Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/5a27232a-feac-3474-9b25-16a64cc19512.roa
File:                     5a27232a-feac-3474-9b25-16a64cc19512.roa (raw, json)
Hash identifier:          spD9jQe2xf/P7J20QE3oZhiK1GGgIMQwqzKiSiKgMsk=
Subject key identifier:   D3:7F:8C:C0:45:8A:2B:F7:DB:30:4E:23:E7:C1:30:89:39:19:EB:66
Certificate issuer:       /CN=458adead-fc85-4377-ae8f-70e00c42b223
Certificate serial:       010D0C9F43285849BDDA2670B1C033A89AF28B00
Authority key identifier: 80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/5a27232a-feac-3474-9b25-16a64cc19512.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        157.248.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:26:70:b1:c0:33:a8:9a:f2:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458adead-fc85-4377-ae8f-70e00c42b223
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=a2cf486e-39ee-400d-b9bd-5cc7123cbf65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:26:bf:52:ce:e8:a4:b2:88:c0:4d:83:33:70:
                    4b:a9:83:1e:54:69:b9:6d:89:35:c4:9a:31:bd:e5:
                    f6:d9:00:b5:84:58:e1:a2:f6:3e:c8:92:ca:2f:6d:
                    b0:5b:28:f5:d6:49:da:ad:8e:65:28:28:8e:4e:79:
                    70:9c:84:32:af:a0:3e:8f:9d:e4:1b:b2:e1:a0:14:
                    ae:e5:4c:88:0b:ce:56:dd:00:3b:3c:8b:00:fb:fa:
                    95:a7:32:9d:02:43:a3:86:77:25:da:0a:a9:df:37:
                    87:36:ca:5a:2c:bc:d1:52:ad:74:30:1d:bc:2c:7d:
                    45:7d:84:d7:0b:39:80:90:05:30:c5:ed:ae:6a:1c:
                    22:96:3b:e6:33:9d:a6:be:bd:55:a5:68:2c:be:37:
                    62:8b:b7:d8:2e:bb:04:db:a6:e3:3f:a7:7c:21:98:
                    70:b3:2a:e2:d8:b6:0f:ad:8f:7b:42:dd:8f:c9:16:
                    8e:d0:68:e4:ec:50:8c:0c:58:c6:c1:98:6b:cb:94:
                    b4:80:dd:4d:d8:91:1c:9b:ca:bc:7e:9d:75:ae:4d:
                    b3:d4:34:8e:10:89:71:b0:f5:a9:8c:15:cc:23:b7:
                    ec:c6:04:ce:fc:9e:2a:be:6e:58:a8:b8:fd:78:31:
                    09:ef:57:16:0e:f1:1a:27:81:9f:cf:a1:e1:78:5e:
                    10:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:7F:8C:C0:45:8A:2B:F7:DB:30:4E:23:E7:C1:30:89:39:19:EB:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/5a27232a-feac-3474-9b25-16a64cc19512.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl

            X509v3 Authority Key Identifier:
                keyid:80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.248.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:16:52:89:b5:0f:0f:d1:9c:82:90:43:06:5e:59:2e:32:47:
         13:f7:14:bc:06:c1:21:63:21:b0:68:b8:f7:7f:e5:88:dc:ff:
         6e:b7:f2:4f:8b:91:92:25:e4:ee:c7:48:0b:e6:95:09:1b:b2:
         32:a6:17:a9:16:40:b5:ef:dd:ed:74:2c:8d:c4:99:cd:4e:cb:
         2c:5b:9d:ff:62:d5:bc:2e:e1:7e:f0:ba:af:86:26:8e:7b:01:
         79:de:cf:54:e6:5a:13:f7:1d:e4:b6:0b:46:16:d0:a2:7f:25:
         9c:d7:ec:5f:bf:e0:51:f0:73:ec:96:ab:ef:5c:34:ca:2e:56:
         ed:58:51:4f:22:9f:38:c5:0d:84:d5:64:b3:e1:8b:08:e9:cc:
         36:de:35:44:85:b5:87:99:19:a2:74:39:74:68:8a:f8:03:54:
         31:55:6b:f0:e9:0a:62:0a:5e:50:3f:9a:6a:fa:90:ec:94:7d:
         c4:2c:20:0b:56:d9:eb:24:97:2c:6c:a4:19:4c:99:cd:37:c3:
         ee:5a:c9:91:f0:b7:0c:c1:c3:aa:a7:90:69:0c:47:17:6d:2e:
         c5:98:15:47:5a:e5:ba:4c:b4:26:81:7e:22:a5:ff:fd:fc:41:
         2d:22:57:28:74:8d:bc:78:36:9c:da:e7:b0:60:2a:65:a1:1f:
         ce:96:d8:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92iZwscAzqJryiwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU4YWRlYWQtZmM4NS00Mzc3LWFlOGYtNzBlMDBjNDJi
MjIzMB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk
YTJjZjQ4NmUtMzllZS00MDBkLWI5YmQtNWNjNzEyM2NiZjY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiya/Us7opLKIwE2DM3BLqYMeVGm5bYk1xJox
veX22QC1hFjhovY+yJLKL22wWyj11knarY5lKCiOTnlwnIQyr6A+j53kG7LhoBSu
5UyIC85W3QA7PIsA+/qVpzKdAkOjhncl2gqp3zeHNspaLLzRUq10MB28LH1FfYTX
CzmAkAUwxe2uahwiljvmM52mvr1VpWgsvjdii7fYLrsE26bjP6d8IZhwsyri2LYP
rY97Qt2PyRaO0Gjk7FCMDFjGwZhry5S0gN1N2JEcm8q8fp11rk2z1DSOEIlxsPWp
jBXMI7fsxgTO/J4qvm5YqLj9eDEJ71cWDvEaJ4Gfz6HheF4Q4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNN/jMBFiiv32zBOI+fBMIk5GetmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NThh
ZGVhZC1mYzg1LTQzNzctYWU4Zi03MGUwMGM0MmIyMjMvNWEyNzIzMmEtZmVhYy0z
NDc0LTliMjUtMTZhNjRjYzE5NTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDU4YWRlYWQtZmM4NS00Mzc3LWFl
OGYtNzBlMDBjNDJiMjIzLzQ1OGFkZWFkLWZjODUtNDM3Ny1hZThmLTcwZTAwYzQy
YjIyMy5jcmwwHwYDVR0jBBgwFoAUgFwvkgT+eRfx4bKa4aKlQkaLRQowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80NThhZGVhZC1mYzg1LTQzNzctYWU4Zi03MGUw
MGM0MmIyMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnfgVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI4WUom1Dw/RnIKQQwZeWS4yRxP3FLwGwSFjIbBouPd/5Yjc/2638k+L
kZIl5O7HSAvmlQkbsjKmF6kWQLXv3e10LI3Emc1Oyyxbnf9i1bwu4X7wuq+GJo57
AXnez1TmWhP3HeS2C0YW0KJ/JZzX7F+/4FHwc+yWq+9cNMouVu1YUU8inzjFDYTV
ZLPhiwjpzDbeNUSFtYeZGaJ0OXRoivgDVDFVa/DpCmIKXlA/mmr6kOyUfcQsIAtW
2esklyxspBlMmc03w+5ayZHwtwzBw6qnkGkMRxdtLsWYFUda5bpMtCaBfiKl//38
QS0iVyh0jbx4Npza57BgKmWhH86W2KE=
-----END CERTIFICATE-----
Generated at Wed May 14 06:32:07 2025 by rpki-client