Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b3daaa82-df38-3308-8f74-538c1b1500bb.roa
File:                     b3daaa82-df38-3308-8f74-538c1b1500bb.roa (raw, json)
Hash identifier:          d5nMjvdGnD4Dlu7Eecvm2Pe6b0RjS0y2q1vHMldS4B8=
Subject key identifier:   80:84:24:F6:B5:7C:BF:C7:E5:16:10:10:15:CF:7C:65:CC:7E:B7:C6
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584D91C005EAED4515B29028C880
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b3daaa82-df38-3308-8f74-538c1b1500bb.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     395831
IP address blocks:        158.115.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:05:ea:ed:45:15:b2:90:28:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=c6870319-a720-4a48-b1e9-f41be99cfdf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e1:70:5f:7b:16:f3:e3:a3:e6:64:5a:8e:4c:
                    26:0d:55:0b:a2:31:16:9b:64:8c:de:d1:5f:8f:c5:
                    29:de:3a:5e:6c:54:53:a2:b3:93:b1:f3:05:0e:e9:
                    24:fb:32:1e:ec:0a:04:82:86:e9:de:6a:17:19:cb:
                    8f:84:8a:c9:f9:56:5f:bb:41:d2:05:08:fb:df:e5:
                    2f:e6:39:92:47:aa:55:a8:24:6a:c3:2a:5c:91:15:
                    20:a3:ec:f1:c0:cb:8d:3c:e0:9a:71:d6:d3:18:2d:
                    65:5f:6e:1e:8b:1e:55:31:99:91:f7:df:1f:33:cd:
                    75:f5:eb:c8:67:e4:bc:3e:c7:b7:5e:7c:49:0e:8d:
                    17:76:4f:e0:2d:35:c2:52:4e:00:b3:6c:c7:bc:ac:
                    03:6e:70:01:cf:2b:fd:98:92:67:c1:96:77:de:7f:
                    59:37:90:10:50:de:e0:48:2e:7f:9f:d6:c0:ae:0c:
                    1d:e9:02:96:0f:db:85:6c:9e:8b:1a:61:f9:39:90:
                    bb:4f:62:db:e6:f7:7e:9f:3b:ac:8f:c0:55:83:54:
                    a9:f7:32:b6:ed:0d:0a:23:79:63:31:5a:1c:de:f1:
                    3d:6c:7e:01:62:1f:1b:52:48:ec:f3:7b:e6:b6:fa:
                    00:1d:ac:8a:0a:be:de:48:38:b0:44:50:9e:41:e4:
                    12:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:84:24:F6:B5:7C:BF:C7:E5:16:10:10:15:CF:7C:65:CC:7E:B7:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b3daaa82-df38-3308-8f74-538c1b1500bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:57:4d:9e:91:2a:73:49:bb:de:87:27:7e:0b:51:d9:1e:88:
         95:fc:6c:e8:3a:d3:aa:f9:8f:ef:57:0c:08:93:a7:33:93:36:
         40:66:91:eb:61:09:bd:dd:16:b3:d8:aa:dc:fb:44:48:fa:65:
         26:c8:b7:30:12:36:3b:a3:55:6c:75:4c:ab:21:d3:5e:9f:ad:
         f2:d7:ab:44:8e:c5:1c:2d:a7:e1:41:9c:9b:48:95:7a:35:94:
         1b:b1:3d:c7:2f:e7:ac:9c:b9:4d:93:49:52:ff:d2:3b:a4:d7:
         d8:8e:0e:df:cc:b9:66:41:de:6d:e4:12:dd:a1:6a:5e:f6:b9:
         ef:bf:74:d7:fc:aa:3f:b6:60:ec:24:cb:2c:60:ad:8d:7e:6c:
         57:5c:d9:1e:7e:eb:38:f6:db:a5:aa:b7:5b:3f:d4:e3:06:0f:
         5f:bb:10:76:7a:79:74:ec:2a:db:ed:42:bf:a7:d3:a1:3c:c9:
         86:d3:c0:3f:0f:db:f4:57:1e:c8:e8:59:1e:da:cc:06:71:8c:
         b5:5f:fe:8d:ae:31:fc:57:e5:2e:1a:41:75:aa:0b:2d:c2:40:
         c3:f5:85:88:83:b1:f5:6d:65:4f:1e:5c:2e:db:5a:35:11:05:
         81:03:7b:53:ba:48:62:58:6b:37:37:6f:df:47:62:3c:b6:fb:
         e2:31:95:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:12:44 2026 by rpki-client