc:bf:ec:42:4e:a3:9d:d4:
         29:bd:75:ae:c9:a4:79:f7:35:88:a0:f8:18:c4:24:3a:8b:70:
         25:b7:49:91:4f:68:70:7c:da:e9:24:79:4a:58:51:13:e9:83:
         35:23:21:cc:95:00:75:a2:2a:76:f6:55:46:3c:b7:f5:b0:22:
         8e:34:ea:27:6e:9b:5b:05:61:01:89:7d:c6:f5:34:94:d7:fb:
         84:84:c1:59:53:c3:d7:00:47:50:56:d3:2a:79:fb:2f:8b:3a:
         f0:a5:fe:65:81:5d:4a:d7:81:c3:4f:49:83:b9:5d:e2:ff:c4:
         c0:9a:6f:f1:b0:a3:fe:e7:53:db:d9:54:d5:06:80:4d:a6:69:
         2e:31:d9:b6:b2:31:4a:9d:db:54:56:2b:3b:a3:03:05:bd:01:
         4c:20:5e:0f:cd:99:ab:db:69:36:4d:e7:9c:7d:1f:db:0e:bd:
         74:8e:2f:ed:6d:28:c0:13:f7:50:ae:d7:77:8c:dc:94:8a:46:
         87:d1:70:bf:01:5e:b2:1a:c7:7a:46:a2:cd:19:b1:97:24:00:
         e4:90:47:fe:36:1c:fe:16:ad:05:26:af:a6:4a:bd:0a:be:ae:
         78:c4:ad:55:b7:c8:c8:de:d9:55:f2:32:f4:6c:4a:3d:68:25:
         7a:c1:cd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:26:55 2024 by rpki-client on console-ams.rpki-client.org