Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/85240ca7-41e9-329b-8a29-307187f566aa.roa
File:                     85240ca7-41e9-329b-8a29-307187f566aa.roa (raw, json)
Hash identifier:          HnnuD9XZxkLshF2xtGW4cF4eexKU82bMf77Mx/uXAsM=
Subject key identifier:   2D:B0:9E:2B:E4:E9:D4:A8:39:69:68:C2:09:2D:5C:E8:4E:82:6D:42
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584F5E62E3028D38B62509FB2610
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/85240ca7-41e9-329b-8a29-307187f566aa.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     16509
IP address blocks:        158.115.158.0/24 maxlen: 24
                          2606:7bc0:1093::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:e3:02:8d:38:b6:25:09:fb:26:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=5d82a2da-57eb-4ce2-b649-be34b7b4237e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f4:9a:14:20:a0:4f:50:28:a0:e7:a6:09:3e:
                    31:5b:62:d0:87:71:ec:6b:b5:70:a0:c9:b6:61:e3:
                    e9:20:d1:46:3e:0f:b5:89:87:9b:5c:da:f5:25:9a:
                    8d:19:8f:d4:6c:b6:22:ac:03:fd:41:3f:fd:2f:50:
                    3b:60:81:a5:44:33:27:7e:01:8c:b4:19:87:5e:28:
                    47:67:e3:be:45:50:d3:bc:82:0b:c2:84:2c:d9:b9:
                    10:d6:60:97:17:2f:9b:89:fd:bc:81:29:b0:62:6e:
                    cc:46:f8:6e:bf:78:de:ca:9d:ce:90:e7:9b:fc:c8:
                    48:73:76:83:4e:35:52:9e:94:e9:6e:d9:7d:03:fc:
                    4e:0f:41:0c:fc:49:60:2f:52:91:b3:bd:9a:0e:40:
                    0f:19:bb:22:86:3c:97:6e:5e:a5:90:e8:fb:fa:f6:
                    a6:46:99:22:c3:4a:cd:92:78:d8:e2:4a:9b:41:83:
                    a2:5b:3d:08:8d:58:24:2b:29:36:60:87:59:19:b7:
                    dd:ee:d0:2b:dc:1b:8e:1b:7d:db:49:7c:ea:0d:2b:
                    b0:3e:f7:44:33:0d:b2:0d:25:3a:9a:88:cb:61:0f:
                    19:65:bc:57:43:5f:70:9e:80:1c:2e:4f:c9:98:8c:
                    c6:65:5c:ee:42:b6:c6:10:8d:f3:c0:c0:d7:04:36:
                    48:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B0:9E:2B:E4:E9:D4:A8:39:69:68:C2:09:2D:5C:E8:4E:82:6D:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/85240ca7-41e9-329b-8a29-307187f566aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.158.0/24
                IPv6:
                  2606:7bc0:1093::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:e9:de:e0:3f:8f:64:b6:eb:0a:53:7d:1a:e5:52:31:25:52:
         1b:1a:ba:6d:10:32:02:fe:b0:9b:d2:96:b7:62:16:9c:a8:9d:
         d6:b4:2a:d7:f0:68:99:24:ae:d2:01:f5:f0:77:4b:9a:a0:43:
         34:2f:a6:e4:30:c8:07:31:b6:69:97:87:db:d1:90:23:d5:0d:
         e3:4b:a3:e1:4f:4f:6e:2d:88:12:10:27:cd:1b:33:78:4d:e8:
         41:67:19:17:65:56:75:85:a0:53:b5:da:df:70:2b:c8:64:a1:
         0d:d7:64:1a:fb:8c:2a:91:04:82:bf:63:77:ad:07:6a:f3:40:
         d5:3a:c8:b1:29:e7:a3:70:f3:05:02:76:a1:e8:40:d2:b1:4a:
         f9:c8:10:f3:0a:55:15:89:94:cf:74:c5:06:61:01:43:70:32:
         d1:f9:58:7f:b7:99:69:57:03:bc:c7:11:49:ff:9f:e0:b3:73:
         6c:5c:d3:39:90:0b:1d:8d:22:1c:c6:d5:f2:f8:f8:73:dd:7a:
         57:9e:ae:ef:06:37:0f:b8:6d:1e:27:bf:19:73:ed:f4:fd:fb:
         31:34:d7:ec:f6:d0:0b:4f:2a:6b:e2:49:b0:ce:93:75:26:ad:
         e3:99:1c:5b:72:42:e4:19:53:ed:a1:57:27:6d:a0:98:64:c6:
         00:32:b8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:11:32 2026 by rpki-client