Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/85240ca7-41e9-329b-8a29-307187f566aa.roa
File:                     85240ca7-41e9-329b-8a29-307187f566aa.roa (raw, json)
Hash identifier:          XyYa+nyPvKPZbbz/rTTESQ+X4R5brBfaP5wL6ZXzz4s=
Subject key identifier:   61:75:B3:E1:D0:8E:C8:4F:83:B0:74:DF:1C:43:A0:92:09:E3:2D:DF
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584E1A143A517F92E932BB6DA0C0
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/85240ca7-41e9-329b-8a29-307187f566aa.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        158.115.158.0/24 maxlen: 24
                          2606:7bc0:1093::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:3a:51:7f:92:e9:32:bb:6d:a0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=0a0f9d19-ac96-4145-ba98-11cc6934d596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7d:f7:9c:0e:40:4b:03:97:36:cf:06:65:75:
                    a8:2d:a7:06:83:72:51:f7:5a:a3:fa:4e:e4:01:ce:
                    86:05:ed:8a:d6:4c:3e:ff:0f:b7:97:77:0e:a1:23:
                    55:eb:70:80:e8:38:f7:06:da:5b:cd:14:85:14:61:
                    6a:58:9e:6a:94:81:5c:96:bf:aa:96:02:fb:b3:57:
                    bd:ba:0c:da:61:93:44:5b:b9:f2:24:6f:dd:ef:58:
                    c4:20:03:36:4d:de:0c:93:35:cb:01:08:a9:0d:79:
                    a0:80:44:92:c6:58:23:0b:9a:94:7c:a6:b2:8d:fc:
                    76:e9:6e:7c:b2:08:d6:7d:3f:52:b4:dd:dd:f2:1f:
                    10:ab:9b:52:dd:12:91:6e:69:15:57:fa:12:e4:b8:
                    d4:19:fe:81:c8:12:6e:c5:ad:f9:3c:10:3c:43:aa:
                    03:42:cc:90:21:f8:5b:88:4d:b9:00:a1:c5:36:5e:
                    be:37:d8:b9:3f:32:f4:2a:fd:a8:ec:02:f6:ee:35:
                    55:39:55:1b:12:0d:58:95:e0:a6:89:3b:87:ee:90:
                    2a:04:01:60:50:f5:62:53:c7:1d:18:7e:5a:f4:8a:
                    98:48:45:e5:b8:b4:e0:e9:94:9f:e9:fc:45:c1:94:
                    22:b0:d4:36:08:ff:bd:21:a1:13:f4:00:6a:17:ba:
                    86:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:75:B3:E1:D0:8E:C8:4F:83:B0:74:DF:1C:43:A0:92:09:E3:2D:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/85240ca7-41e9-329b-8a29-307187f566aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.158.0/24
                IPv6:
                  2606:7bc0:1093::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:b7:7b:1b:f7:1a:bc:ba:1d:79:1e:b2:16:d5:bf:7d:1c:d2:
         94:a3:b3:4b:2d:65:81:4d:05:a9:97:b9:06:82:5d:9c:31:9f:
         9b:60:01:eb:f2:85:8c:af:70:ad:df:7c:86:06:ab:71:c6:df:
         a4:bd:05:3c:ae:65:80:45:9e:de:31:50:55:61:0a:d1:46:e5:
         b1:a6:06:53:e5:40:7d:1b:05:f6:f2:e9:20:46:e9:89:6e:bd:
         7e:7f:2a:3f:71:3e:2d:51:19:e1:1d:ed:59:bd:72:58:fc:6d:
         3d:88:3c:87:4e:19:a8:6b:98:bb:3f:1d:d9:bb:ae:e7:e7:2b:
         64:cc:ef:b2:c3:fa:b8:35:65:53:21:1f:7c:7e:55:6a:2b:27:
         d0:14:96:5b:ab:f1:20:40:ac:70:a6:bd:a9:10:2e:2d:b7:4c:
         2b:2c:86:cc:28:47:a4:dc:61:55:d8:75:e9:ca:81:07:09:51:
         3e:06:38:3e:8d:27:a3:73:f8:28:6a:55:31:7d:85:da:49:22:
         e6:09:01:71:0f:30:87:62:a5:f0:27:54:0b:32:99:cf:87:3e:
         f6:2d:99:c1:dd:63:db:d2:50:24:d3:15:32:95:a2:2c:1d:9c:
         b8:cc:98:a9:34:0b:e7:43:c9:2f:57:0b:ff:bf:bf:1f:0f:e3:
         5e:06:2a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:34:23 2026 by rpki-client