Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/07793d1d-c3a4-3cdf-a5b8-9a11d0293535.roa
File:                     07793d1d-c3a4-3cdf-a5b8-9a11d0293535.roa (raw, json)
Hash identifier:          9asZZ4Jnd5jKR1SvgM7Om3RN6hlJBxq/NRlbWHm7gjM=
Subject key identifier:   2A:F3:97:41:81:84:AF:C8:A4:47:8B:C4:29:A2:08:E8:8E:87:66:B7
Certificate issuer:       /CN=458adead-fc85-4377-ae8f-70e00c42b223
Certificate serial:       010D0C9F4328584E0D842485FFE28B06FD134A80
Authority key identifier: 80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/07793d1d-c3a4-3cdf-a5b8-9a11d0293535.roa
Signing time:             Wed 03 Jun 2026 21:00:12 +0000
ROA not before:           Wed 03 Jun 2026 21:00:12 +0000
ROA not after:            Tue 01 Sep 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        157.248.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:84:24:85:ff:e2:8b:06:fd:13:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458adead-fc85-4377-ae8f-70e00c42b223
        Validity
            Not Before: Jun  3 21:00:12 2026 GMT
            Not After : Sep  1 21:00:12 2026 GMT
        Subject: CN=629830f5-62c8-474a-8d13-e55219b2ec88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ce:06:54:1e:2b:16:3a:c9:0d:e9:24:f1:a8:
                    cc:e0:5a:4e:e4:fa:6d:15:39:cd:d5:93:7c:d0:1b:
                    24:1a:2b:df:52:6b:28:b4:5a:d4:f0:06:a2:3e:49:
                    2c:81:a1:e0:c2:17:43:5b:55:bc:9a:67:eb:cd:50:
                    a4:57:91:36:b5:05:a3:44:21:59:8d:78:a2:96:bb:
                    ec:6c:5c:a3:75:43:d1:69:e3:75:bf:3e:0e:a7:63:
                    3d:6e:74:cb:ae:52:96:d5:9c:1a:54:45:a0:a9:1e:
                    64:41:cd:0b:07:81:24:d7:18:9d:b7:89:9b:9e:cf:
                    f8:50:95:d6:28:39:a2:60:fe:2c:ef:7d:5a:5e:4c:
                    55:ac:1a:fd:d1:d7:10:e7:66:9e:64:ed:e7:3f:a6:
                    7c:28:05:96:cb:93:4d:d8:80:81:3f:9d:c1:d4:b5:
                    d4:82:23:a8:04:5b:fe:96:02:24:11:66:6e:c7:ab:
                    b9:f0:97:d2:f2:2e:6e:f6:bf:8b:02:4a:3e:9b:4d:
                    0e:b3:b4:8b:7a:55:82:69:8a:08:c2:04:d4:23:d4:
                    d1:d9:b3:30:77:72:83:59:5d:2e:c1:4c:ef:35:51:
                    47:ec:5e:ca:34:87:47:5d:7e:cf:f3:82:36:a0:48:
                    3e:ef:d9:25:32:23:de:bb:d6:f8:d6:a1:d9:cc:14:
                    15:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F3:97:41:81:84:AF:C8:A4:47:8B:C4:29:A2:08:E8:8E:87:66:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/07793d1d-c3a4-3cdf-a5b8-9a11d0293535.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl

            X509v3 Authority Key Identifier:
                keyid:80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.248.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:ab:d6:23:30:df:e5:50:6c:0d:18:ab:1d:bf:bf:62:26:13:
         48:5f:38:20:d2:4c:5f:ed:b2:9d:02:ac:4c:91:84:80:93:31:
         c8:4a:3d:6c:58:bb:3a:c7:11:0e:cd:67:8a:57:24:50:7e:2a:
         95:47:76:1e:9f:21:4d:0f:1a:80:88:bc:81:a9:e6:ed:43:24:
         d4:f6:d4:60:67:27:6f:dc:71:1a:73:1a:44:b4:e8:74:c3:04:
         86:5e:2a:95:28:fc:76:49:68:91:ab:af:37:28:a7:a0:28:9d:
         43:7e:e0:00:a4:25:d1:7e:97:a2:f2:5e:81:17:d7:fc:3a:2b:
         0b:74:39:12:5e:b9:7d:e0:ea:4c:ff:2e:9f:4f:9f:20:20:bd:
         2d:f8:64:dc:ce:df:33:0e:fc:6c:a9:45:16:e6:4d:ba:b2:83:
         43:d0:a9:3b:63:b4:aa:ce:92:f7:ff:85:60:10:3d:e8:50:95:
         e1:8f:f8:61:51:de:41:6f:87:06:4e:51:1d:74:a0:6d:ab:64:
         17:00:fb:7b:cd:1c:e8:ef:19:cb:23:eb:9e:d1:1a:c3:62:1e:
         cb:ae:f7:2c:46:43:0d:d8:c6:18:87:03:b5:d2:18:0e:68:3a:
         fd:a1:c8:49:ac:1e:1c:4d:cf:5f:01:87:0c:d9:19:4d:b8:25:
         d0:b2:5a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:14:18 2026 by rpki-client