Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5d5a019f-4ad8-3f99-aec0-5d8a3583cf27.roa
File:                     5d5a019f-4ad8-3f99-aec0-5d8a3583cf27.roa (raw, json)
Hash identifier:          JvOVpxjGnmjGn9Th1N06U4sly9oSJheEWrYVt4BE/oI=
Subject key identifier:   A7:EB:F5:38:D0:8B:BF:ED:8B:09:FE:0D:01:5E:5A:EA:22:EA:26:E2
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584E7204C841EBDF40AE1C8AB6A0
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5d5a019f-4ad8-3f99-aec0-5d8a3583cf27.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     14618
IP address blocks:        158.115.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:c8:41:eb:df:40:ae:1c:8a:b6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=12156aa8-691c-4c61-8a1e-56c554e5286c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fa:6b:03:bc:a4:d4:1b:88:8b:54:92:1e:c1:
                    54:e6:af:7a:8e:98:d2:6f:ee:ab:5d:10:a2:b9:6b:
                    76:0e:83:59:82:cf:6e:9c:79:f5:ca:eb:e1:ea:d9:
                    b0:71:57:cf:68:e3:91:af:3a:a0:91:7f:4f:9d:9a:
                    81:b4:53:c5:3b:b5:8e:dc:d1:28:d6:6d:3c:1b:3f:
                    d5:4f:37:76:58:20:63:2a:21:72:32:39:6a:4a:8a:
                    9a:09:40:dd:0c:41:cf:2b:1a:86:70:de:79:a8:7d:
                    77:73:a0:e1:99:a8:b3:5f:79:a6:1e:76:d2:0c:6a:
                    86:28:5a:b8:d8:0e:eb:5e:15:06:21:51:60:30:c8:
                    3a:c8:c5:53:60:c1:f4:c9:e3:8c:bd:73:4a:09:fa:
                    34:f2:6b:14:17:68:a7:8b:82:52:86:fc:a2:dd:b0:
                    f0:1a:a6:c5:b9:dd:8e:9a:5d:46:fe:fd:f7:d7:24:
                    11:9d:0d:50:70:09:25:ca:dd:b6:22:34:96:8f:a5:
                    99:76:c8:e4:2d:a0:50:27:c5:57:57:48:14:f2:9f:
                    7a:71:2a:ec:d6:e5:5c:bb:77:0b:70:ae:4f:47:7a:
                    3d:81:30:be:db:15:22:61:22:86:7e:b8:af:8b:5f:
                    e9:62:f4:b7:f0:94:f6:05:21:ea:22:74:88:f9:f1:
                    c1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:EB:F5:38:D0:8B:BF:ED:8B:09:FE:0D:01:5E:5A:EA:22:EA:26:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5d5a019f-4ad8-3f99-aec0-5d8a3583cf27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:e0:10:01:7d:30:92:ba:b6:06:6c:8b:7f:a8:08:65:dc:eb:
         8d:3e:d8:06:4d:53:0a:99:2e:31:e7:36:24:c8:df:e4:5a:76:
         72:7b:dd:89:d6:38:e6:a2:d4:41:a5:c4:a7:0a:6c:21:3f:55:
         e6:99:58:83:38:9d:e6:6a:83:34:a6:05:ae:39:50:55:16:73:
         b4:6b:16:ce:3b:31:db:b8:a0:f4:fa:f2:66:64:39:0a:bf:ae:
         57:a5:c4:5b:1f:94:a1:c7:f4:79:1e:43:25:a1:83:60:24:48:
         3a:40:19:c6:42:51:ff:eb:2b:db:1c:c5:37:06:0a:c1:6f:1b:
         e6:a0:23:00:8d:0c:b6:e5:87:d8:1b:65:64:5e:61:17:b4:ed:
         d5:4d:69:f5:4e:df:8b:9f:5a:fc:69:da:02:77:39:f6:7a:5b:
         72:79:d0:c3:54:9b:cb:fa:cd:aa:08:a5:f6:a1:6f:2d:bc:04:
         b0:14:47:38:34:5d:b8:67:4d:bd:c3:e8:d6:3e:c4:6e:26:56:
         1f:d7:c3:da:f4:ee:84:82:ab:b3:98:43:7e:d3:cf:1d:b4:56:
         f1:81:b0:4b:3d:1d:b8:f2:75:16:ff:87:da:1f:4f:2c:39:c5:
         32:50:d7:16:c7:be:82:a7:bf:56:e7:6a:c5:2e:6f:49:3d:51:
         21:b7:9e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:01:59 2026 by rpki-client