Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d5c88e45-fe27-3d6c-9869-cdaf57271a09.roa
File:                     d5c88e45-fe27-3d6c-9869-cdaf57271a09.roa (raw, json)
Hash identifier:          l6A9zxGPlUZA2hUEBLgnoBd6fnqGRmLQPiASXRlAugI=
Subject key identifier:   82:1D:45:4C:9C:55:AD:C5:10:14:51:38:8C:BE:5C:C2:C1:2E:D7:1A
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584DE9B082EA04E8CE4188FE8F80
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d5c88e45-fe27-3d6c-9869-cdaf57271a09.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        158.115.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:82:ea:04:e8:ce:41:88:fe:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=141a5a89-7d1e-4d1f-b84a-699a35398dc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9a:38:91:f8:ef:86:7a:98:5e:03:b6:96:af:
                    1f:db:f4:1c:9d:34:eb:13:e4:01:19:20:12:fb:c3:
                    2a:aa:03:e0:97:61:50:a9:d1:a0:bc:f2:a7:5c:93:
                    95:e1:56:2d:83:88:b2:d1:c4:67:84:48:8b:22:2a:
                    19:cd:fd:c1:ea:1d:ed:a2:fd:c3:8c:17:3a:e4:01:
                    b2:22:c0:b4:11:94:7e:50:a5:08:d6:89:2b:b6:5f:
                    7c:6c:b8:65:7e:83:57:86:a7:8f:e0:3b:e5:df:64:
                    e3:2d:cc:f8:d9:cb:43:be:95:e2:4c:fe:c2:8c:24:
                    b0:e7:fb:2b:6f:03:06:3d:d5:dc:ec:7a:7b:e8:12:
                    67:40:44:35:42:c3:ea:e3:a1:47:50:a5:42:e4:ec:
                    44:af:6f:12:7b:00:0b:b1:87:d1:57:c0:94:da:37:
                    14:35:63:8d:1a:67:3e:91:4c:ea:08:a1:a2:21:84:
                    7f:ee:01:6d:f0:c7:6f:cf:b5:f6:60:1c:dc:18:ac:
                    c4:17:e8:74:2c:0a:2b:9d:09:a0:af:6c:0e:e7:bb:
                    96:ef:ad:d7:c1:fa:9a:1d:16:38:41:3a:ce:de:e9:
                    e9:36:f3:b1:b6:86:45:be:27:6d:14:14:14:c1:a4:
                    27:3d:20:67:49:5e:a8:d7:7b:7e:cd:02:d3:2f:40:
                    bd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1D:45:4C:9C:55:AD:C5:10:14:51:38:8C:BE:5C:C2:C1:2E:D7:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d5c88e45-fe27-3d6c-9869-cdaf57271a09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:05:54:c8:2f:20:84:4f:d0:09:01:32:59:e2:b5:ba:86:45:
         59:91:a4:ac:c0:71:79:df:e6:cc:ac:dc:60:f6:c8:a6:ef:a9:
         75:a2:3e:a4:a6:57:4c:4d:17:9e:c5:29:b2:4b:d9:7e:93:dd:
         58:30:fe:3a:1f:58:0f:fc:04:f1:fe:b7:55:6e:fe:b7:cb:68:
         74:e7:41:cf:00:da:c6:c4:12:e5:f8:bc:07:e1:76:4f:c7:63:
         53:77:7f:0c:51:51:36:ca:7d:4d:0d:bf:06:92:31:ed:e4:8c:
         03:65:36:e2:69:50:0c:9d:51:e8:0a:f9:51:07:2d:ba:c3:d7:
         03:9f:7b:e8:94:c3:bd:7b:d6:29:af:01:ac:7a:0e:05:6d:ea:
         90:ba:49:5d:f3:26:71:f7:d0:bb:94:d4:3b:9f:16:34:d7:81:
         06:ed:72:e2:1a:aa:a9:da:cc:36:3a:d4:06:05:93:2b:34:66:
         d7:24:31:24:10:63:41:1c:ab:16:27:0b:40:61:2f:1f:5c:01:
         fb:17:c3:2f:49:14:e7:71:28:9f:9c:94:ac:1c:a8:d8:23:79:
         54:6a:14:53:20:1d:4d:54:7d:78:eb:cc:6b:91:30:1b:61:2e:
         45:8e:d3:57:59:4a:ca:81:71:41:24:1c:92:8b:28:cf:73:33:
         c3:c7:61:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3psILqBOjOQYj+j4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz
M2Q3MB4XDTI2MDUyMjAxMDAyNFoXDTI2MDgyMDAxMDAyNFowLzEtMCsGA1UEAxMk
MTQxYTVhODktN2QxZS00ZDFmLWI4NGEtNjk5YTM1Mzk4ZGM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5o4kfjvhnqYXgO2lq8f2/QcnTTrE+QBGSAS
+8MqqgPgl2FQqdGgvPKnXJOV4VYtg4iy0cRnhEiLIioZzf3B6h3tov3DjBc65AGy
IsC0EZR+UKUI1okrtl98bLhlfoNXhqeP4Dvl32TjLcz42ctDvpXiTP7CjCSw5/sr
bwMGPdXc7Hp76BJnQEQ1QsPq46FHUKVC5OxEr28SewALsYfRV8CU2jcUNWONGmc+
kUzqCKGiIYR/7gFt8Mdvz7X2YBzcGKzEF+h0LAornQmgr2wO57uW763XwfqaHRY4
QTrO3unpNvOxtoZFvidtFBQUwaQnPSBnSV6o13t+zQLTL0C9TQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIIdRUycVa3FEBRROIy+XMLBLtcaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl
ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvZDVjODhlNDUtZmUyNy0z
ZDZjLTk4NjktY2RhZjU3MjcxYTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4
NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm
MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2
YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABgFVMgvIIRP0AkBMlnitbqGRVmRpKzAcXnf5sys3GD2yKbvqXWiPqSm
V0xNF57FKbJL2X6T3Vgw/jofWA/8BPH+t1Vu/rfLaHTnQc8A2sbEEuX4vAfhdk/H
Y1N3fwxRUTbKfU0NvwaSMe3kjANlNuJpUAydUegK+VEHLbrD1wOfe+iUw7171imv
Aax6DgVt6pC6SV3zJnH30LuU1DufFjTXgQbtcuIaqqnazDY61AYFkys0ZtckMSQQ
Y0EcqxYnC0BhLx9cAfsXwy9JFOdxKJ+clKwcqNgjeVRqFFMgHU1UfXjrzGuRMBth
LkWO01dZSsqBcUEkHJKLKM9zM8PHYb8=
-----END CERTIFICATE-----
Generated at Fri May 22 17:39:46 2026 by rpki-client