Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c258e36e-fd95-31f2-b381-fab16f55d8da.roa
File:                     c258e36e-fd95-31f2-b381-fab16f55d8da.roa (raw, json)
Hash identifier:          zGC4k2ico5XeWZMtXxFIk+atyx2JUK/QS0wzuPyqIOY=
Subject key identifier:   FA:3E:0A:C6:1A:ED:1C:EB:8C:23:51:46:67:D6:EF:91:B5:B3:A7:9A
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584A119AADC0D5C07CBEA51C1300
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c258e36e-fd95-31f2-b381-fab16f55d8da.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     16509
IP address blocks:        158.115.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:ad:c0:d5:c0:7c:be:a5:1c:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=2c739584-1485-4890-bb31-a25704107e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9b:d2:57:28:d7:17:60:04:e8:84:97:1f:92:
                    11:1f:aa:cd:5a:35:fc:09:59:5e:a0:39:7b:63:12:
                    dc:8a:f2:e7:c8:af:b6:9f:9b:28:2d:c5:bc:c5:9d:
                    63:a4:72:c9:cd:7f:ca:35:58:e0:44:02:f9:ff:0e:
                    98:f3:ee:e7:22:34:ca:66:75:8b:ee:b5:bc:04:b0:
                    c4:75:8c:40:7d:77:7b:50:20:cc:16:cd:d3:71:5f:
                    d8:09:ec:7b:9f:b3:36:3f:1c:f8:74:4d:b7:6b:86:
                    99:b6:3c:10:47:2c:92:e4:2b:d4:0c:58:95:d7:7e:
                    fb:88:d4:b9:38:95:c0:16:82:ee:03:4f:25:88:3c:
                    77:e2:7f:24:2f:7a:b0:cc:f1:ec:a9:0d:f1:ee:40:
                    58:c4:b2:24:65:c4:45:5f:fc:61:83:e8:57:73:03:
                    d9:83:b9:f7:56:ce:40:41:87:56:fe:23:fe:97:3b:
                    89:cc:0a:07:49:a1:1c:3d:ae:78:e8:c0:db:3d:5d:
                    a3:89:0e:62:0d:fc:a9:5b:68:37:50:60:3d:ca:31:
                    68:1f:af:bb:3e:69:9a:08:57:0e:c5:e4:99:4b:3c:
                    66:8d:a3:26:d6:24:8a:57:a5:aa:36:4f:80:3b:a3:
                    3c:10:e7:18:36:ef:b8:aa:67:f7:84:ec:8f:56:34:
                    86:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:3E:0A:C6:1A:ED:1C:EB:8C:23:51:46:67:D6:EF:91:B5:B3:A7:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c258e36e-fd95-31f2-b381-fab16f55d8da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:55:0a:94:f5:9a:bc:fb:ea:dd:b6:b9:cc:50:e6:98:c5:f0:
         f0:0a:a4:c8:0b:0a:21:64:d5:6b:e3:2d:87:63:75:94:4b:68:
         0c:e2:81:b4:cb:e5:34:fa:43:28:12:1f:f3:25:b9:d7:3c:d1:
         1c:fd:3c:17:30:d7:ae:eb:8d:f0:75:5d:1b:20:81:c9:57:ba:
         5c:ee:98:e2:17:12:ce:39:3f:59:6e:da:ba:bf:c6:d9:bb:51:
         da:54:ec:79:e9:16:a4:84:4a:93:e3:ea:cb:e6:a9:9a:99:ee:
         a1:c6:4a:07:5e:d2:6e:b6:92:be:3b:3c:0a:dd:d4:1b:1d:67:
         14:4e:d4:56:e7:99:8d:8e:e7:c5:3e:28:9c:13:9d:2d:59:3b:
         0e:4a:3f:57:95:23:fd:8c:73:09:39:4b:19:1d:d8:dc:b4:37:
         3d:f9:a6:b1:22:9e:a1:b3:23:19:9f:53:87:ea:53:02:0d:d8:
         5c:45:d9:97:37:fa:e0:ee:6d:71:6e:01:b4:d3:9c:76:67:cc:
         83:cb:d9:0e:94:a1:82:d5:8b:46:22:26:e4:97:3a:e4:c1:78:
         46:fd:56:c9:63:4e:35:c0:76:be:4b:e6:d2:c4:2b:36:b6:7e:
         30:22:70:fb:92:a7:6f:f9:ab:8e:e7:fe:f3:ba:9c:70:60:14:
         f2:ac:bb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:21:13 2025 by rpki-client