Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/b4f82ae8-8dcc-3ba2-bcb3-cf98b1268a66.roa
File:                     b4f82ae8-8dcc-3ba2-bcb3-cf98b1268a66.roa (raw, json)
Hash identifier:          3OX+ZTivUfFsfr3IXiZs6oTWhxNQEEC4DCYQPoFDBps=
Subject key identifier:   3F:D6:8C:56:04:23:22:C9:9F:61:61:07:40:D8:AE:53:10:72:44:D2
Certificate issuer:       /CN=53047e29-2570-4585-9e69-b23797196c26
Certificate serial:       010D0C9F4328584E58E496594024A05173E82EC0
Authority key identifier: C1:B1:C5:FD:AA:78:4E:92:7E:E5:E5:27:7A:CE:EF:A0:FC:B3:11:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/b4f82ae8-8dcc-3ba2-bcb3-cf98b1268a66.roa
Signing time:             Tue 30 Jun 2026 21:00:12 +0000
ROA not before:           Tue 30 Jun 2026 21:00:12 +0000
ROA not after:            Mon 28 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        158.116.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/53047e29-2570-4585-9e69-b23797196c26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/53047e29-2570-4585-9e69-b23797196c26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:58:e4:96:59:40:24:a0:51:73:e8:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53047e29-2570-4585-9e69-b23797196c26
        Validity
            Not Before: Jun 30 21:00:12 2026 GMT
            Not After : Sep 28 21:00:12 2026 GMT
        Subject: CN=10fe0591-b5f8-4f62-a713-051d6b3101f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9a:8a:59:eb:2d:49:23:30:da:63:de:66:73:
                    3a:1b:e7:1f:75:15:17:e7:f1:5b:36:4b:a8:5f:65:
                    8f:2a:65:2b:29:b7:e8:19:5c:8f:6f:ed:aa:3f:31:
                    3f:4c:3c:f2:c0:16:df:0b:f8:2e:5a:cd:84:04:3e:
                    75:23:a9:f5:4d:2e:2d:30:95:53:aa:49:03:54:7b:
                    54:37:1a:00:00:fb:1f:45:16:0d:9f:2f:8b:f2:5e:
                    5b:99:ad:41:97:16:78:f2:8e:de:a5:98:0c:63:76:
                    80:8f:31:4c:07:3f:e5:96:21:7c:a0:12:a3:0f:16:
                    9d:f2:13:f7:8c:0c:fb:79:65:23:92:f5:d3:8e:51:
                    78:8c:d5:01:75:b8:67:04:92:1e:9d:bd:f7:a3:17:
                    78:30:40:a3:b5:00:6d:72:01:a7:04:00:94:04:92:
                    5f:46:3f:69:31:f9:92:19:69:ef:44:0b:db:73:46:
                    ee:88:4f:51:5c:f0:8a:bb:57:f6:90:56:3e:8a:67:
                    e4:ab:f7:89:48:a0:e9:6f:52:fd:04:0e:21:37:97:
                    8a:c7:56:13:ab:e2:cd:c4:b9:90:99:7a:01:c3:3b:
                    28:bb:9b:2e:87:6a:8b:9b:e8:3e:45:02:e5:14:12:
                    b8:4c:86:bf:35:da:c9:f4:44:1e:fa:55:ee:4f:95:
                    d1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D6:8C:56:04:23:22:C9:9F:61:61:07:40:D8:AE:53:10:72:44:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/b4f82ae8-8dcc-3ba2-bcb3-cf98b1268a66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/53047e29-2570-4585-9e69-b23797196c26.crl

            X509v3 Authority Key Identifier:
                keyid:C1:B1:C5:FD:AA:78:4E:92:7E:E5:E5:27:7A:CE:EF:A0:FC:B3:11:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.116.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:6f:a5:d0:9e:d2:03:72:d7:7c:3b:bc:f1:e1:67:d7:7c:cc:
         8f:5c:fd:94:41:24:55:de:55:13:c0:6c:99:d5:78:99:7b:d4:
         2d:5a:4b:c9:61:cb:6f:da:a9:89:73:b1:85:54:37:40:d2:0f:
         56:d6:d9:4b:a8:cb:b9:ae:3c:52:7f:ee:16:54:97:f6:ff:f2:
         17:7c:57:c3:2c:cc:bf:76:90:5d:7d:12:73:8a:ae:bf:f6:99:
         77:7b:08:be:e4:3d:65:89:60:70:dd:42:59:5c:44:c0:a6:9d:
         7c:86:df:a1:56:ae:44:a8:86:02:9f:d3:89:ee:ec:67:ed:2f:
         ba:3c:2a:3b:43:8a:9e:49:c7:c8:de:8f:2e:c9:3f:8f:66:4d:
         64:ff:6c:84:17:fa:0c:f1:ee:45:14:d4:70:9a:d3:52:47:57:
         49:22:5e:07:be:8e:70:74:8f:47:bc:bc:d6:1d:49:71:81:47:
         bf:44:75:e8:a7:43:39:52:53:fb:8e:89:79:29:11:01:76:3e:
         71:3f:00:83:1f:21:7e:94:78:21:2f:d6:36:de:c7:33:8a:76:
         75:4a:1c:80:fb:7d:f9:53:f7:2e:85:8f:5c:ec:ab:15:c5:58:
         b7:64:7d:41:10:45:c7:26:cf:14:15:52:d0:d7:cf:d8:76:88:
         a7:fd:5d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:08:19 2026 by rpki-client