Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/a5c5b016-cf10-329d-abb7-002e0ccfb803.roa
File:                     a5c5b016-cf10-329d-abb7-002e0ccfb803.roa (raw, json)
Hash identifier:          cOiq95nLjVILz3x77d+NTEk9n0VhVGVk+798VgpMLB4=
Subject key identifier:   46:17:17:E6:D7:DD:EC:A2:E0:AF:88:C2:88:25:A9:62:54:AE:0A:C1
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584F497515951D44E61733C97280
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/a5c5b016-cf10-329d-abb7-002e0ccfb803.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     395831
IP address blocks:        158.115.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:15:95:1d:44:e6:17:33:c9:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=79c0b3d6-cdaf-4538-a3fa-fca8822a1163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6a:cd:a5:e1:9a:43:f9:88:ae:f4:06:6a:3f:
                    2c:6f:9d:d5:9c:f5:f3:f1:68:c7:54:83:ea:11:33:
                    4f:2e:d4:5d:3b:a4:05:58:1b:98:5a:fc:31:63:28:
                    97:cb:48:30:35:04:dc:50:09:be:62:be:6d:eb:85:
                    c1:83:fc:25:4e:12:41:c3:7d:0c:86:b1:32:c3:0e:
                    8f:31:0d:8b:71:b3:80:77:18:7a:fb:70:cc:b4:c5:
                    2f:fc:74:18:02:0d:63:2c:c9:33:b9:46:48:cc:df:
                    d8:e5:ec:e8:02:69:3d:eb:1f:95:cc:85:66:95:43:
                    22:ae:62:1f:24:d3:48:77:1c:e3:7f:50:3c:e5:ab:
                    91:1c:32:07:5e:af:5f:b3:99:43:2a:53:98:a6:10:
                    ed:a1:f9:63:09:0a:48:52:ba:b0:ec:4d:01:7f:63:
                    6e:4a:e3:dd:1d:95:1b:5e:0c:60:5a:1d:45:74:4c:
                    27:4f:12:ee:a5:40:75:1d:8c:b8:ce:62:76:bc:cb:
                    22:72:6b:2c:07:b3:b0:b1:95:56:cb:11:28:92:cd:
                    dd:d7:a0:e9:ab:13:1f:77:5d:bb:2b:3b:3a:71:5d:
                    6a:1e:59:34:59:ef:22:72:ed:41:28:12:92:13:e8:
                    9b:a7:7f:4b:c2:70:06:c8:92:7c:ae:77:6d:ef:ba:
                    f5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:17:17:E6:D7:DD:EC:A2:E0:AF:88:C2:88:25:A9:62:54:AE:0A:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/a5c5b016-cf10-329d-abb7-002e0ccfb803.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.115.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:8e:36:30:42:e6:0b:cc:21:73:2e:48:42:79:bd:bf:97:e0:
         9f:cf:1e:22:be:4b:45:20:bf:6b:b4:48:63:6f:79:d3:42:7d:
         04:34:53:50:10:7f:85:3c:97:f8:22:b4:5d:56:4f:34:73:77:
         28:5c:b7:1e:9c:a8:16:47:99:c1:1a:7e:84:db:16:60:38:05:
         cf:8d:b8:32:ba:bb:f1:a6:b5:35:38:de:e7:57:d3:c7:86:b1:
         d5:34:31:8f:06:d6:99:db:71:ef:bf:ff:70:0c:de:bf:d7:88:
         c8:bb:01:a3:5d:d1:ce:ce:fe:e6:39:bf:8b:4c:83:68:7a:61:
         6e:5a:49:ff:fe:47:5a:c2:e9:3e:60:b8:85:01:0e:43:56:79:
         f4:0a:f5:6f:d7:6f:3b:d2:f9:77:18:96:87:bf:af:23:1a:72:
         17:64:24:97:7c:70:34:65:27:b8:b4:54:43:fe:92:0f:08:4c:
         fe:f2:fc:a4:18:3f:15:ff:79:4c:29:7b:a2:3c:9e:fa:02:99:
         6a:3e:b1:25:71:88:34:3b:9a:2c:94:75:6f:af:7c:1c:b3:1a:
         b6:8d:45:c3:bf:fc:3a:02:6f:ab:40:b1:ed:de:6f:41:f9:32:
         a4:8f:94:63:58:35:fa:31:93:bc:24:90:ef:4c:4d:e8:16:94:
         dc:9c:bc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 08:41:39 2026 by rpki-client