Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/f8d6e978-2d3f-3d04-bfb8-37fc655761cb.roa
File:                     f8d6e978-2d3f-3d04-bfb8-37fc655761cb.roa (raw, json)
Hash identifier:          yXZOL/zHp95E2KWc7qZGE++LOfxbIRPfioGekMlkD14=
Subject key identifier:   E4:F3:4C:46:35:9F:83:77:3C:89:AB:24:97:75:0A:B7:86:75:DE:40
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584D91C005DA22CF715BB4CB0500
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/f8d6e978-2d3f-3d04-bfb8-37fc655761cb.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     16509
IP address blocks:        158.115.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:05:da:22:cf:71:5b:b4:cb:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=70e92074-28b7-41d7-a13f-f88faca11dc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:16:07:c7:86:3e:ca:23:06:ac:ea:31:15:9e:
                    e1:ff:2b:35:0b:ac:5a:76:df:d2:0e:a6:23:42:dc:
                    08:ed:32:a0:aa:6d:a0:7c:8e:06:9c:31:a8:e8:b2:
                    ce:ec:75:5e:05:c1:29:a4:58:98:54:67:95:cb:d7:
                    7c:dd:a3:08:86:e1:dd:bd:43:9a:9a:48:d3:68:55:
                    2b:ed:63:9f:c2:de:1f:20:fd:39:a6:a6:57:f4:c4:
                    ad:76:da:0a:d1:21:f9:4c:53:89:0b:c6:90:df:40:
                    66:8d:fa:44:38:91:ca:5c:a0:d6:2e:a6:ec:8d:13:
                    d6:41:1d:e8:2f:4a:b1:5a:9e:f8:1e:1c:45:56:37:
                    ce:6c:95:f9:50:aa:02:53:65:2d:f6:73:c3:3d:60:
                    e1:44:62:d8:82:f1:94:5d:27:d4:57:f7:98:bc:8c:
                    5a:58:ae:15:59:9e:10:11:f2:53:b0:28:c5:d7:76:
                    2d:24:be:6f:67:c0:c4:26:18:fe:c2:c5:35:7b:fa:
                    d3:f2:6e:4a:62:91:91:b4:cd:5d:ea:d6:fe:fa:ca:
                    bc:36:f7:10:8d:7a:30:b8:8f:15:d2:08:64:99:a3:
                    8f:8c:67:f1:de:6a:35:57:84:17:b3:71:ff:5f:dc:
                    30:24:7a:8e:d6:2d:42:7e:0b:cb:9f:95:7a:25:08:
                    fb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F3:4C:46:35:9F:83:77:3C:89:AB:24:97:75:0A:B7:86:75:DE:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/f8d6e978-2d3f-3d04-bfb8-37fc655761cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:71:17:f5:26:2f:60:ce:ce:bb:fe:f0:ef:83:c9:09:57:65:
         02:4c:a8:cd:2b:e3:a3:e8:6b:32:6a:b7:a4:ce:2f:77:1d:4e:
         a5:f8:1b:86:38:92:2b:99:c4:b0:05:ae:01:6e:96:45:c7:2c:
         ec:cc:0e:0f:c2:b7:7d:4b:e6:64:58:d2:81:40:12:f7:89:e7:
         21:e0:a0:b3:9e:8c:83:ab:26:36:66:56:51:86:f9:2d:f8:09:
         23:a4:0a:36:bf:b3:bf:01:b4:6f:72:70:d3:03:95:b7:d6:1c:
         96:d7:52:6b:4b:0f:1b:32:aa:bc:86:01:02:ac:f2:1e:f0:81:
         74:16:6d:59:e8:f9:b9:36:a1:8e:56:91:ed:f0:07:89:85:ca:
         18:7b:03:46:74:03:3c:22:e1:84:a3:b0:96:82:8a:0c:af:59:
         0e:cb:b8:ae:f8:22:06:64:29:2e:78:2a:17:f5:cf:4c:d3:2a:
         c1:b5:6a:cb:04:df:dc:76:d0:aa:9e:d2:de:7f:68:7f:6f:9e:
         d0:e9:54:1f:9a:ee:fc:b0:ba:6c:27:07:5a:66:d1:73:eb:ed:
         4d:48:3c:ac:d7:ab:fc:d5:21:9d:e5:38:d4:f4:f0:cc:24:96:
         7e:a1:45:cb:72:7a:4b:cc:31:10:b1:c7:cf:82:11:be:54:de:
         a3:e3:61:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwAXaIs9xW7TLBQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz
M2Q3MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk
NzBlOTIwNzQtMjhiNy00MWQ3LWExM2YtZjg4ZmFjYTExZGM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRYHx4Y+yiMGrOoxFZ7h/ys1C6xadt/SDqYj
QtwI7TKgqm2gfI4GnDGo6LLO7HVeBcEppFiYVGeVy9d83aMIhuHdvUOamkjTaFUr
7WOfwt4fIP05pqZX9MStdtoK0SH5TFOJC8aQ30BmjfpEOJHKXKDWLqbsjRPWQR3o
L0qxWp74HhxFVjfObJX5UKoCU2Ut9nPDPWDhRGLYgvGUXSfUV/eYvIxaWK4VWZ4Q
EfJTsCjF13YtJL5vZ8DEJhj+wsU1e/rT8m5KYpGRtM1d6tb++sq8NvcQjXowuI8V
0ghkmaOPjGfx3mo1V4QXs3H/X9wwJHqO1i1CfgvLn5V6JQj7OQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOTzTEY1n4N3PImrJJd1CreGdd5AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl
ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvZjhkNmU5NzgtMmQzZi0z
ZDA0LWJmYjgtMzdmYzY1NTc2MWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4
NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm
MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2
YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJFxF/UmL2DOzrv+8O+DyQlXZQJMqM0r46PoazJqt6TOL3cdTqX4G4Y4
kiuZxLAFrgFulkXHLOzMDg/Ct31L5mRY0oFAEveJ5yHgoLOejIOrJjZmVlGG+S34
CSOkCja/s78BtG9ycNMDlbfWHJbXUmtLDxsyqryGAQKs8h7wgXQWbVno+bk2oY5W
ke3wB4mFyhh7A0Z0Azwi4YSjsJaCigyvWQ7LuK74IgZkKS54Khf1z0zTKsG1assE
39x20Kqe0t5/aH9vntDpVB+a7vywumwnB1pm0XPr7U1IPKzXq/zVIZ3lONT08Mwk
ln6hRctyekvMMRCxx8+CEb5U3qPjYb8=
-----END CERTIFICATE-----
Generated at Wed May 13 13:15:24 2026 by rpki-client