Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/15561564-9f84-33e8-ab00-90018600c2a5.roa
File:                     15561564-9f84-33e8-ab00-90018600c2a5.roa (raw, json)
Hash identifier:          6DyiQ2IZgu6BNB25My26SsftWhIgPfClTnNduijSMxc=
Subject key identifier:   B6:D9:50:0F:87:62:5A:AD:5C:03:CE:33:00:0A:4D:54:70:88:9D:36
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584F706ED63A9CFDBF236F17DA50
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/15561564-9f84-33e8-ab00-90018600c2a5.roa
Signing time:             Fri 09 Oct 2026 00:09:18 +0000
ROA not before:           Fri 09 Oct 2026 00:09:18 +0000
ROA not after:            Thu 07 Jan 2027 01:09:18 +0000
asID:                     395831
IP address blocks:        216.157.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:70:6e:d6:3a:9c:fd:bf:23:6f:17:da:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Oct  9 00:09:18 2026 GMT
            Not After : Jan  7 01:09:18 2027 GMT
        Subject: CN=009adb5d-05e5-4b89-8c8c-df1893eda3c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ec:56:22:af:b9:5b:2e:ff:6d:b9:01:85:24:
                    e1:b8:87:fd:68:bb:bf:d5:d2:d8:8a:c2:9b:33:27:
                    40:70:3b:ff:38:2b:b7:52:aa:6b:53:a2:e9:ff:3d:
                    79:e4:d5:e6:8c:d9:ba:d9:7e:f3:fa:08:9b:f3:60:
                    f6:cd:12:aa:aa:fe:ec:1c:59:52:70:1c:d5:ff:84:
                    c5:01:d3:62:33:06:aa:d7:54:fe:dc:f4:fa:08:0b:
                    a9:7b:71:e8:25:f9:02:66:d2:ee:94:fe:13:81:e2:
                    ec:ce:e6:af:a1:9c:f1:1b:58:ec:b5:7d:d9:bf:30:
                    d2:ac:62:0f:41:2b:26:b1:8d:0a:cc:3c:89:6d:85:
                    4c:4a:f9:a2:f8:e3:b4:3f:29:c9:71:e5:5e:ad:9e:
                    af:d4:f1:c6:4c:c7:1f:4b:a7:34:54:0a:43:f0:9e:
                    c0:f5:b1:e8:0a:5e:6b:4d:0d:5f:2e:58:78:44:61:
                    35:85:c1:12:e8:a4:0a:5a:e7:f2:74:ef:fe:78:4f:
                    9c:7a:9e:be:cd:07:16:91:45:b6:19:fd:7a:22:76:
                    91:37:e4:f0:3c:0d:ba:3e:be:bf:e8:92:4b:be:f3:
                    49:fc:93:e2:d3:f5:6c:e9:3b:58:82:e1:b6:88:8b:
                    4f:be:22:f7:09:71:78:48:d1:81:44:5e:13:f1:3d:
                    39:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D9:50:0F:87:62:5A:AD:5C:03:CE:33:00:0A:4D:54:70:88:9D:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/15561564-9f84-33e8-ab00-90018600c2a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.157.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:c9:b8:3f:6f:fc:ed:69:ee:c4:46:96:42:5c:05:29:6c:6f:
         25:83:00:d6:1c:88:b0:70:b6:2d:3f:c6:17:ba:7d:00:c5:3e:
         cf:81:5c:9c:de:48:c0:1c:83:c4:5c:4e:a5:62:20:a7:ff:59:
         20:cc:29:92:bf:3a:c8:81:45:39:a6:50:e9:f8:7a:5b:7d:a2:
         1f:07:fa:cb:7f:4d:e6:17:30:f8:39:fe:15:62:38:59:a9:9e:
         a6:51:7a:35:54:ab:80:0e:92:dc:fb:8a:fc:60:e0:ab:03:5f:
         24:b5:6c:0c:49:e0:d9:a3:31:c3:86:2d:bf:54:9f:ab:73:86:
         c1:af:6d:93:52:ea:bb:d4:65:e9:6e:b3:04:a7:41:bb:f0:6e:
         6f:d8:13:5d:cf:df:ae:f0:56:9a:50:a0:c7:04:53:98:41:89:
         9f:7d:42:84:44:13:8a:ac:ae:4a:13:6d:4f:fa:5c:cd:01:06:
         3f:84:63:24:50:1a:3b:45:a1:6f:3e:29:e4:8e:3c:b9:e9:70:
         28:fb:70:6e:5e:e5:d9:7d:51:3a:a5:24:85:1e:73:8f:89:90:
         70:c9:50:64:a8:29:0d:34:28:37:76:bf:3f:1d:fe:98:d1:74:
         2d:8c:98:17:32:26:05:d2:03:13:a3:95:44:08:2e:01:5a:af:
         07:9a:75:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:53:33 2026 by rpki-client