Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/73161134-fbde-3082-942f-dc98bec7bbfc.roa
File:                     73161134-fbde-3082-942f-dc98bec7bbfc.roa (raw, json)
Hash identifier:          NSdpGiOq1maoaMZd19SPArVucRXc5FbuNG5+JDurpcI=
Subject key identifier:   18:F8:B9:22:4E:FF:D0:3D:A0:CD:EA:83:2D:F8:43:3B:28:29:52:2E
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F43285849BB0F6F74F756E3E181738D80
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/73161134-fbde-3082-942f-dc98bec7bbfc.roa
Signing time:             Sat 03 May 2025 13:01:01 +0000
ROA not before:           Sat 03 May 2025 13:01:01 +0000
ROA not after:            Fri 01 Aug 2025 13:01:01 +0000
asID:                     395831
IP address blocks:        158.115.158.0/24 maxlen: 24
                          2606:7bc0:1093::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bb:0f:6f:74:f7:56:e3:e1:81:73:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: May  3 13:01:01 2025 GMT
            Not After : Aug  1 13:01:01 2025 GMT
        Subject: CN=d989fcbb-2922-4c3b-a0fe-e9fb399ea6ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:48:d7:56:f4:bb:dc:d7:a8:eb:9c:c0:46:53:
                    f1:44:86:b2:08:d9:ba:96:c3:71:7b:d8:f3:ae:c7:
                    59:05:41:fd:25:11:43:05:c4:fb:03:13:f5:a4:f0:
                    05:4f:d5:70:e2:34:e0:1d:6c:0f:26:99:42:bf:06:
                    21:9f:d6:48:8e:6a:e0:9b:25:3d:39:76:47:08:b0:
                    4a:cb:32:7b:55:29:c6:45:59:35:33:ff:15:7d:99:
                    38:16:4a:57:fe:d2:74:8f:8e:13:d4:a2:04:5f:4a:
                    d3:f8:35:12:0d:78:ff:9c:ea:03:a5:2f:0a:34:76:
                    49:98:c4:39:83:1b:d0:8b:1e:e4:bc:f6:0b:c2:bf:
                    b9:bc:2d:a2:67:22:15:c8:bc:78:3f:99:67:77:66:
                    18:ca:b6:53:9c:a9:9a:76:72:d0:de:f9:be:62:ac:
                    34:ae:ff:bd:6b:d1:4f:16:1f:e0:20:49:ef:76:5a:
                    79:0b:d2:1b:67:f7:16:72:81:6d:9a:0c:a9:19:14:
                    d7:9b:c2:ab:f8:4d:ef:0e:63:1b:a7:64:b5:6e:e7:
                    72:c7:50:75:db:3d:1d:ac:61:a5:12:b7:de:4b:b0:
                    cb:08:84:0d:50:17:7e:fb:fc:ce:a5:76:fb:a9:15:
                    fa:0b:31:f2:52:39:6b:5d:a7:da:76:96:a0:e8:c2:
                    8d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F8:B9:22:4E:FF:D0:3D:A0:CD:EA:83:2D:F8:43:3B:28:29:52:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/73161134-fbde-3082-942f-dc98bec7bbfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.158.0/24
                IPv6:
                  2606:7bc0:1093::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:83:0c:65:b7:90:3a:71:ca:3f:76:0a:37:46:bd:63:0b:98:
         55:e3:46:7f:be:f3:90:19:f7:9f:18:a7:6f:ea:cb:cd:15:97:
         a6:58:9b:31:d7:77:99:9c:99:ad:17:41:fd:3b:b4:06:0d:63:
         49:50:8a:3c:a1:fb:44:76:58:6c:6d:53:93:c4:76:49:2e:fb:
         32:26:34:11:c2:1b:51:1c:fa:7d:b4:c5:f9:b4:aa:a0:e3:88:
         d5:2a:78:d5:b2:42:c8:74:e9:ca:b7:6f:00:3f:db:8b:36:a7:
         58:eb:07:39:28:e3:ae:2a:0c:1e:65:3d:06:1c:4c:89:81:6a:
         27:e5:29:80:ac:f4:55:af:83:9f:f2:2c:e3:68:c7:f8:46:19:
         a4:02:db:cb:44:0d:d7:36:7a:bd:1f:24:e5:3c:4a:15:ad:8d:
         5e:b1:23:78:3b:1e:b9:af:ae:8f:8a:3a:1a:a6:72:4b:2b:14:
         05:2a:0d:70:cb:60:c9:df:16:f9:ab:3f:8b:b3:ce:e3:40:27:
         0e:b6:b4:fa:1b:eb:50:8d:a9:ca:17:da:96:cd:de:f5:ed:70:
         7c:f3:4d:73:97:3d:5d:de:b0:07:c1:88:39:95:87:34:ae:e1:
         9c:e8:ad:ac:16:b9:a6:57:30:49:11:de:65:7a:8d:18:3f:e2:
         4b:31:99:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:09:13 2025 by rpki-client