Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/87a11cca-fa31-3087-90f3-2df253cfddfb.roa
File:                     87a11cca-fa31-3087-90f3-2df253cfddfb.roa (raw, json)
Hash identifier:          WYugO77ReVoepAFgevC7HD6I4n7aVgVXrG/sAguQORc=
Subject key identifier:   DE:BA:23:AE:67:F9:69:0C:E9:1C:9D:7C:16:A2:EC:8A:C2:E1:C4:DC
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584B7B21F45AF1AFD18FA3286F80
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/87a11cca-fa31-3087-90f3-2df253cfddfb.roa
Signing time:             Sat 11 Oct 2025 01:00:30 +0000
ROA not before:           Sat 11 Oct 2025 01:00:30 +0000
ROA not after:            Fri 09 Jan 2026 02:00:30 +0000
asID:                     14618
IP address blocks:        158.115.158.0/24 maxlen: 24
                          2606:7bc0:1093::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7b:21:f4:5a:f1:af:d1:8f:a3:28:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Oct 11 01:00:30 2025 GMT
            Not After : Jan  9 02:00:30 2026 GMT
        Subject: CN=6e45ce3c-18f9-464a-85c7-ab16452862f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6f:fd:ce:dc:4f:be:77:85:f3:ef:0c:ce:73:
                    99:4c:ba:11:f2:1a:6d:6e:a0:85:4f:4a:c9:29:9f:
                    ca:f9:db:b8:4b:ce:98:df:6a:a3:83:b0:d1:38:13:
                    a8:fc:95:b3:ce:3b:14:0a:d2:ce:f8:56:7c:06:71:
                    fb:fe:85:81:39:12:c3:bf:b0:cc:9a:94:6f:a7:36:
                    0a:1f:8c:94:4a:4f:8c:fe:35:e4:0d:f5:e4:5e:46:
                    bd:7c:dc:7c:91:62:22:ff:ea:8e:06:2c:cb:31:03:
                    a0:72:c6:92:1b:19:56:a3:99:ae:ef:ab:b7:e4:a2:
                    0a:d5:cf:83:99:a2:f8:2b:50:35:5a:6b:f4:58:f7:
                    18:62:cf:ce:f7:0a:b0:a7:f9:20:b9:88:ea:d4:c1:
                    12:5b:27:cb:2b:12:b9:5f:43:08:d6:c1:5c:4e:a2:
                    bb:be:3e:4a:49:f3:da:3d:56:12:06:91:b2:1d:2f:
                    da:35:bc:57:43:73:15:8a:14:ae:6f:ed:a5:2c:18:
                    b9:40:78:d9:f8:a1:dc:5b:11:4e:6e:f1:2d:b8:ad:
                    75:89:79:2b:2f:56:5f:ad:7e:9e:90:73:f0:5c:41:
                    3b:c4:68:19:41:18:ea:8c:b2:c1:70:19:66:5a:0b:
                    8f:15:89:8b:ef:d9:7c:d3:e4:d8:e7:47:9c:92:8b:
                    e4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BA:23:AE:67:F9:69:0C:E9:1C:9D:7C:16:A2:EC:8A:C2:E1:C4:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/87a11cca-fa31-3087-90f3-2df253cfddfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.158.0/24
                IPv6:
                  2606:7bc0:1093::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:7c:60:0a:b2:9c:48:8f:e2:59:6c:b4:e9:e9:ab:26:d0:d4:
         51:7d:23:46:28:57:5b:40:48:5e:ab:e5:eb:76:eb:75:0a:87:
         06:df:74:c5:08:f1:54:c5:86:7f:08:be:a6:52:29:ce:2f:b3:
         bf:13:67:56:c1:43:8f:b5:1c:86:13:71:7f:1f:e8:bb:07:a3:
         f8:db:88:a1:b2:79:38:2d:1a:3f:1f:e6:e2:84:71:75:45:49:
         e6:32:75:eb:d2:d9:ea:fb:30:27:2e:e4:16:5f:ec:5b:bf:b9:
         b1:94:1c:78:3b:af:ad:47:87:c3:46:fe:e0:d0:1e:d1:70:b4:
         e9:66:9a:0d:bb:a2:8d:23:d6:4b:86:c9:c8:89:ce:72:56:ac:
         5b:74:93:b9:57:2c:f0:c4:de:9d:5f:c4:15:60:d3:7a:57:ec:
         73:93:71:2e:db:c9:06:4d:20:28:7b:f8:9e:67:d6:cf:63:7a:
         27:af:eb:cc:cf:e2:36:d6:83:e0:1c:ca:fd:ee:b0:2e:3c:b8:
         9c:0e:3f:a2:7e:2d:da:8e:6f:84:65:cf:5b:d7:66:c6:66:e0:
         1e:2b:0e:96:63:3c:99:10:48:0f:3e:2b:26:e3:58:85:8d:81:
         56:c3:8d:4e:19:d3:69:66:5b:46:46:af:96:9b:47:40:bd:95:
         96:6b:60:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:33:34 2025 by rpki-client