Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/23002cf9-daa2-312f-aa9c-f06f11f75bc5.roa
File:                     23002cf9-daa2-312f-aa9c-f06f11f75bc5.roa (raw, json)
Hash identifier:          oGK6z9vxjT0q/SJwVZbFn0A03vDyzqFK7SjG0GaWT0M=
Subject key identifier:   72:05:EF:BF:09:90:41:5D:35:61:B4:93:E3:3F:0E:F8:0D:17:A0:C3
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584A03A54AF9149FAEE88DD7B600
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/23002cf9-daa2-312f-aa9c-f06f11f75bc5.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     395831
IP address blocks:        158.115.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:4a:f9:14:9f:ae:e8:8d:d7:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=47725526-f587-4c71-8395-bf5eaaf66b64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e4:c6:dd:5b:4a:23:13:51:0b:a5:ec:75:01:
                    db:8b:ea:d1:ce:87:36:cc:52:f8:f6:62:b3:fb:41:
                    90:0b:f4:0d:01:5f:8b:a4:20:8c:df:19:5c:65:6b:
                    c0:9f:72:94:97:98:80:57:79:91:08:00:ba:1c:db:
                    fd:48:26:15:4e:97:2a:22:26:13:f4:df:53:b4:60:
                    64:e2:68:c8:e8:24:6f:90:47:8a:41:7c:40:a5:0f:
                    e6:a9:90:6f:17:56:2f:b2:06:ae:38:7b:e3:70:26:
                    8e:2b:1e:90:3e:21:90:a6:5d:f9:6d:08:07:a4:a7:
                    01:4d:9a:0d:87:de:0c:e7:65:22:9c:cc:56:84:0b:
                    f3:36:14:4e:38:16:af:f3:b9:3f:7e:90:ad:3a:af:
                    55:47:51:d4:09:5b:4b:9c:84:c1:0b:29:9b:58:3d:
                    49:87:87:4f:b4:6e:2d:9e:6b:ed:b7:7a:f7:6c:b4:
                    28:be:ec:2e:5b:e5:8d:80:54:88:cf:fe:14:05:da:
                    63:ab:f5:6f:1e:3b:68:0c:63:d2:dc:e8:bf:28:54:
                    52:95:90:5c:db:54:88:f7:f7:6d:d1:95:93:16:df:
                    b4:cf:c0:7e:f5:87:99:84:43:a5:66:64:00:d3:f7:
                    65:cc:34:56:51:4c:c3:51:cb:c3:43:09:dc:2d:b1:
                    a6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:05:EF:BF:09:90:41:5D:35:61:B4:93:E3:3F:0E:F8:0D:17:A0:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/23002cf9-daa2-312f-aa9c-f06f11f75bc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:09:b2:44:ae:49:ff:64:50:77:24:cf:43:e4:a7:87:a4:3a:
         f0:56:e2:6d:70:bc:d0:3e:9f:de:14:6a:2d:97:e8:40:62:f7:
         75:74:c9:59:09:c7:4c:88:8b:83:f4:c3:55:81:f8:49:7e:a4:
         9c:1f:a3:31:aa:62:8b:2a:1b:bf:52:2f:af:2c:ba:97:42:76:
         8e:3f:54:49:15:95:05:89:4e:49:36:9a:97:12:ef:c0:af:b3:
         76:64:93:01:1b:e6:e8:3e:df:48:61:e2:0d:cd:ec:35:32:55:
         27:04:9f:c0:b4:dc:ae:a8:2e:6f:e4:de:20:06:d0:d5:f5:44:
         bf:06:55:c9:da:5a:54:34:a0:99:29:ca:64:07:cf:3b:81:7e:
         98:e8:39:d2:f8:c9:74:71:df:60:f7:50:a4:ff:77:cd:36:ff:
         73:43:4d:1f:9d:0a:55:c0:ac:9c:da:1d:a3:9f:41:f5:67:15:
         0f:6b:8c:60:ba:46:21:d8:bc:d2:02:87:cb:9f:b7:14:4e:da:
         66:7c:87:9d:07:c6:37:1b:25:3e:9d:74:9f:4f:ff:86:31:2c:
         a9:f5:35:14:98:82:a3:4c:f3:f4:84:06:16:74:74:1d:2a:24:
         fd:67:56:4f:37:b0:14:8a:2a:2b:80:63:85:35:87:4a:13:79:
         db:ac:a0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:11:24 2025 by rpki-client