Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/565178fb-511a-3ca3-a684-f9494640e395.roa
File:                     565178fb-511a-3ca3-a684-f9494640e395.roa (raw, json)
Hash identifier:          tK8i1wKlAGI38Rl4sPmpzAs9hpp0ZguzSUw6PMmkM2o=
Subject key identifier:   14:22:5D:EE:65:A1:85:69:CA:84:2F:4B:C4:F1:5F:78:D8:73:73:AB
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584D91C009D4B3A3E2CC2E44F440
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/565178fb-511a-3ca3-a684-f9494640e395.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     16509
IP address blocks:        158.115.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:09:d4:b3:a3:e2:cc:2e:44:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=d0266378-bd40-490e-97b5-9512fcacc877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fc:11:77:17:ca:53:7e:a1:a1:26:fd:45:dc:
                    d3:e9:9d:67:80:98:e4:67:df:bb:d5:6c:42:a6:01:
                    d6:c3:b8:ba:f3:60:4e:98:db:9a:fc:76:37:cb:21:
                    23:59:bd:8d:88:e1:22:2e:02:e7:01:b3:03:17:a6:
                    a4:0f:75:8d:e4:1f:94:6d:c1:57:f5:10:4d:e6:54:
                    ff:e2:a7:86:09:83:ef:77:4d:86:46:51:6c:69:38:
                    4b:b2:ca:09:d6:60:d5:0f:79:b7:da:05:a3:46:f1:
                    37:e0:26:0d:02:07:cf:9b:80:92:af:de:73:f3:a7:
                    d1:03:61:33:42:d8:f7:f9:fc:79:de:86:d2:90:6a:
                    96:7a:4e:d2:a6:84:26:af:b5:d5:c2:4e:28:89:92:
                    c6:56:c8:87:79:ad:7f:be:11:d4:d9:12:c8:90:2b:
                    a2:ff:ce:be:7a:c7:2d:ff:b4:b1:9b:aa:b0:09:22:
                    f8:cb:e0:21:bf:ad:64:ed:4c:13:3f:74:75:61:b3:
                    89:fc:d9:b5:2f:9a:17:cb:50:c4:5d:ce:49:82:40:
                    79:1d:67:0b:16:ec:0c:a6:80:af:05:fe:a4:96:e7:
                    46:8d:1e:96:db:db:c7:e8:7b:ae:81:b6:6e:98:5f:
                    ef:98:ae:74:be:0a:a7:a3:2b:c3:cc:5a:25:fa:06:
                    c6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:22:5D:EE:65:A1:85:69:CA:84:2F:4B:C4:F1:5F:78:D8:73:73:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/565178fb-511a-3ca3-a684-f9494640e395.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:f9:72:a3:8e:ef:a8:51:0c:8a:87:96:65:c5:77:69:ea:66:
         89:b2:5d:bf:32:4e:50:9d:48:ec:ee:27:28:6b:f7:21:bd:b3:
         60:7f:b9:30:91:de:c9:21:5d:fc:c3:00:5d:d5:c7:9f:b1:7e:
         88:8f:2f:7a:99:e1:18:50:67:4a:ed:d2:98:d7:ed:ae:1a:ea:
         e4:35:41:32:7a:a1:55:31:9c:c9:4c:ac:08:81:e6:d5:28:38:
         75:9b:e6:01:a3:ea:47:59:ba:cd:57:aa:3b:f2:15:b1:d4:da:
         2d:75:2e:9b:28:cf:45:6b:82:df:fb:a4:2a:00:33:99:03:b3:
         32:9c:13:80:ef:44:cf:12:52:87:75:fd:bd:b3:2a:31:78:94:
         1f:12:2c:5e:31:01:4d:ff:7c:89:02:13:b4:a0:d5:85:0d:a9:
         23:49:d5:18:67:09:36:9d:ad:d5:b9:e8:22:eb:82:23:86:a3:
         8a:60:e8:27:a9:4f:b7:84:5c:8e:f5:84:0d:dd:f0:1f:77:f1:
         a7:d3:c5:38:b2:0e:39:4e:fd:fd:97:b6:15:73:31:54:fd:82:
         da:1b:2f:2f:b6:b1:0e:45:1e:53:52:fd:73:ab:5e:62:a8:dd:
         41:42:48:92:e9:76:22:af:89:84:7d:c8:0e:32:41:f8:11:48:
         8a:7a:b1:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwAnUs6PizC5E9EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz
M2Q3MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk
ZDAyNjYzNzgtYmQ0MC00OTBlLTk3YjUtOTUxMmZjYWNjODc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvwRdxfKU36hoSb9RdzT6Z1ngJjkZ9+71WxC
pgHWw7i682BOmNua/HY3yyEjWb2NiOEiLgLnAbMDF6akD3WN5B+UbcFX9RBN5lT/
4qeGCYPvd02GRlFsaThLssoJ1mDVD3m32gWjRvE34CYNAgfPm4CSr95z86fRA2Ez
Qtj3+fx53obSkGqWek7SpoQmr7XVwk4oiZLGVsiHea1/vhHU2RLIkCui/86+esct
/7Sxm6qwCSL4y+Ahv61k7UwTP3R1YbOJ/Nm1L5oXy1DEXc5JgkB5HWcLFuwMpoCv
Bf6kludGjR6W29vH6HuugbZumF/vmK50vgqnoyvDzFol+gbGVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBQiXe5loYVpyoQvS8TxX3jYc3OrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl
ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNTY1MTc4ZmItNTExYS0z
Y2EzLWE2ODQtZjk0OTQ2NDBlMzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4
NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm
MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2
YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJL5cqOO76hRDIqHlmXFd2nqZomyXb8yTlCdSOzuJyhr9yG9s2B/uTCR
3skhXfzDAF3Vx5+xfoiPL3qZ4RhQZ0rt0pjX7a4a6uQ1QTJ6oVUxnMlMrAiB5tUo
OHWb5gGj6kdZus1XqjvyFbHU2i11Lpsoz0Vrgt/7pCoAM5kDszKcE4DvRM8SUod1
/b2zKjF4lB8SLF4xAU3/fIkCE7Sg1YUNqSNJ1RhnCTadrdW56CLrgiOGo4pg6Cep
T7eEXI71hA3d8B938afTxTiyDjlO/f2XthVzMVT9gtobLy+2sQ5FHlNS/XOrXmKo
3UFCSJLpdiKviYR9yA4yQfgRSIp6sec=
-----END CERTIFICATE-----
Generated at Wed May 13 14:45:15 2026 by rpki-client