Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/5a27232a-feac-3474-9b25-16a64cc19512.roa
File:                     5a27232a-feac-3474-9b25-16a64cc19512.roa (raw, json)
Hash identifier:          w+hbHHudaFK95S7j4idw0TEK6i52KH70n6f2jNpGCyA=
Subject key identifier:   BE:C6:D9:FA:E3:B7:9D:8D:AD:C7:D6:AC:A8:DE:CA:04:BD:08:48:5C
Certificate issuer:       /CN=458adead-fc85-4377-ae8f-70e00c42b223
Certificate serial:       010D0C9F4328584A9D30E6AC0A0B48745B2C1550
Authority key identifier: 80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/5a27232a-feac-3474-9b25-16a64cc19512.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     16509
IP address blocks:        157.248.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:e6:ac:0a:0b:48:74:5b:2c:15:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458adead-fc85-4377-ae8f-70e00c42b223
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=37dac1ca-02a6-4769-86f0-88f0dc1ad09b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6f:d7:4d:33:02:34:36:81:36:19:1f:29:e2:
                    d6:3a:c2:5f:94:c9:9e:e6:84:4a:f8:c1:1d:62:03:
                    a9:ea:b7:2a:27:b9:50:9d:37:47:0c:da:74:da:81:
                    72:f2:a4:85:cc:97:9f:2c:95:b8:28:b1:07:47:4c:
                    63:27:ba:c9:b1:c1:64:63:8e:9e:04:4f:ba:f7:82:
                    35:24:ae:13:68:7d:9d:e4:42:d3:59:5b:58:6c:1a:
                    78:f4:4b:e8:79:c8:34:40:02:26:4f:05:63:2d:cb:
                    76:e6:e5:bb:4f:36:98:c1:da:3d:19:49:b2:e0:80:
                    48:de:82:44:62:a7:91:7f:c0:16:e3:d0:47:a4:6a:
                    27:4e:d0:7a:e4:8a:0b:e0:cd:4f:4c:6d:e0:8f:0b:
                    15:bc:20:3b:00:6d:4e:ec:2d:e9:55:af:5d:49:e3:
                    be:08:f4:d1:ae:ce:e2:6d:96:2d:f9:1b:94:28:bf:
                    84:f1:b4:31:22:91:0a:11:66:f8:48:00:40:e3:df:
                    26:b1:14:73:6e:20:e3:4c:2a:37:2e:21:e6:35:8a:
                    d6:d9:fa:da:b0:d1:d0:da:7a:89:17:e6:b3:f8:82:
                    b8:8a:00:f0:5e:3d:f2:3a:37:46:1e:78:1d:f4:42:
                    b8:a9:c3:e8:f0:68:4b:81:25:43:ee:92:90:e8:9c:
                    af:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C6:D9:FA:E3:B7:9D:8D:AD:C7:D6:AC:A8:DE:CA:04:BD:08:48:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/5a27232a-feac-3474-9b25-16a64cc19512.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl

            X509v3 Authority Key Identifier:
                keyid:80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.248.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:bd:01:62:ed:46:39:c3:6d:f6:0d:08:95:e1:32:c8:c7:a3:
         c3:ca:fd:59:53:f0:d1:dd:54:98:29:33:95:d0:4e:2e:ef:87:
         8f:47:01:23:f4:99:0a:2e:67:c3:1f:87:13:4f:49:90:95:8c:
         ce:37:53:66:15:8c:5d:a8:85:35:c8:b4:b6:99:20:f2:5b:12:
         2a:f2:dd:ef:be:4b:3c:33:d0:68:6b:ad:a4:a0:e9:c6:ee:40:
         40:f3:93:0b:a1:6c:41:33:e5:82:33:e6:ac:65:3f:31:8a:eb:
         9a:b9:4b:99:b0:e0:2d:07:69:1d:f8:f6:7d:b6:41:c0:28:9c:
         b2:e6:fe:70:6f:e1:2b:40:79:5a:5b:c6:c3:c7:61:2c:2b:fd:
         24:b9:95:fe:a5:f8:07:e4:2f:30:a9:38:c5:29:73:84:3a:62:
         7b:ce:41:fd:a4:6c:0d:71:68:28:b9:4d:5e:95:d9:b3:6e:e9:
         c7:ce:fe:8c:53:36:80:8a:30:c9:7c:3b:a0:8d:7e:2c:33:c5:
         32:62:b6:c2:cb:43:f7:f7:19:8e:ac:0b:99:22:52:4d:60:8e:
         1d:85:92:1a:1b:19:bd:3c:e6:0f:0f:00:34:14:21:d8:0e:b1:
         b7:e2:ea:29:0b:d2:d6:91:a7:4a:d9:24:d5:32:cf:99:a0:87:
         9b:06:a1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:51:35 2025 by rpki-client