Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/565178fb-511a-3ca3-a684-f9494640e395.roa
File:                     565178fb-511a-3ca3-a684-f9494640e395.roa (raw, json)
Hash identifier:          NqHHTAA+Tns2uxtO+dMjdiSXmoUERs8sOf0KjRV7LwE=
Subject key identifier:   10:B2:E1:70:F3:EC:B4:C6:6A:BA:B9:A4:B9:F0:88:A5:72:2B:71:19
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584CB121C3750E4768F6E3B07B80
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/565178fb-511a-3ca3-a684-f9494640e395.roa
Signing time:             Fri 30 Jan 2026 02:00:31 +0000
ROA not before:           Fri 30 Jan 2026 02:00:31 +0000
ROA not after:            Thu 30 Apr 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        158.115.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b1:21:c3:75:0e:47:68:f6:e3:b0:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Jan 30 02:00:31 2026 GMT
            Not After : Apr 30 01:00:31 2026 GMT
        Subject: CN=e5d9281a-5d86-4380-997c-19bb1db1a875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:81:3f:ba:fb:0f:94:64:ca:37:25:c6:d3:13:
                    b9:db:b0:8c:88:3a:2f:fb:16:85:31:8f:9a:ed:c1:
                    9a:b8:8f:ad:71:b1:65:10:8f:21:a6:aa:33:75:32:
                    5d:72:98:33:64:e0:3f:65:bb:de:5d:fd:4a:83:bf:
                    2d:67:89:7d:3d:e8:8b:c4:97:6a:6d:b0:bd:f8:74:
                    fd:9c:49:db:01:77:6b:f5:55:1c:79:bb:5c:9d:95:
                    12:4f:59:32:c1:d0:26:dc:7b:9d:2e:ec:dc:40:7b:
                    c8:49:13:e7:30:1d:54:a8:8c:82:cd:d1:12:77:8c:
                    ae:ad:17:60:cb:da:ce:92:9c:f8:59:d1:65:9f:70:
                    ad:8f:07:3e:ed:28:65:0e:4d:6b:d1:f0:e3:bd:84:
                    c3:60:be:ac:ca:03:83:8b:23:5f:2d:76:3d:76:28:
                    fd:37:36:c1:b5:c8:08:9a:2f:18:f2:72:7d:33:d0:
                    f1:1e:ae:84:51:f8:3b:c0:32:fa:93:30:0e:b0:51:
                    ee:1e:f4:be:ee:ac:3d:a0:ea:e7:46:49:a0:f3:7e:
                    01:56:20:60:20:9b:61:b3:32:1e:6f:b2:4a:4d:20:
                    72:cb:18:24:91:d8:36:a6:8e:be:77:c4:ff:50:0b:
                    42:ec:40:9b:ec:20:bb:6d:49:8d:92:9e:ad:a8:d9:
                    73:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B2:E1:70:F3:EC:B4:C6:6A:BA:B9:A4:B9:F0:88:A5:72:2B:71:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/565178fb-511a-3ca3-a684-f9494640e395.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:fb:3f:45:42:4a:d3:fd:a4:3a:aa:f1:a6:85:d4:9f:3c:21:
         20:85:b1:b6:10:de:87:29:1f:9c:ed:91:42:53:e7:dc:48:79:
         67:ba:59:06:99:fd:03:73:da:0d:36:5a:01:ac:55:eb:6b:e4:
         03:d3:d4:3c:e5:03:40:0c:ea:84:34:9d:35:3f:d3:44:ec:52:
         fa:3b:41:cb:4a:f4:00:06:6b:7b:8e:f5:dc:87:ca:e0:f5:5a:
         66:ae:fd:38:6d:8f:7b:e4:19:58:82:16:dc:65:39:91:49:80:
         33:47:cb:07:9b:d3:32:d8:cd:d4:e0:97:53:0d:41:71:6e:b6:
         c0:68:e4:fa:e9:8e:2f:c8:83:f1:c4:5d:4e:ae:96:e9:76:9d:
         53:91:9f:e1:af:30:10:0b:0c:3a:6b:8d:86:94:40:fd:4e:a7:
         da:d3:08:03:17:10:a7:81:e8:88:d8:f1:da:e7:13:01:e8:55:
         e1:f2:b0:d9:65:5e:77:f5:e4:83:5e:c1:bc:a3:23:54:ed:ee:
         cd:fe:cd:a6:fc:00:e6:a6:0b:7e:cf:65:16:df:ce:af:34:1b:
         e6:09:6f:e5:e3:a1:27:2e:21:4a:4d:23:2e:07:3b:21:52:75:
         7b:98:d3:9c:4a:5f:e4:31:82:5b:53:aa:41:ec:76:c2:ae:87:
         10:07:0f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:16:45 2026 by rpki-client