Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d5c88e45-fe27-3d6c-9869-cdaf57271a09.roa
File:                     d5c88e45-fe27-3d6c-9869-cdaf57271a09.roa (raw, json)
Hash identifier:          uroujfz/MRacJU7ngJWQ02+YqTt3xSrLu8dOATLBaug=
Subject key identifier:   70:4D:6D:FE:94:CE:AF:9E:32:78:5F:EE:47:69:A8:E2:EE:4B:8B:3A
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584D0912658742027274F9EDBB00
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d5c88e45-fe27-3d6c-9869-cdaf57271a09.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        158.115.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:65:87:42:02:72:74:f9:ed:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=e9e5dd93-6f9b-4829-bbfd-aff7418049b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b6:53:b6:45:c1:d2:0e:75:a8:91:04:fb:57:
                    5a:7c:90:f0:e5:7f:1c:77:d9:26:d8:bc:f1:73:cc:
                    bb:64:15:d8:f8:13:02:22:29:7c:c7:c1:38:fa:32:
                    f6:4e:93:c4:16:0c:3b:43:d0:65:0e:c5:2f:53:d3:
                    79:e3:ec:f9:42:5d:f8:a2:42:ec:fe:14:87:e9:14:
                    57:9d:01:16:1c:29:bf:2c:0d:bd:10:f1:a0:ed:2e:
                    0c:47:6f:46:f3:be:90:4e:58:ed:93:31:d5:77:38:
                    b9:0d:7f:9f:64:db:37:23:ca:54:13:ec:20:30:7d:
                    3d:78:7d:7d:7f:49:5e:93:85:8b:1a:ba:7d:b0:bf:
                    d2:9b:e9:ed:d0:2f:39:c2:56:c0:3f:f8:f0:b8:50:
                    5b:62:23:fc:fb:40:a4:91:ce:a6:ee:70:01:a4:6d:
                    08:13:04:de:35:63:9e:a8:a0:39:c9:d7:33:f1:51:
                    ed:a9:ee:b8:3d:09:f7:5a:c9:2d:af:cd:fa:53:50:
                    e3:a3:89:7c:f5:43:f2:a1:4b:75:ae:3b:82:d2:1b:
                    9e:83:e6:5d:3f:4a:44:7e:81:da:b3:4d:a4:ab:86:
                    2e:4c:01:1f:b6:4b:d9:2a:f9:49:e6:6d:20:f5:ef:
                    2f:b5:9d:72:62:c2:47:4c:22:89:d6:72:54:cf:10:
                    45:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:4D:6D:FE:94:CE:AF:9E:32:78:5F:EE:47:69:A8:E2:EE:4B:8B:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d5c88e45-fe27-3d6c-9869-cdaf57271a09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:ab:f2:27:2d:1f:2d:23:a2:67:52:bd:3f:a5:52:67:6d:8e:
         dc:b2:57:70:21:a6:08:52:c7:27:92:f9:54:5a:6f:6b:41:ff:
         00:ef:14:1d:9f:15:62:dd:6b:b2:a7:7e:e6:4f:dc:a9:98:41:
         2b:08:53:3d:1e:3d:a1:92:23:ab:b2:66:ab:e7:17:d2:93:3d:
         59:59:d7:be:f0:c6:10:52:33:29:17:d2:04:e0:bc:1c:f8:a1:
         98:44:7b:c5:d5:64:ea:36:58:cd:e6:c6:fc:20:d8:74:30:20:
         61:96:73:80:ed:7e:f2:c6:59:7a:e6:98:43:f9:da:0b:73:c3:
         92:fe:c4:10:4b:c4:ae:91:64:60:ef:6e:d4:45:c7:06:e9:ea:
         b4:0a:5d:a3:62:d9:16:f4:3d:da:b7:bd:b6:9a:05:10:38:e8:
         29:13:75:7b:5d:d2:4e:65:06:00:6e:d3:87:44:1a:05:25:b3:
         75:93:48:b7:b3:f1:da:6b:f0:f8:ff:b6:61:cc:48:55:64:05:
         bc:db:8d:7a:76:bf:3a:8b:d9:3c:b6:03:4f:20:e4:ac:59:7c:
         58:87:54:20:59:e0:a7:50:35:cb:f8:11:2b:47:0c:e5:b9:cf:
         20:ea:4d:8b:01:1b:c2:fd:5b:05:dd:8b:b8:63:67:24:1e:b3:
         4d:1a:32:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:56:44 2026 by rpki-client