Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/880caa1d-47af-334b-8051-595434b22264.roa
File:                     880caa1d-47af-334b-8051-595434b22264.roa (raw, json)
Hash identifier:          grytCS3Buv5iLA3a2ZnC/ZcKRYs76IBbPtVMvRfCQgA=
Subject key identifier:   74:2E:D5:08:DD:9F:E8:BB:62:A5:80:D8:57:6D:34:1A:A4:A0:AB:99
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584E736A1D9D11B6A7DC8F169A40
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/880caa1d-47af-334b-8051-595434b22264.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        158.115.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:1d:9d:11:b6:a7:dc:8f:16:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=f008f8e0-2008-4865-b1aa-b23193ad9dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e8:fe:0e:c7:93:58:ae:8a:27:26:b4:96:3b:
                    de:ae:c5:29:94:13:68:c4:96:14:90:34:f7:b8:b4:
                    3e:3a:a2:48:b8:5b:08:94:46:94:88:96:c2:13:9c:
                    92:c7:48:97:82:bd:8f:9d:7c:0e:fc:20:85:95:43:
                    47:dc:c0:f7:6f:bd:ad:c1:ee:ae:f3:af:77:a5:f5:
                    93:7b:75:6c:24:ca:70:8f:7c:02:91:e9:28:f6:81:
                    c8:09:1b:c2:d2:21:3a:a8:6a:0e:80:de:3c:ff:38:
                    bf:46:96:1d:fe:29:bc:d4:1c:7e:b7:2e:72:dc:1b:
                    ef:78:a7:58:8f:98:42:26:ba:20:96:c5:e8:10:66:
                    92:2c:63:c5:1c:32:bf:be:3f:6a:3b:2e:dc:b7:4c:
                    0f:5b:8a:e1:31:2b:f2:43:5c:ad:44:4c:50:bd:43:
                    ab:fe:01:b9:be:a5:98:13:01:b4:92:b3:77:f0:a2:
                    6c:e1:0b:1d:9d:2a:34:84:c4:35:90:75:34:e4:ce:
                    3a:59:a0:b9:fe:e9:69:b1:8e:a2:d2:58:69:f2:c5:
                    07:3f:3d:30:60:27:29:4f:f6:5e:0e:da:bf:77:84:
                    7c:50:70:7b:1d:82:bf:1f:5d:93:91:89:77:79:11:
                    7b:58:5e:19:c6:38:af:92:af:25:a9:40:8f:cd:c3:
                    26:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:2E:D5:08:DD:9F:E8:BB:62:A5:80:D8:57:6D:34:1A:A4:A0:AB:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/880caa1d-47af-334b-8051-595434b22264.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:4e:78:e1:b6:8c:af:0c:d8:59:37:39:cf:cb:ef:6e:44:a0:
         f9:1a:b4:d1:8c:c8:8d:ca:78:7c:e2:67:6d:a0:f1:ad:64:bc:
         ea:f4:48:c3:b2:89:78:66:0e:b2:23:70:90:df:dd:26:84:1b:
         12:73:3b:01:7b:ae:35:36:86:16:2b:88:3e:59:87:08:0b:30:
         d0:f8:04:e6:b5:5a:b0:29:dc:93:8c:55:72:57:ef:2a:1f:91:
         dc:e9:e6:93:4e:ba:2b:5e:80:1a:db:78:95:6f:80:27:d8:03:
         9b:c5:a7:f2:13:ac:c4:e1:3e:3d:87:76:41:09:10:3f:a0:30:
         f0:e0:88:bb:81:91:42:55:21:4c:7c:d6:0f:fe:ba:ee:e0:4e:
         ab:64:16:68:97:42:b6:4f:45:4d:cf:15:58:94:56:72:47:c1:
         38:21:27:3c:81:f9:b4:55:ed:32:ac:e8:55:80:67:9a:25:bc:
         61:5e:63:20:cd:2a:f4:f7:0b:66:2f:47:68:cd:ec:09:4f:a5:
         5c:be:94:26:03:79:fc:b5:68:2a:53:02:e4:76:4f:37:83:08:
         df:17:84:32:be:02:0d:6e:89:fe:f1:e1:a3:54:df:03:6f:ec:
         eb:82:ea:b0:1b:c5:18:40:d5:a5:c0:b4:f5:9b:e6:54:48:3b:
         a9:ea:82:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:12:17 2026 by rpki-client