Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/73161134-fbde-3082-942f-dc98bec7bbfc.roa
File:                     73161134-fbde-3082-942f-dc98bec7bbfc.roa (raw, json)
Hash identifier:          MttLuCENKVLAihFagLjGlOS5iGTfUCPMQpuAPBucu9o=
Subject key identifier:   74:01:1B:D2:DF:2C:B3:20:1F:AE:6C:F5:BC:F8:55:9A:8C:5A:21:A9
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584A9A662E57882D1EC4D3A06980
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/73161134-fbde-3082-942f-dc98bec7bbfc.roa
Signing time:             Tue 22 Jul 2025 13:01:03 +0000
ROA not before:           Tue 22 Jul 2025 13:01:03 +0000
ROA not after:            Mon 20 Oct 2025 13:01:03 +0000
asID:                     395831
IP address blocks:        158.115.158.0/24 maxlen: 24
                          2606:7bc0:1093::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:66:2e:57:88:2d:1e:c4:d3:a0:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Jul 22 13:01:03 2025 GMT
            Not After : Oct 20 13:01:03 2025 GMT
        Subject: CN=09fd45e3-ca46-4aaf-bf21-6d0553258020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b0:ef:4d:4c:da:8a:a9:ab:dd:59:39:b9:9f:
                    3a:8b:78:e9:34:10:fc:d5:2a:3d:9f:94:f1:f4:be:
                    2c:81:51:a7:48:38:e8:c3:85:e8:60:20:9f:d1:d3:
                    b7:10:46:60:d8:99:db:93:a1:a0:ad:c4:47:10:20:
                    ff:33:dc:7c:67:69:63:6c:f5:2b:f1:a1:e0:5a:f6:
                    bb:c2:37:8e:e3:24:76:25:7c:05:64:52:68:76:fb:
                    c7:b9:15:93:5c:ed:72:b2:ec:34:fd:75:89:7c:11:
                    66:fd:3e:c5:d5:d6:44:1c:74:9b:03:a2:b5:e9:e2:
                    6f:41:f4:95:88:97:bc:0a:6a:9f:5e:41:70:32:22:
                    40:17:15:a7:2b:60:88:44:db:1a:5b:59:84:9f:bf:
                    4c:21:12:8f:57:87:c4:63:63:3e:4c:f5:ea:fd:bd:
                    b0:83:44:7e:d7:01:c5:ea:65:11:60:85:65:b6:1d:
                    00:0b:6b:aa:04:12:e0:2b:bb:aa:fb:7e:d8:ca:a4:
                    03:2b:8f:c6:9d:34:3c:13:06:a0:87:c6:8d:d7:ed:
                    87:04:a7:80:12:e0:93:c4:27:bb:c5:7e:ea:d2:c7:
                    6a:f8:4e:b0:de:62:7b:13:10:8a:2c:59:6a:14:3c:
                    81:ee:c6:3e:f4:ad:c4:86:64:3b:f0:89:04:83:46:
                    2f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:01:1B:D2:DF:2C:B3:20:1F:AE:6C:F5:BC:F8:55:9A:8C:5A:21:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/73161134-fbde-3082-942f-dc98bec7bbfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.158.0/24
                IPv6:
                  2606:7bc0:1093::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:2f:1a:e4:37:8f:a4:09:c1:79:d2:d3:dc:49:cf:e7:8b:ee:
         79:3f:9c:14:0c:15:da:c3:a3:99:7b:43:c4:78:f8:f1:c0:ba:
         e0:00:d4:29:7f:ae:87:3a:07:6f:05:86:d2:8e:36:91:b4:73:
         cb:3f:ea:44:06:eb:de:0e:90:67:15:95:5c:82:12:12:b6:94:
         ce:9e:81:18:8b:86:65:39:98:40:34:4b:e7:a9:de:47:9a:79:
         c2:1e:d7:d4:7b:a5:e9:6f:c1:1b:6f:10:f8:f3:71:41:3e:09:
         82:90:ad:49:a8:71:b7:cb:7b:c9:3c:57:e4:6d:af:2a:57:cd:
         1d:af:a1:8a:34:97:e6:47:b3:af:89:7f:c9:c7:c9:18:e1:07:
         20:be:6d:09:9f:15:eb:44:a1:fe:10:82:0b:5e:15:e9:11:d5:
         48:04:6a:12:ca:27:02:2f:5e:ec:04:6d:90:2a:c9:3c:83:c8:
         ed:1c:3a:b6:26:3f:a6:33:2a:8a:e0:96:2c:f9:a0:04:92:a2:
         0f:1b:9b:88:ab:f2:79:3e:a9:80:63:8b:7c:3e:7e:f1:fc:91:
         59:d2:22:c6:e6:c5:8e:3b:8d:3e:9b:67:f4:fe:c4:71:3e:07:
         6e:c0:02:55:68:9b:7a:e7:63:ab:c0:a2:4d:cd:06:a6:ed:5a:
         bd:56:60:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:02:03 2025 by rpki-client