Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/a317804f-60e4-3002-925a-258b38ed37e9.roa
File:                     a317804f-60e4-3002-925a-258b38ed37e9.roa (raw, json)
Hash identifier:          ZwTSzqoeqDBqr63sdRka2FIozwFq0TBFO2esNFXUPaE=
Subject key identifier:   3B:1F:36:47:A6:8C:56:59:D9:FB:64:FD:2D:3D:40:2C:01:96:E5:91
Certificate issuer:       /CN=458adead-fc85-4377-ae8f-70e00c42b223
Certificate serial:       010D0C9F4328584EAFE6F458CB4B9A801A326800
Authority key identifier: 80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/a317804f-60e4-3002-925a-258b38ed37e9.roa
Signing time:             Sat 01 Aug 2026 01:00:12 +0000
ROA not before:           Sat 01 Aug 2026 01:00:12 +0000
ROA not after:            Fri 30 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        157.248.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:e6:f4:58:cb:4b:9a:80:1a:32:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458adead-fc85-4377-ae8f-70e00c42b223
        Validity
            Not Before: Aug  1 01:00:12 2026 GMT
            Not After : Oct 30 01:00:12 2026 GMT
        Subject: CN=676c29e6-b146-435d-9207-253de00ca644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a4:1e:f0:8b:01:94:50:52:c2:fc:17:a0:e4:
                    0b:bf:d6:55:9a:54:0c:6b:85:7d:f9:9b:b3:56:23:
                    27:91:57:8b:ba:45:6b:58:ad:87:ff:80:9e:6e:d0:
                    b3:cb:1f:53:83:4d:c1:9c:4d:fa:87:94:64:34:2c:
                    47:a8:4a:15:3e:d1:9c:de:72:5a:62:71:cd:12:16:
                    60:e3:f2:93:33:7c:43:07:50:bb:b0:7f:2a:1e:a6:
                    fc:fb:44:7b:87:68:97:7b:db:7b:3c:5d:45:6c:2b:
                    5a:09:cb:2b:fd:65:78:16:0a:b7:bd:f1:46:82:65:
                    2a:c7:0e:23:dd:ac:a8:4c:77:76:77:2e:b9:4e:d3:
                    ed:8e:f5:86:71:3f:c4:91:ec:85:8a:1e:fb:6e:33:
                    a4:dc:4c:fe:93:8c:b6:2d:f8:54:ed:71:d4:6c:a5:
                    33:55:97:0e:23:ea:75:c1:93:1d:c5:b7:d7:b4:f9:
                    fd:ad:6a:c1:4b:42:dc:55:9b:79:f7:f9:e2:09:d1:
                    b4:f4:34:30:a2:af:9b:3e:fb:f0:36:d2:62:5c:c1:
                    17:f8:41:fa:b6:d7:1e:40:01:d4:17:8c:95:37:5a:
                    cc:f0:bf:ae:51:6e:6c:43:00:1e:25:0b:05:99:d1:
                    3d:e7:fb:31:ee:0c:4e:74:a1:fc:8a:2c:84:7c:93:
                    00:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1F:36:47:A6:8C:56:59:D9:FB:64:FD:2D:3D:40:2C:01:96:E5:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/a317804f-60e4-3002-925a-258b38ed37e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl

            X509v3 Authority Key Identifier:
