Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/a6a369ce-f8e2-3690-9de9-31da83e4f39d.roa
File:                     a6a369ce-f8e2-3690-9de9-31da83e4f39d.roa (raw, json)
Hash identifier:          5m9zhQT9W4grS1Vu2+RDS3iVn7smQZHHcuXGlufFTww=
Subject key identifier:   7C:58:B7:46:A6:D1:72:CA:62:A8:53:A9:85:23:F7:32:3C:25:DB:B7
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584EBC7702F09B39CF1259DB6830
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/a6a369ce-f8e2-3690-9de9-31da83e4f39d.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     395831
IP address blocks:        158.115.157.0/24 maxlen: 24
                          2606:7bc0:1092::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:77:02:f0:9b:39:cf:12:59:db:68:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=589c0daa-44d8-4df6-98e1-86f6bc4e0a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bf:12:46:b4:92:2f:ec:9b:6b:52:5b:96:b1:
                    5a:90:c6:72:60:5c:a1:d4:a7:27:48:25:b4:ac:cb:
                    e2:99:fa:e7:9c:be:df:3c:ac:10:51:17:47:0a:c9:
                    b1:db:ff:80:2c:4c:53:b7:db:8e:81:e2:76:8e:3c:
                    ef:2c:cf:c1:9c:3c:67:1d:43:dd:d0:c4:1b:93:f0:
                    66:15:aa:4b:76:44:ea:75:6e:26:47:9c:d6:b8:96:
                    62:84:ad:99:d7:73:15:46:a1:45:9e:ab:c5:cf:4d:
                    90:56:da:87:2a:93:9c:dc:15:66:6a:e4:4e:29:84:
                    86:a7:9e:d0:fe:06:ad:3b:27:ae:38:90:45:57:36:
                    13:73:06:6a:1b:4f:97:07:a7:73:aa:ca:26:b7:14:
                    81:12:d8:1a:38:1d:fd:0d:9b:8f:92:3e:70:33:7e:
                    85:c9:75:e7:de:38:74:6a:83:50:64:62:78:57:a9:
                    ca:cd:85:cb:d7:7b:b9:4e:70:d2:46:4c:d7:30:a2:
                    28:0b:81:43:dc:90:5b:90:68:be:1d:2a:32:c0:17:
                    98:9d:5e:43:a6:81:8a:56:45:00:1b:67:75:93:a4:
                    13:f4:cd:b0:0b:3f:0d:00:5c:a0:5c:36:6a:d0:20:
                    be:94:45:c3:6b:b1:26:5a:23:76:da:45:c1:1f:ad:
                    37:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:58:B7:46:A6:D1:72:CA:62:A8:53:A9:85:23:F7:32:3C:25:DB:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/a6a369ce-f8e2-3690-9de9-31da83e4f39d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.157.0/24
                IPv6:
                  2606:7bc0:1092::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:da:48:d6:a9:6b:4c:51:54:db:ba:73:46:7b:89:99:0f:62:
         d9:1a:68:a2:40:63:9f:66:6b:b5:22:c3:63:87:0e:d7:1f:7c:
         0c:2a:b4:e1:02:b2:69:67:f8:5b:dd:85:3e:8b:97:98:14:cf:
         bf:4a:4a:15:3d:a4:d9:e1:8d:b9:90:f0:35:bb:e3:77:04:71:
         4e:96:cf:21:0d:f1:ac:0f:fa:13:58:b1:66:10:09:57:60:d9:
         b2:96:0d:27:2b:14:fa:9c:3d:f4:d0:a7:54:28:b5:63:b9:fc:
         43:3a:5a:cc:99:c3:fa:35:f1:5f:d8:10:2d:ae:9b:03:68:11:
         99:cb:7c:24:42:9d:80:25:06:33:71:04:3e:96:d6:4e:76:b8:
         d2:b1:ac:85:38:a5:05:31:12:fe:e3:10:02:6c:4d:0e:33:fc:
         8a:02:35:83:1d:47:5a:be:70:d2:50:ee:5e:82:3e:6d:e2:95:
         0e:40:eb:4b:59:c6:db:4b:33:64:80:4a:fb:6e:71:24:59:35:
         1d:d9:ca:1f:a9:fc:f3:db:32:2b:e9:6d:36:42:7e:69:ed:8e:
         92:e7:c7:d8:6f:5b:6a:64:9a:5b:d1:c9:4d:33:28:71:97:bf:
         60:c9:60:23:7a:c1:57:31:fa:7e:64:15:97:d2:9f:33:7e:a9:
         67:14:b5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:39:46 2026 by rpki-client