Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/cb9936ad-19cd-3e50-a519-c4edc873f8fa.roa
File:                     cb9936ad-19cd-3e50-a519-c4edc873f8fa.roa (raw, json)
Hash identifier:          A6dz94tXf817DPALWkLSPBTaLA8KOZ+SPu6mc7W2dYM=
Subject key identifier:   B3:C3:90:73:D6:A3:48:1A:98:2B:C7:27:2C:1F:57:F0:27:66:D5:98
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584988CF27552784FE39618264E0
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/cb9936ad-19cd-3e50-a519-c4edc873f8fa.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     14618
IP address blocks:        158.115.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:27:55:27:84:fe:39:61:82:64:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=7e7a6218-be24-43f3-b356-1ddaaefdc306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:de:7f:00:c7:64:ca:52:de:a0:72:67:26:10:
                    2e:32:bb:32:69:c6:59:67:9b:49:d8:87:c4:9b:61:
                    dd:78:69:fd:7c:d6:ff:3d:82:70:d8:2f:5a:a6:d3:
                    38:88:69:a9:fb:e4:1d:a8:07:ac:5c:24:23:3e:c8:
                    a2:69:95:f1:8b:0b:eb:e8:63:d7:1f:17:2c:61:2b:
                    44:0a:99:63:3c:de:8c:81:ba:6d:be:ce:f4:67:98:
                    6c:30:da:7d:39:f3:d7:7f:cd:39:da:0a:19:f4:84:
                    e4:da:62:f9:53:62:30:75:2b:af:da:ee:68:cb:a6:
                    54:ae:e9:99:c7:25:6f:b1:86:16:79:1b:8b:5e:df:
                    90:fa:42:e1:5f:31:a6:98:70:26:63:d2:88:32:63:
                    cf:33:d9:68:40:aa:f8:5d:9d:c4:aa:0b:0d:69:6e:
                    fc:d9:ec:b7:22:c8:73:0e:51:99:58:60:be:80:c7:
                    b7:1c:a9:ef:ec:f7:f9:bd:fa:bf:7d:32:73:b2:45:
                    ce:4f:ec:f4:88:f8:03:51:8c:ce:01:8a:55:7e:3d:
                    ba:b8:6c:41:fb:02:2f:23:53:2e:bb:19:74:af:ef:
                    ab:76:1b:31:ae:ae:07:bc:c9:2e:4d:ef:80:1e:ff:
                    2a:37:7e:9a:20:2a:27:76:c3:28:60:f8:bf:10:e7:
                    de:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C3:90:73:D6:A3:48:1A:98:2B:C7:27:2C:1F:57:F0:27:66:D5:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/cb9936ad-19cd-3e50-a519-c4edc873f8fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:7e:ec:9c:c6:e3:bd:b9:50:95:02:22:d5:36:be:f9:a1:0e:
         11:c1:68:8b:df:86:bd:23:94:1c:b2:35:30:10:cd:56:d7:d5:
         3a:db:4e:e8:a5:81:30:1a:64:8c:e6:8e:9a:f3:39:53:1a:ae:
         62:ca:2c:51:f6:ee:15:9d:d3:ba:cd:b1:c7:e6:05:eb:cd:c8:
         26:20:3a:d6:3f:ac:64:3a:a9:cd:e3:a4:8c:1a:e8:5f:44:e1:
         54:26:ff:6f:2b:26:a5:fb:28:47:93:c0:3a:00:95:67:9c:f5:
         54:93:39:4f:00:63:b5:d4:ca:7f:38:6f:1c:60:32:4f:f2:6b:
         2b:27:72:43:c2:80:eb:cc:02:dd:50:ba:2a:c4:a1:86:a8:3a:
         cc:79:47:2a:c2:9b:08:b5:c9:41:1a:79:6b:19:a2:57:42:27:
         da:80:59:fe:d3:81:74:cb:9d:3a:7b:4b:b3:d4:9c:c1:3e:ac:
         15:1f:0f:12:47:53:fc:5f:a3:74:95:ef:a0:ee:60:d3:e5:9a:
         ad:f5:a2:9c:c6:94:74:bb:ba:bb:ef:5e:fb:e0:9c:90:cd:f1:
         85:65:8f:30:94:7b:2a:45:dc:8a:9b:53:35:0e:93:01:a7:61:
         8b:7e:27:c8:dd:3c:f6:03:07:66:98:6f:ec:c5:81:bf:33:f7:
         15:e6:9a:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzydVJ4T+OWGCZOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz
M2Q3MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk
N2U3YTYyMTgtYmUyNC00M2YzLWIzNTYtMWRkYWFlZmRjMzA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh95/AMdkylLeoHJnJhAuMrsyacZZZ5tJ2IfE
m2HdeGn9fNb/PYJw2C9aptM4iGmp++QdqAesXCQjPsiiaZXxiwvr6GPXHxcsYStE
CpljPN6Mgbptvs70Z5hsMNp9OfPXf8052goZ9ITk2mL5U2IwdSuv2u5oy6ZUrumZ
xyVvsYYWeRuLXt+Q+kLhXzGmmHAmY9KIMmPPM9loQKr4XZ3EqgsNaW782ey3Ishz
DlGZWGC+gMe3HKnv7Pf5vfq/fTJzskXOT+z0iPgDUYzOAYpVfj26uGxB+wIvI1Mu
uxl0r++rdhsxrq4HvMkuTe+AHv8qN36aICondsMoYPi/EOfeGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLPDkHPWo0gamCvHJywfV/AnZtWYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl
ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvY2I5OTM2YWQtMTljZC0z
ZTUwLWE1MTktYzRlZGM4NzNmOGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4
NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm
MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2
YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH1+7JzG4725UJUCItU2vvmhDhHBaIvfhr0jlByyNTAQzVbX1TrbTuil
gTAaZIzmjprzOVMarmLKLFH27hWd07rNscfmBevNyCYgOtY/rGQ6qc3jpIwa6F9E
4VQm/28rJqX7KEeTwDoAlWec9VSTOU8AY7XUyn84bxxgMk/yaysnckPCgOvMAt1Q
uirEoYaoOsx5RyrCmwi1yUEaeWsZoldCJ9qAWf7TgXTLnTp7S7PUnME+rBUfDxJH
U/xfo3SV76DuYNPlmq31opzGlHS7urvvXvvgnJDN8YVljzCUeypF3IqbUzUOkwGn
YYt+J8jdPPYDB2aYb+zFgb8z9xXmmgE=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:26:08 2025 by rpki-client