Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/07793d1d-c3a4-3cdf-a5b8-9a11d0293535.roa
File:                     07793d1d-c3a4-3cdf-a5b8-9a11d0293535.roa (raw, json)
Hash identifier:          pCz52529xB9TeNNhgmikrRzxPfwh3gPeths04cpq6H0=
Subject key identifier:   18:2F:1B:96:CB:AD:25:C4:9F:70:91:37:E9:E7:29:B2:40:F4:85:DF
Certificate issuer:       /CN=458adead-fc85-4377-ae8f-70e00c42b223
Certificate serial:       010D0C9F4328584D2D3F7A3CB362700578BEEC00
Authority key identifier: 80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/07793d1d-c3a4-3cdf-a5b8-9a11d0293535.roa
Signing time:             Sun 15 Mar 2026 13:00:41 +0000
ROA not before:           Sun 15 Mar 2026 13:00:41 +0000
ROA not after:            Sat 13 Jun 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        157.248.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2d:3f:7a:3c:b3:62:70:05:78:be:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458adead-fc85-4377-ae8f-70e00c42b223
        Validity
            Not Before: Mar 15 13:00:41 2026 GMT
            Not After : Jun 13 13:00:41 2026 GMT
        Subject: CN=7a21f565-837d-42be-a87c-351a9795864f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8f:4c:97:0b:e0:1d:2a:1c:dc:a4:1f:29:a7:
                    3d:7a:7f:d0:7a:49:be:28:27:06:09:f3:a1:c8:98:
                    d0:af:df:1d:8f:5e:53:67:15:5a:56:15:8d:01:c7:
                    ba:e2:bd:21:7e:d0:60:3a:38:86:3c:86:88:5b:45:
                    2b:ad:42:ca:a3:3f:2b:83:ae:ce:71:f6:66:7b:ae:
                    84:ba:96:2a:9b:a9:06:ad:9b:cb:38:58:93:cf:c1:
                    6d:f7:be:0d:5b:a3:6d:0c:2d:67:96:9a:90:26:68:
                    56:74:00:0b:df:d9:c5:d1:51:74:07:44:b3:ed:26:
                    25:6c:9d:4b:da:2e:c1:20:ba:77:5c:6b:d8:f9:c7:
                    41:26:a5:9a:8d:f9:31:d4:ff:7f:b6:51:d8:28:c6:
                    ac:27:b8:41:58:b4:21:e1:de:0b:0e:34:cb:91:ad:
                    52:9a:95:40:2b:2f:19:ad:3c:c1:63:3c:b4:72:8d:
                    de:f2:15:c0:d9:07:47:b7:a3:04:18:09:84:b9:fd:
                    4e:09:50:bb:31:27:1f:65:e6:29:fe:8a:c6:3c:e0:
                    a3:7b:28:d6:c7:eb:69:ec:20:a3:e8:42:3f:fe:6e:
                    80:65:c8:f4:0d:1d:63:6a:03:55:2f:8e:b7:31:9e:
                    b8:53:51:1d:e5:31:53:ca:8d:1d:99:22:93:03:9c:
                    18:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2F:1B:96:CB:AD:25:C4:9F:70:91:37:E9:E7:29:B2:40:F4:85:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/07793d1d-c3a4-3cdf-a5b8-9a11d0293535.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl

            X509v3 Authority Key Identifier:
                keyid:80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.248.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:1d:16:60:a1:72:7b:75:d0:34:c9:54:4a:1a:ed:36:c3:d0:
         c7:06:3b:bc:c4:d0:9f:12:3b:ed:49:82:24:11:f5:11:2b:b3:
         05:40:bd:fa:7a:40:db:6a:02:9d:22:71:fa:ed:b7:f4:85:82:
         d1:b0:60:7e:87:65:18:5a:60:3e:9d:aa:80:8d:1d:f8:05:0d:
         6d:69:14:2f:0a:1d:ef:4c:96:d9:34:fa:45:37:09:0e:65:43:
         d8:fd:ed:73:3d:26:3e:11:43:b8:cc:b1:2a:31:83:08:46:bf:
         f6:a8:cb:57:86:89:48:00:12:2f:37:23:a9:bf:e1:e6:2a:94:
         2c:c5:5b:9f:a1:b8:10:67:cb:7a:d4:2b:6c:3e:ec:c0:47:de:
         53:e6:43:55:36:a1:0d:c1:f3:10:4d:22:f5:d5:15:ca:23:8b:
         8c:fc:96:33:6b:4b:5d:84:96:c1:bc:21:9b:61:e9:da:80:e1:
         b1:c9:9a:99:5f:dc:c9:18:f2:48:6f:68:9e:08:a7:bb:09:27:
         b4:bc:63:bd:e3:7f:93:72:b9:c0:3e:35:f0:f1:b9:ca:8f:07:
         6d:d2:3a:dd:b5:0a:96:82:0a:a3:18:0e:27:4b:7e:37:74:90:
         8c:d2:46:e2:a4:15:fc:77:01:1b:08:eb:64:69:c7:54:e7:f7:
         0b:9b:1d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:52:27 2026 by rpki-client