Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/7ad28868-3583-3dc2-9e44-d9421298441e.roa
File:                     7ad28868-3583-3dc2-9e44-d9421298441e.roa (raw, json)
Hash identifier:          JxgtL9u1NtL2mzi0JRIc+82M88u6Mt3UPmPf/lYROGA=
Subject key identifier:   0A:A3:8C:5E:32:3A:17:1A:6A:8A:E9:AF:34:56:8D:6B:DE:EF:12:AD
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584E736A1D8F7FCF3B7BEFC8A1B0
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/7ad28868-3583-3dc2-9e44-d9421298441e.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     395831
IP address blocks:        158.115.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:1d:8f:7f:cf:3b:7b:ef:c8:a1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=fcad3eb6-3ea7-4d98-abe2-a38ebd68cfd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d7:9f:ad:44:ad:79:a2:79:9e:ad:2d:29:99:
                    e3:54:bb:75:0c:50:68:55:10:72:16:9a:45:26:5c:
                    26:d7:af:d7:00:85:be:47:0b:94:a4:19:7b:0d:e8:
                    21:59:8d:fe:e7:ef:9c:c8:41:29:eb:d4:ca:a6:7d:
                    11:a7:e3:ee:72:b6:9e:01:66:25:10:8c:97:4e:a1:
                    e2:30:52:30:6d:82:07:fc:4e:6f:7d:2e:97:e3:41:
                    f8:56:04:02:64:f3:50:19:8e:b1:71:0d:5d:d4:de:
                    f8:b9:6e:85:dd:e8:7b:e7:88:0e:9f:d0:51:bf:59:
                    4a:3b:37:f2:f4:56:46:f3:41:24:0b:da:60:fb:1a:
                    be:63:bc:3c:20:96:6b:69:84:1d:83:35:b0:b7:1d:
                    fd:96:f1:d4:63:b8:d4:04:79:09:21:fe:65:e6:d0:
                    ff:34:7c:bf:66:b2:ce:dd:b8:ba:4a:d3:54:10:94:
                    88:9e:74:ab:a3:29:d7:68:78:14:f9:3d:1e:de:85:
                    82:ea:0f:ea:84:d2:90:00:05:02:ee:8d:9e:c9:f4:
                    e1:9a:e0:6a:3a:5d:89:8c:77:e5:32:96:cc:70:41:
                    28:37:dc:c4:d1:49:3b:86:55:e7:49:cc:e1:18:4b:
                    20:9b:bc:3a:2f:57:2f:7f:6a:dd:78:09:ed:a8:df:
                    17:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A3:8C:5E:32:3A:17:1A:6A:8A:E9:AF:34:56:8D:6B:DE:EF:12:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/7ad28868-3583-3dc2-9e44-d9421298441e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:d1:c6:af:2b:9c:10:98:36:6d:ef:45:25:37:13:53:10:b3:
         65:41:c2:4d:87:e9:f5:d1:df:df:da:4f:a3:5d:6c:a5:e5:b7:
         17:cb:2b:ff:5a:da:35:2f:9d:41:8f:10:fb:e0:80:7d:94:64:
         24:e0:d3:c7:77:32:cb:fd:d4:99:62:fe:1e:bb:e9:92:3b:3b:
         5c:ab:2e:73:f8:f9:ba:ec:e8:13:26:0f:b4:df:6b:9b:e0:16:
         70:b1:d2:39:69:64:74:9b:3b:46:6c:be:9d:7c:e7:15:54:ec:
         4a:e2:a5:7d:05:7b:99:eb:9d:c7:1d:48:b4:6d:a7:82:d6:95:
         c7:e1:ae:ee:c5:36:a5:74:67:52:cf:8b:5a:45:ff:89:d5:16:
         91:d1:dd:f4:ce:e4:bb:d8:9c:f4:1c:17:80:77:02:13:6b:66:
         43:ef:bb:d7:ba:4e:95:81:ed:8d:a0:fc:06:35:6b:b9:6c:f8:
         3e:df:96:f2:68:8f:f2:cf:8f:32:d9:48:fa:60:2c:7b:a2:8c:
         26:4a:d6:e3:a0:a7:96:d2:31:97:40:3f:75:6e:46:ae:96:90:
         ac:9b:3e:40:95:9c:59:a6:e0:17:1e:75:96:f7:4f:d1:5d:ce:
         13:7d:72:98:1f:21:af:3e:2f:ac:bb:c0:4d:49:be:8d:b5:7c:
         5d:54:d2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:29:26 2026 by rpki-client