Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/73161134-fbde-3082-942f-dc98bec7bbfc.roa
File:                     73161134-fbde-3082-942f-dc98bec7bbfc.roa (raw, json)
Hash identifier:          wsUx9pQWwNThvf8syCvxs6tLDKfFSWBrabT9oCCW6h8=
Subject key identifier:   B4:12:D2:7F:43:0B:E7:58:40:0F:72:90:6D:65:D6:37:70:4E:B2:3D
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584E1A143A5F9C263B837F660100
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/73161134-fbde-3082-942f-dc98bec7bbfc.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     395831
IP address blocks:        158.115.158.0/24 maxlen: 24
                          2606:7bc0:1093::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:3a:5f:9c:26:3b:83:7f:66:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=434908b3-253d-4eaa-878d-d8eadb137895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:72:77:7a:2b:ec:c4:a1:15:64:b2:25:7f:14:
                    c1:45:ea:36:c6:f6:8c:4e:34:02:7a:d3:e3:59:8a:
                    3a:84:63:b2:d5:b4:79:1b:69:2a:7f:7d:5f:36:b6:
                    1b:2c:5b:31:78:33:04:90:ce:57:67:a8:1e:9f:99:
                    77:e7:db:45:84:24:0a:27:46:44:d4:d9:9c:bc:7d:
                    fd:35:2b:49:d5:c7:e6:e5:2f:4c:ac:f8:f4:34:31:
                    7f:7c:2d:c0:7d:f8:a2:d9:55:20:89:15:5a:c0:d9:
                    e1:ba:b1:99:4c:a0:38:50:5e:a7:d9:cf:a5:8b:ad:
                    7a:d6:aa:62:01:85:93:b6:02:2f:ba:13:65:b4:84:
                    da:a7:5d:d8:f6:d5:06:0b:31:98:6f:b3:ff:a5:0f:
                    7b:48:b9:28:b9:32:c1:5a:c9:51:89:3e:c7:88:50:
                    67:8d:13:35:b8:43:e4:bd:38:e8:d9:5a:ca:ab:11:
                    ee:6e:fa:9e:47:e1:e2:d9:22:f8:4b:34:0e:36:42:
                    ba:35:a6:72:db:6a:0b:fb:8a:59:ad:81:5a:36:6d:
                    65:9c:8e:d3:bc:d0:40:ef:49:59:0e:30:4e:75:de:
                    f8:60:9f:78:f8:6b:ed:27:77:eb:d7:ad:de:91:f5:
                    83:3d:5c:6f:fd:9f:40:81:8a:6d:cb:f6:f5:f8:06:
                    24:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:12:D2:7F:43:0B:E7:58:40:0F:72:90:6D:65:D6:37:70:4E:B2:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/73161134-fbde-3082-942f-dc98bec7bbfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.158.0/24
                IPv6:
                  2606:7bc0:1093::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:b4:b1:5b:ff:31:f9:a0:b8:e0:f6:27:47:cf:4f:e1:20:6c:
         ca:40:db:57:8e:f1:83:d2:64:7a:b2:a3:4f:25:2c:f7:26:96:
         24:e5:04:47:11:e1:64:01:e6:a2:3c:80:42:dd:ef:67:1e:17:
         13:f6:8b:28:ef:61:38:3c:c8:71:b0:ef:8c:d3:1b:6a:a7:fb:
         ed:f3:98:0d:46:f2:f1:5a:9c:d5:99:37:95:9d:9a:62:bb:53:
         77:aa:f0:13:90:ce:01:ba:12:d2:60:b9:33:af:64:5f:85:cf:
         85:d0:c7:12:48:52:24:ef:20:5a:95:73:ec:1f:91:60:b0:a5:
         21:c3:f9:f5:a8:19:2e:00:06:cd:3f:b6:cd:d1:c1:2b:68:b7:
         3f:20:62:20:86:1f:52:c6:98:26:88:07:b2:4a:d1:88:8d:c1:
         6b:19:8d:22:80:de:91:9d:8e:1c:c0:a8:41:2f:42:f6:4f:ed:
         30:a8:a1:e7:67:d1:88:2e:90:b5:fa:c7:7c:41:c1:71:41:27:
         eb:17:00:a2:9f:33:5b:76:fa:f1:dd:a6:65:8e:d2:95:5b:bf:
         90:c2:29:3d:c5:de:8e:f9:48:dc:77:33:bb:09:51:26:6e:9f:
         bc:a2:f5:99:b9:de:33:6e:6a:5f:54:13:42:1f:82:22:de:5a:
         69:02:3b:b7
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE4aFDpfnCY7g39mAQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz
M2Q3MB4XDTI2MDYwODA5MDAxMloXDTI2MDkwNjA5MDAxMlowLzEtMCsGA1UEAxMk
NDM0OTA4YjMtMjUzZC00ZWFhLTg3OGQtZDhlYWRiMTM3ODk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynJ3eivsxKEVZLIlfxTBReo2xvaMTjQCetPj
WYo6hGOy1bR5G2kqf31fNrYbLFsxeDMEkM5XZ6gen5l359tFhCQKJ0ZE1NmcvH39
NStJ1cfm5S9MrPj0NDF/fC3Affii2VUgiRVawNnhurGZTKA4UF6n2c+li6161qpi
AYWTtgIvuhNltITap13Y9tUGCzGYb7P/pQ97SLkouTLBWslRiT7HiFBnjRM1uEPk
vTjo2VrKqxHubvqeR+Hi2SL4SzQONkK6NaZy22oL+4pZrYFaNm1lnI7TvNBA70lZ
DjBOdd74YJ94+GvtJ3fr163ekfWDPVxv/Z9AgYpty/b1+AYkoQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFLQS0n9DC+dYQA9ykG1l1jdwTrI9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl
ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNzMxNjExMzQtZmJkZS0z
MDgyLTk0MmYtZGM5OGJlYzdiYmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4
NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm
MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2
YzY2ZjMzZDcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAnnOeMA8E
AgACMAkDBwAmBnvAEJMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgbSxW/8x+aC44PYnR89P4SBsykDbV47x
g9JkerKjTyUs9yaWJOUERxHhZAHmojyAQt3vZx4XE/aLKO9hODzIcbDvjNMbaqf7
7fOYDUby8Vqc1Zk3lZ2aYrtTd6rwE5DOAboS0mC5M69kX4XPhdDHEkhSJO8gWpVz
7B+RYLClIcP59agZLgAGzT+2zdHBK2i3PyBiIIYfUsaYJogHskrRiI3BaxmNIoDe
kZ2OHMCoQS9C9k/tMKih52fRiC6QtfrHfEHBcUEn6xcAop8zW3b68d2mZY7SlVu/
kMIpPcXejvlI3HczuwlRJm6fvKL1mbneM25qX1QTQh+CIt5aaQI7tw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:55:47 2026 by rpki-client