                keyid:80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.248.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:cf:eb:ac:cd:5d:3a:b0:20:32:e7:0b:3b:4c:e7:ca:f1:0f:
         41:6e:a4:be:fb:e8:88:f3:25:f1:e8:d6:fc:1a:46:14:6c:87:
         3d:8e:35:ab:2f:93:5c:ff:fe:5f:bf:6d:a0:88:35:f0:20:c9:
         a7:eb:5e:f3:43:35:93:d4:a5:2f:15:41:57:db:89:f3:91:21:
         36:10:8c:d7:fb:29:69:8f:9f:d3:34:4b:c4:a7:ad:fe:9a:76:
         88:71:18:88:0c:8b:37:ba:d7:06:da:54:bd:20:73:07:a1:d7:
         a6:4d:06:a1:c6:a9:28:38:a1:75:f2:56:0d:d0:8b:a8:7a:7c:
         fe:6f:cb:73:73:9a:be:8d:45:90:2c:01:75:3d:3f:b3:10:bf:
         e0:98:a7:d8:51:87:96:41:68:9e:46:0e:ef:0d:a0:d6:ad:91:
         bf:2f:11:80:cb:a7:1a:8a:fa:0a:88:35:84:a6:24:fa:66:c6:
         ff:2f:5b:5f:fb:1c:89:e7:ad:80:bd:46:db:d9:81:5d:aa:ec:
         5f:23:42:96:af:03:be:67:f0:6d:1a:91:67:64:9d:2b:9d:4b:
         85:64:f8:92:dd:42:e0:af:35:81:25:67:98:7a:29:39:14:5a:
         1d:fa:22:eb:00:61:bf:af:b2:52:7c:b8:86:32:62:e8:b8:37:
         c9:75:db:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5vRYy0uagBoyaAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU4YWRlYWQtZmM4NS00Mzc3LWFlOGYtNzBlMDBjNDJi
MjIzMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk
Njc2YzI5ZTYtYjE0Ni00MzVkLTkyMDctMjUzZGUwMGNhNjQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKQe8IsBlFBSwvwXoOQLv9ZVmlQMa4V9+Zuz
ViMnkVeLukVrWK2H/4CebtCzyx9Tg03BnE36h5RkNCxHqEoVPtGc3nJaYnHNEhZg
4/KTM3xDB1C7sH8qHqb8+0R7h2iXe9t7PF1FbCtaCcsr/WV4Fgq3vfFGgmUqxw4j
3ayoTHd2dy65TtPtjvWGcT/EkeyFih77bjOk3Ez+k4y2LfhU7XHUbKUzVZcOI+p1
wZMdxbfXtPn9rWrBS0LcVZt59/niCdG09DQwoq+bPvvwNtJiXMEX+EH6ttceQAHU
F4yVN1rM8L+uUW5sQwAeJQsFmdE95/sx7gxOdKH8iiyEfJMAQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDsfNkemjFZZ2ftk/S09QCwBluWRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NThh
ZGVhZC1mYzg1LTQzNzctYWU4Zi03MGUwMGM0MmIyMjMvYTMxNzgwNGYtNjBlNC0z
MDAyLTkyNWEtMjU4YjM4ZWQzN2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDU4YWRlYWQtZmM4NS00Mzc3LWFl
OGYtNzBlMDBjNDJiMjIzLzQ1OGFkZWFkLWZjODUtNDM3Ny1hZThmLTcwZTAwYzQy
YjIyMy5jcmwwHwYDVR0jBBgwFoAUgFwvkgT+eRfx4bKa4aKlQkaLRQowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80NThhZGVhZC1mYzg1LTQzNzctYWU4Zi03MGUw
MGM0MmIyMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnfjYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJfP66zNXTqwIDLnCztM58rxD0FupL776IjzJfHo1vwaRhRshz2ONasv
k1z//l+/baCINfAgyafrXvNDNZPUpS8VQVfbifORITYQjNf7KWmPn9M0S8Snrf6a
dohxGIgMize61wbaVL0gcweh16ZNBqHGqSg4oXXyVg3Qi6h6fP5vy3Nzmr6NRZAs
AXU9P7MQv+CYp9hRh5ZBaJ5GDu8NoNatkb8vEYDLpxqK+gqINYSmJPpmxv8vW1/7
HInnrYC9RtvZgV2q7F8jQpavA75n8G0akWdknSudS4Vk+JLdQuCvNYElZ5h6KTkU
Wh36IusAYb+vslJ8uIYyYui4N8l121w=
-----END CERTIFICATE-----
Generated at Thu Aug 20 21:58:33 2026 by rpki-client