Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/58338d87-0d2e-38fc-b96d-5c89f8fc72ac.roa
File:                     58338d87-0d2e-38fc-b96d-5c89f8fc72ac.roa (raw, json)
Hash identifier:          OoKNpqkzgyTztpi+M6B2ovUo6O7I0Zki8HOLjND2iiE=
Subject key identifier:   4F:5F:97:A0:D2:88:86:FA:DE:BA:9F:64:79:FB:3E:AE:F8:72:42:3D
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584988CF276685D35FCBCDB5D5C0
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/58338d87-0d2e-38fc-b96d-5c89f8fc72ac.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     16509
IP address blocks:        158.115.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:27:66:85:d3:5f:cb:cd:b5:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=4b4476bd-7b67-42fc-b2dc-c4dcae80fc78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:68:29:0c:24:aa:3f:55:6c:de:52:f5:f4:b1:
                    e4:26:50:09:07:96:32:6e:4a:36:6e:9d:4c:9c:c6:
                    b2:ae:60:ce:a9:17:d6:d9:69:e4:78:89:0d:59:99:
                    ed:19:e0:6f:09:56:4f:ca:8d:cb:03:a7:c6:73:46:
                    b9:17:14:5e:19:30:2c:d8:ea:b2:63:c8:89:6b:20:
                    ae:1b:07:a0:ba:59:a6:76:c2:cc:a5:3f:38:dc:5c:
                    db:35:bb:6e:70:9c:30:2d:31:93:cb:4b:86:79:f5:
                    91:46:88:90:4f:8e:56:f5:b5:94:1f:3e:9c:92:a5:
                    37:46:77:e7:dd:85:57:50:40:c9:12:ec:a0:f3:53:
                    20:c4:5b:87:ab:9a:d4:51:05:c4:79:9a:b2:06:96:
                    d3:9f:d1:a9:83:39:a9:60:c2:dc:f6:33:ba:1c:6c:
                    15:6d:ce:54:2c:37:8b:87:9b:62:2f:9b:02:92:ce:
                    4a:ef:0e:92:35:68:87:df:30:79:49:de:a5:c9:32:
                    16:4f:84:7f:04:72:d3:5d:51:c1:e2:a9:1f:55:d8:
                    49:4f:9e:ff:59:89:d0:d2:44:7d:58:a2:e6:e6:9e:
                    65:4f:9f:97:35:e2:cb:c0:c1:69:ba:7c:f7:f8:fd:
                    4d:21:27:a3:d5:a6:8e:d1:cf:c4:3d:76:84:4c:4c:
                    9a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5F:97:A0:D2:88:86:FA:DE:BA:9F:64:79:FB:3E:AE:F8:72:42:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/58338d87-0d2e-38fc-b96d-5c89f8fc72ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:69:49:a5:96:bf:12:7d:9d:d2:0d:dc:7b:b6:95:13:a6:c8:
         8d:a5:80:f6:75:c2:70:9a:85:3b:4b:58:e1:32:f3:c8:a8:46:
         97:eb:5b:7c:22:86:4a:17:e4:e6:60:f5:af:ce:40:87:91:83:
         fd:30:35:11:8f:14:8b:e4:bf:3a:f0:08:a5:35:62:35:e7:09:
         d0:90:a0:98:b5:e4:7e:82:47:09:6a:b6:c6:97:70:f9:d6:3f:
         35:e9:36:52:28:a8:67:02:8c:10:c2:94:39:88:7f:ad:36:9d:
         59:ca:22:93:af:0b:34:68:41:a7:05:f9:f9:45:f2:6f:5c:e4:
         1c:70:5d:a5:05:b4:53:a7:20:8d:56:be:a7:f1:dc:83:a6:9a:
         9d:60:e4:6f:6b:60:d8:cd:75:1d:87:12:bb:1d:95:e9:aa:e7:
         0c:18:02:66:22:ff:2e:b7:e7:cc:96:60:e6:9c:97:5e:e8:9e:
         b3:89:35:8a:87:59:6d:a1:d7:9e:07:fb:f4:34:c0:59:30:40:
         8b:62:66:f4:8d:4a:93:a1:9e:06:53:cc:3b:8c:24:e2:68:ab:
         17:63:74:5a:46:6e:7f:4d:a9:69:99:aa:27:79:19:55:74:88:
         f8:8c:06:ff:fb:12:8e:10:4c:1f:05:d3:37:cb:04:2a:c7:69:
         59:27:78:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzydmhdNfy8211cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz
M2Q3MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk
NGI0NDc2YmQtN2I2Ny00MmZjLWIyZGMtYzRkY2FlODBmYzc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmgpDCSqP1Vs3lL19LHkJlAJB5Yybko2bp1M
nMayrmDOqRfW2WnkeIkNWZntGeBvCVZPyo3LA6fGc0a5FxReGTAs2OqyY8iJayCu
GwegulmmdsLMpT843FzbNbtucJwwLTGTy0uGefWRRoiQT45W9bWUHz6ckqU3Rnfn
3YVXUEDJEuyg81MgxFuHq5rUUQXEeZqyBpbTn9GpgzmpYMLc9jO6HGwVbc5ULDeL
h5tiL5sCks5K7w6SNWiH3zB5Sd6lyTIWT4R/BHLTXVHB4qkfVdhJT57/WYnQ0kR9
WKLm5p5lT5+XNeLLwMFpunz3+P1NISej1aaO0c/EPXaETEyauwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE9fl6DSiIb63rqfZHn7Pq74ckI9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl
ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNTgzMzhkODctMGQyZS0z
OGZjLWI5NmQtNWM4OWY4ZmM3MmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4
NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm
MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2
YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHVpSaWWvxJ9ndIN3Hu2lROmyI2lgPZ1wnCahTtLWOEy88ioRpfrW3wi
hkoX5OZg9a/OQIeRg/0wNRGPFIvkvzrwCKU1YjXnCdCQoJi15H6CRwlqtsaXcPnW
PzXpNlIoqGcCjBDClDmIf602nVnKIpOvCzRoQacF+flF8m9c5BxwXaUFtFOnII1W
vqfx3IOmmp1g5G9rYNjNdR2HErsdlemq5wwYAmYi/y6358yWYOacl17onrOJNYqH
WW2h154H+/Q0wFkwQItiZvSNSpOhngZTzDuMJOJoqxdjdFpGbn9NqWmZqid5GVV0
iPiMBv/7Eo4QTB8F0zfLBCrHaVkneIw=
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:07:50 2025 by rpki-client