Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b3d1be67-5383-349f-9c24-699e17fb4c78.roa
File:                     b3d1be67-5383-349f-9c24-699e17fb4c78.roa (raw, json)
Hash identifier:          9aOVEP8jhzK4/YHLI1LriZF4CZ3QQxocURvpuDtTEPE=
Subject key identifier:   42:65:22:A9:E9:B6:FD:8D:BF:DF:4E:0F:04:12:33:72:E7:C5:9C:6E
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584F093CDE4EDE2255C62B2C03C0
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b3d1be67-5383-349f-9c24-699e17fb4c78.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        158.115.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:de:4e:de:22:55:c6:2b:2c:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=93af76f3-d17c-40df-9455-9a92f12d1e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:67:f6:92:1a:ac:e4:67:ac:da:3b:64:8a:a2:
                    38:2a:1e:31:2b:c2:a7:bc:ea:08:da:38:d0:20:b7:
                    78:fe:da:94:cc:15:60:22:2d:ad:2f:15:46:e9:bd:
                    b4:4b:b3:50:f9:b9:1d:2f:5b:58:ee:bf:99:2d:6f:
                    a9:df:85:8d:3e:33:1f:45:d4:a8:1f:2f:4d:56:a5:
                    bc:60:c4:17:fa:de:e1:10:46:29:12:fc:de:bd:46:
                    34:f6:c4:22:ef:23:aa:46:64:e7:50:3d:b3:3e:9c:
                    58:19:a3:dc:9c:c3:95:b8:81:d9:cc:3f:04:a5:61:
                    31:7f:39:d9:bc:0e:70:5b:69:f1:92:c2:8d:6e:b8:
                    93:d2:d3:58:c6:5a:1f:77:f7:12:fe:b8:d0:3d:f8:
                    9e:c8:c8:f6:b9:37:a5:52:c4:54:f8:9d:72:b1:84:
                    eb:29:4e:ad:6a:a6:46:fe:a2:17:c0:84:89:70:bf:
                    d2:88:b2:28:82:66:39:4a:c8:4f:67:93:96:9a:d7:
                    96:12:c8:9b:97:ed:62:e6:e9:8e:1a:9d:1d:d5:3a:
                    81:29:1b:a6:04:77:5b:a2:7a:80:07:d4:46:36:90:
                    74:45:0b:ea:22:19:56:0f:bb:ee:03:ab:dd:e0:a5:
                    8b:a1:fd:14:39:48:58:0c:63:45:d0:0c:38:cb:ea:
                    16:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:65:22:A9:E9:B6:FD:8D:BF:DF:4E:0F:04:12:33:72:E7:C5:9C:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b3d1be67-5383-349f-9c24-699e17fb4c78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:f0:f2:da:49:ec:5c:0d:f8:3f:41:11:81:4a:ca:4e:57:61:
         d2:bb:42:ed:b7:72:7b:f6:52:dd:c2:db:28:15:58:04:af:d8:
         46:e3:e4:1c:78:ca:d1:c3:16:8d:32:15:09:fb:16:9f:dd:37:
         fc:8c:dc:6e:87:c5:c0:8d:51:09:41:d1:fa:a4:41:1b:b4:e2:
         ba:9b:bf:b3:67:95:28:c0:59:e1:db:9e:39:95:cd:3b:ee:6c:
         aa:e8:d0:22:f7:0c:78:c2:2b:0a:79:32:82:47:c0:1f:88:51:
         37:38:30:60:70:f5:30:6d:a4:0c:7d:63:fb:78:27:03:e6:7e:
         25:cf:a2:57:53:16:dc:af:5f:3e:ce:78:e5:e7:f0:1f:75:50:
         ef:64:6d:33:2b:8a:13:46:bb:eb:de:76:f5:45:09:49:5d:5a:
         3c:3c:25:0e:84:3a:e2:c8:0f:24:b5:4c:d2:cf:42:30:4d:e9:
         33:68:f9:38:78:d8:81:b1:be:fd:c1:00:89:44:f1:c8:ea:3e:
         14:f0:0d:05:3e:de:fc:bd:40:6a:4d:4c:2f:d9:ef:b0:99:b6:
         a3:4e:da:a5:a7:db:47:12:88:6d:06:57:30:11:e8:ba:ce:84:
         95:f3:88:f3:fa:62:77:ba:60:fc:3c:55:2b:43:65:1f:67:ba:
         31:47:9d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 07:36:32 2026 by rpki-client