Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/a317804f-60e4-3002-925a-258b38ed37e9.roa
File:                     a317804f-60e4-3002-925a-258b38ed37e9.roa (raw, json)
Hash identifier:          OxwC+sz9FtRwww2ATrd36L9yDnMLB0jR6QKEghLQAM4=
Subject key identifier:   D4:17:65:32:A6:54:3F:53:DD:4E:CE:D3:D5:BC:E9:87:B9:37:E0:93
Certificate issuer:       /CN=458adead-fc85-4377-ae8f-70e00c42b223
Certificate serial:       010D0C9F4328584E0D84246B6402865481DDB2E0
Authority key identifier: 80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/a317804f-60e4-3002-925a-258b38ed37e9.roa
Signing time:             Wed 03 Jun 2026 21:00:12 +0000
ROA not before:           Wed 03 Jun 2026 21:00:12 +0000
ROA not after:            Tue 01 Sep 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        157.248.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:84:24:6b:64:02:86:54:81:dd:b2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458adead-fc85-4377-ae8f-70e00c42b223
        Validity
            Not Before: Jun  3 21:00:12 2026 GMT
            Not After : Sep  1 21:00:12 2026 GMT
        Subject: CN=f38e9b17-30eb-4282-8a91-c1b112bf417e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0a:94:fd:bb:e8:1a:db:dd:47:c1:3d:2e:26:
                    ea:2b:d2:27:37:3b:f7:ec:11:42:30:ab:63:d2:35:
                    42:b3:d9:e0:9d:62:96:1a:7a:0d:84:7d:81:de:e3:
                    0a:15:40:fd:cf:83:0d:b3:e6:fe:b0:5c:c3:28:11:
                    7f:11:44:e5:25:2c:46:d4:a3:78:8d:e0:c7:81:4b:
                    f2:a1:10:ca:4c:56:13:da:17:bc:04:2f:e7:c4:18:
                    e2:d0:80:e6:bf:a3:7f:5d:6b:46:91:60:fa:b2:3e:
                    04:e4:a4:08:38:e5:36:8c:79:3a:6e:3f:7c:83:62:
                    ba:ce:8b:d9:db:44:c4:5c:5d:91:bd:ad:3c:3c:a0:
                    3d:b8:a2:36:31:c7:ec:5a:59:bf:18:fe:4e:21:57:
                    e8:09:0b:85:91:e5:a6:5d:70:c2:bc:23:d3:10:ee:
                    7e:a5:f8:e6:22:76:82:36:cb:c6:b0:ec:3d:8a:25:
                    45:fb:f1:a5:64:0a:be:98:58:d3:ca:f4:5a:a5:68:
                    1e:f3:64:20:5a:bd:0e:fb:cf:0c:be:94:08:2e:5c:
                    69:f2:4e:7f:51:4a:bf:4b:2d:fd:b2:de:43:12:de:
                    14:4d:16:54:30:f2:d7:1f:e8:0e:2a:ec:d3:8a:97:
                    64:d8:dd:b6:3c:89:e3:03:44:b0:51:fe:cd:ff:bd:
                    23:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:17:65:32:A6:54:3F:53:DD:4E:CE:D3:D5:BC:E9:87:B9:37:E0:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/a317804f-60e4-3002-925a-258b38ed37e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl

            X509v3 Authority Key Identifier:
                keyid:80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.248.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:a8:00:ce:1c:82:70:12:b7:74:19:63:7a:a8:b6:f7:89:50:
         c0:fe:4e:50:73:1a:a9:b6:d9:6c:d8:ec:e2:ea:66:a6:2a:73:
         6f:3d:36:31:ff:a8:c0:38:86:57:03:bb:2b:cd:cf:c7:7f:66:
         08:ed:d0:0a:02:b3:36:c5:35:23:f1:54:96:73:5f:53:7b:20:
         77:c0:e5:f5:5e:1a:26:3d:3c:ef:cf:b3:26:c0:c8:6a:82:a7:
         54:2a:62:47:37:a9:55:31:28:c6:66:c0:ea:d0:ec:88:fe:13:
         19:7a:eb:b6:b4:71:f4:be:1e:92:4d:d7:c7:93:5d:3b:91:a8:
         6c:d3:e3:e5:49:53:b1:3a:46:0b:e7:7f:e5:50:83:46:cb:45:
         9c:50:a5:e7:7f:9c:cb:50:c0:27:0a:11:dc:0a:c6:b2:33:86:
         d6:30:86:6c:bc:19:84:f4:ec:8e:ea:f5:0d:ed:9b:4f:d3:a5:
         49:20:a4:ec:31:2e:c5:36:38:5a:99:02:49:01:16:62:64:a1:
         c0:ed:c0:97:97:9a:a6:26:b6:7b:79:cc:e6:2f:8f:fb:e3:f4:
         d1:16:9a:0a:c6:32:6b:4e:43:d8:3f:38:a0:65:0d:2b:9c:34:
         4a:c8:2b:81:ff:40:bc:01:b8:d7:6c:a0:cf:cc:51:88:74:d8:
         5c:4e:70:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:13:56 2026 by rpki-client