Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b97501a5-c1f0-3b1d-b523-c4703b659f7b.roa
File:                     b97501a5-c1f0-3b1d-b523-c4703b659f7b.roa (raw, json)
Hash identifier:          s0lJ9eyzmQ4y67AWtpnX8IMgcvcCl5xHTZ2gb0wDO5Y=
Subject key identifier:   1A:61:A6:81:4D:E7:75:94:99:BD:BB:11:5F:77:29:42:36:60:4F:D6
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584DB770311C43E78978F56C7A20
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b97501a5-c1f0-3b1d-b523-c4703b659f7b.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     14618
IP address blocks:        216.157.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:31:1c:43:e7:89:78:f5:6c:7a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=1e3d3fff-1f1e-4c9e-83dd-74bc0c07e331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a5:20:f3:29:d0:8c:a3:e8:4d:9f:a1:47:74:
                    74:52:9f:ef:99:39:72:cf:fd:99:92:50:a2:27:0c:
                    10:22:2d:b3:c7:5c:c5:93:56:00:ae:1a:e7:b0:30:
                    71:64:b1:b1:fe:79:c2:e8:00:ea:de:df:91:69:89:
                    75:ad:f8:e8:c8:ed:02:95:38:d4:45:5e:fc:a3:78:
                    aa:21:68:61:06:31:b2:da:5a:af:d8:ba:d6:86:34:
                    29:88:98:12:88:da:46:6d:bb:90:84:f1:1e:3e:79:
                    c4:d9:15:3c:1a:8b:04:81:54:b8:0a:5f:e8:67:ec:
                    65:d4:9c:2f:85:82:e4:22:da:ef:60:2d:60:5d:9d:
                    44:6c:61:d0:e0:89:a7:81:89:22:5d:7b:06:3b:71:
                    59:6b:97:7d:66:21:1b:3c:b2:ba:16:98:7c:f7:f1:
                    1b:86:31:8b:19:85:f8:a6:50:8e:13:76:3e:65:ea:
                    6a:9b:f8:24:7a:11:56:83:5d:42:f7:58:b9:bd:50:
                    ee:51:de:9c:40:22:64:63:3f:07:8b:fe:98:7c:dd:
                    8f:5d:1f:7b:1e:f2:d8:2b:22:e6:91:76:e8:d2:01:
                    1a:45:b2:ca:7f:eb:4a:a0:cc:15:af:a9:36:5c:cc:
                    38:9a:e7:fe:79:1d:f5:68:4f:d9:e2:25:c5:2a:d6:
                    58:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:61:A6:81:4D:E7:75:94:99:BD:BB:11:5F:77:29:42:36:60:4F:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b97501a5-c1f0-3b1d-b523-c4703b659f7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.157.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:7b:69:f9:27:f9:bf:c1:a8:03:ed:9b:ef:52:cf:31:fb:bb:
         98:e6:2c:5d:49:bb:0b:ea:d4:95:ad:93:8c:1b:d7:ba:a1:89:
         9e:00:2a:6d:14:77:70:49:5a:89:d8:b8:fa:35:fa:41:2f:2c:
         ee:1d:b6:12:53:56:b1:7c:35:6c:96:b1:25:9b:4a:4c:bb:6d:
         f1:71:92:ef:b2:50:09:f2:db:d7:61:f7:35:b7:92:89:0e:d9:
         a1:93:d9:63:1d:ad:7e:43:2e:2c:2d:c8:c0:c4:c6:a1:4b:19:
         29:5e:c9:92:2f:f6:6d:59:18:2a:f2:95:b0:b8:03:1f:77:f3:
         0e:fb:2c:86:9c:11:e9:76:51:e0:22:e4:20:d8:bb:ad:39:7d:
         60:cb:06:23:5b:12:36:e7:d7:9f:76:61:02:2c:7d:ea:8f:82:
         48:9c:a2:ff:2b:00:76:09:79:22:07:12:da:bf:02:ba:af:d1:
         1e:7d:5f:7b:23:77:b7:64:b3:e4:17:bc:40:94:3d:b7:af:59:
         58:3e:76:7b:82:dc:51:c9:38:41:99:4b:85:67:1e:5e:3f:f5:
         f9:18:9b:4d:84:d8:5e:cd:68:90:d4:c9:1b:7a:52:e9:50:8e:
         de:8c:74:ea:7e:5e:02:1c:ec:e5:ef:82:62:b7:5e:40:3e:0d:
         3b:02:d1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:07:26 2026 by rpki-client