Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/3e297adb-169e-3352-bbb2-8260355bfd1a.roa
File:                     3e297adb-169e-3352-bbb2-8260355bfd1a.roa (raw, json)
Hash identifier:          mfsHWobGoENJDqttDzwK8OjeG6hUFOs1qpuwqSjgguo=
Subject key identifier:   66:59:CE:36:24:65:8A:E7:00:D5:46:BD:0A:52:DA:05:9D:69:C2:EC
Certificate issuer:       /CN=458adead-fc85-4377-ae8f-70e00c42b223
Certificate serial:       010D0C9F4328584E0D8424941588928D9720B800
Authority key identifier: 80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/3e297adb-169e-3352-bbb2-8260355bfd1a.roa
Signing time:             Wed 03 Jun 2026 21:00:12 +0000
ROA not before:           Wed 03 Jun 2026 21:00:12 +0000
ROA not after:            Tue 01 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        157.248.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:84:24:94:15:88:92:8d:97:20:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458adead-fc85-4377-ae8f-70e00c42b223
        Validity
            Not Before: Jun  3 21:00:12 2026 GMT
            Not After : Sep  1 21:00:12 2026 GMT
        Subject: CN=c2c09a48-5048-40f1-8f44-bde766720493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1d:b8:d3:19:f9:70:1f:e4:29:be:ec:c5:02:
                    2c:4a:98:0f:32:ee:c7:7d:b9:89:63:31:3f:f8:e2:
                    8c:56:f5:ae:26:87:95:ec:bc:05:11:6a:4c:f9:6d:
                    96:c6:9d:01:84:5b:23:f2:43:91:ae:c0:60:3a:2c:
                    04:5b:ad:a3:9a:19:3b:33:db:a8:31:72:b3:a8:f3:
                    f8:9a:72:d2:18:b1:6d:2a:ab:fc:7b:a1:0e:41:5c:
                    ed:db:1b:1f:15:c4:1d:aa:18:56:eb:18:16:a1:05:
                    b2:35:cb:cf:b8:7b:95:16:fa:31:a5:e2:45:0f:79:
                    cb:02:e0:dc:29:16:0f:68:14:d3:45:79:4b:54:a6:
                    dc:8e:8d:2a:18:83:92:19:8a:3d:1c:b3:b3:4e:ec:
                    1a:45:45:9f:63:24:cf:47:c1:cb:c4:68:94:a4:86:
                    4d:cb:c4:46:d2:90:55:a1:34:16:ef:a3:8e:ea:ab:
                    25:c8:71:2e:fa:7b:b8:71:d4:da:05:1a:19:de:93:
                    d4:c1:c4:d4:59:43:5d:96:44:aa:69:3d:45:6d:2b:
                    2a:76:05:55:03:c8:b6:f0:cf:3c:de:21:ce:e3:d9:
                    07:14:fd:d2:4c:25:70:ca:53:7e:00:69:d5:c5:f7:
                    65:e1:b5:b5:77:eb:f4:00:5b:77:df:2a:2d:3b:fc:
                    8e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:59:CE:36:24:65:8A:E7:00:D5:46:BD:0A:52:DA:05:9D:69:C2:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/3e297adb-169e-3352-bbb2-8260355bfd1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl

            X509v3 Authority Key Identifier:
                keyid:80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.248.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:96:9a:e9:44:ea:05:38:38:46:29:86:2b:21:d1:3f:ec:ee:
         6c:12:36:fc:3d:21:67:63:21:2e:30:e5:8e:95:a1:94:29:93:
         a0:86:c1:80:99:31:df:05:d0:33:50:26:1b:90:45:3d:10:62:
         a3:a7:11:dd:a4:94:4e:a3:41:9e:0d:f2:d9:fa:78:2f:fe:10:
         5a:88:f2:01:93:dd:2f:58:d8:f8:82:88:d3:81:9c:c3:5e:f0:
         c8:b2:b1:f2:19:ff:ae:db:ab:f5:25:fc:53:40:c5:db:7c:be:
         81:1c:54:7e:aa:34:6a:d7:a7:4c:c0:7d:4f:78:23:70:c5:c4:
         99:4d:b8:b8:f1:7f:c8:1a:b9:20:25:59:cc:4a:49:a5:e3:3f:
         f0:60:eb:7e:74:46:1f:56:b1:58:8a:a2:f2:f2:31:64:da:20:
         29:f7:03:5a:48:00:e7:d6:e5:22:42:1d:f4:02:4d:ca:dd:85:
         42:28:c0:d8:e7:e3:e4:c9:45:63:d4:27:e4:7b:6b:a9:52:5f:
         d7:04:93:ba:2e:d8:45:3b:8a:4d:45:32:2c:b6:85:a6:6a:48:
         b3:c7:d9:a7:42:fb:3f:50:2f:b8:f7:b8:6c:51:2d:4a:ab:b4:
         f4:cf:0f:0b:1f:89:fa:02:ae:6a:d5:7d:cc:a5:f9:58:ec:ef:
         c3:da:47:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:41:13 2026 by rpki-client