Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b97501a5-c1f0-3b1d-b523-c4703b659f7b.roa
File:                     b97501a5-c1f0-3b1d-b523-c4703b659f7b.roa (raw, json)
Hash identifier:          5BHVuHXPg5s/Fu+RRqr1Yw5BNSu3tjrwD9Inwh1XwOA=
Subject key identifier:   38:CB:38:90:86:27:8C:AE:A2:8E:37:F1:E1:AE:8C:29:2A:00:91:E9
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584E97B5046989F29FAD03C70180
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b97501a5-c1f0-3b1d-b523-c4703b659f7b.roa
Signing time:             Thu 23 Jul 2026 09:00:11 +0000
ROA not before:           Thu 23 Jul 2026 09:00:11 +0000
ROA not after:            Wed 21 Oct 2026 09:00:11 +0000
asID:                     14618
IP address blocks:        216.157.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:b5:04:69:89:f2:9f:ad:03:c7:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Jul 23 09:00:11 2026 GMT
            Not After : Oct 21 09:00:11 2026 GMT
        Subject: CN=716bb2ad-b545-4324-8d8e-bcffbb9e3f20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:99:10:18:a4:36:67:d3:76:56:a4:3b:ff:6f:
                    9e:cd:4f:08:5b:64:bb:59:f7:56:78:52:9f:39:56:
                    77:83:96:7f:06:21:ff:3a:84:f2:bf:c9:49:bf:0c:
                    f2:a6:46:b9:18:57:ca:53:c8:ed:5e:95:26:26:0d:
                    59:1d:39:e5:f6:e5:62:a7:2a:93:08:31:d9:48:da:
                    92:03:aa:18:f3:72:ff:b9:8a:33:11:9e:b8:a8:65:
                    fa:89:c2:94:ec:4e:0d:4c:dc:7d:dc:95:17:a4:5f:
                    cd:ec:a8:1f:0e:8c:ff:c3:72:ba:24:eb:b3:9e:a0:
                    29:42:0b:c3:a0:20:9e:de:46:ba:a7:a1:6e:60:db:
                    2a:dc:b0:a9:1a:91:f0:68:bf:cf:47:12:91:c5:6e:
                    93:30:42:6d:23:61:72:39:9d:4e:ad:a4:18:45:58:
                    bc:0f:f0:1d:2e:48:c4:ac:7c:94:55:91:3b:8d:b9:
                    44:10:03:64:fe:20:a4:a2:62:8c:b4:8a:5e:c2:0a:
                    f9:da:38:e5:a6:cd:57:db:69:e1:6b:f5:37:bf:30:
                    57:71:8b:39:09:dd:c5:a9:5b:f9:3c:1e:e3:49:a3:
                    da:b6:26:fa:de:20:c2:c7:ba:b2:de:5e:a6:45:9f:
                    5c:b9:54:2d:d9:a0:e0:71:06:e4:c8:42:92:de:85:
                    4c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CB:38:90:86:27:8C:AE:A2:8E:37:F1:E1:AE:8C:29:2A:00:91:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b97501a5-c1f0-3b1d-b523-c4703b659f7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.157.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:18:e7:94:53:d1:3e:9c:b7:a2:67:bb:6c:36:47:f9:7a:0c:
         1c:80:0a:46:b0:f4:70:3e:bf:23:c1:0e:7e:27:38:de:12:b1:
         fd:63:a8:aa:db:88:de:a7:57:04:8c:95:01:07:1e:70:43:17:
         38:33:bc:3f:33:fa:a0:2f:bb:db:29:11:d5:13:b7:3b:10:7c:
         55:09:5d:a5:6a:ad:b7:81:3c:55:58:1b:28:a5:b0:39:5c:93:
         56:49:c7:8f:f9:76:80:ec:2f:64:b1:7c:57:24:05:d3:07:74:
         5d:cb:cf:68:1c:0a:24:4e:32:38:1a:44:84:15:31:bc:55:15:
         96:cb:8d:c9:69:f5:b3:31:75:52:db:44:a2:29:1b:62:81:89:
         6f:2a:61:6c:6e:f1:7f:a8:f4:62:75:18:c6:cf:77:86:7a:6e:
         1b:55:ce:73:63:f5:c6:71:62:86:67:42:7d:d3:1a:62:05:1d:
         c6:6c:44:e9:ea:05:1d:05:8c:da:e4:12:34:5a:94:a6:18:50:
         da:6c:2f:c1:48:3a:1e:1e:8d:ae:da:d8:2d:ab:f9:43:6a:93:
         50:f1:79:09:77:94:f2:87:d8:76:ed:91:ac:1a:2a:51:9e:1c:
         70:c4:e0:ef:d1:e8:73:f7:e3:a0:c7:70:b4:54:66:f2:1a:c0:
         23:64:78:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtQRpifKfrQPHAYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz
M2Q3MB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk
NzE2YmIyYWQtYjU0NS00MzI0LThkOGUtYmNmZmJiOWUzZjIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5kQGKQ2Z9N2VqQ7/2+ezU8IW2S7WfdWeFKf
OVZ3g5Z/BiH/OoTyv8lJvwzypka5GFfKU8jtXpUmJg1ZHTnl9uVipyqTCDHZSNqS
A6oY83L/uYozEZ64qGX6icKU7E4NTNx93JUXpF/N7KgfDoz/w3K6JOuznqApQgvD
oCCe3ka6p6FuYNsq3LCpGpHwaL/PRxKRxW6TMEJtI2FyOZ1OraQYRVi8D/AdLkjE
rHyUVZE7jblEEANk/iCkomKMtIpewgr52jjlps1X22nha/U3vzBXcYs5Cd3FqVv5
PB7jSaPatib63iDCx7qy3l6mRZ9cuVQt2aDgcQbkyEKS3oVMCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDjLOJCGJ4yuoo438eGujCkqAJHpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl
ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvYjk3NTAxYTUtYzFmMC0z
YjFkLWI1MjMtYzQ3MDNiNjU5ZjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4
NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm
MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2
YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J2CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABUY55RT0T6ct6Jnu2w2R/l6DByACkaw9HA+vyPBDn4nON4Ssf1jqKrb
iN6nVwSMlQEHHnBDFzgzvD8z+qAvu9spEdUTtzsQfFUJXaVqrbeBPFVYGyilsDlc
k1ZJx4/5doDsL2SxfFckBdMHdF3Lz2gcCiROMjgaRIQVMbxVFZbLjclp9bMxdVLb
RKIpG2KBiW8qYWxu8X+o9GJ1GMbPd4Z6bhtVznNj9cZxYoZnQn3TGmIFHcZsROnq
BR0FjNrkEjRalKYYUNpsL8FIOh4eja7a2C2r+UNqk1DxeQl3lPKH2HbtkawaKlGe
HHDE4O/R6HP346DHcLRUZvIawCNkeIo=
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:03:21 2026 by rpki-client