Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/f10a622e-1be1-3482-9538-d547ee980da2.roa
File:                     f10a622e-1be1-3482-9538-d547ee980da2.roa (raw, json)
Hash identifier:          H5Tq6wvsdGoGaHDqU3L1MhpgtxLhE/v5qIkL7JdmmhI=
Subject key identifier:   F4:BB:3B:02:F0:BE:DC:A8:B7:49:71:B0:72:98:37:AB:28:09:E6:FD
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328584E7BCA389BEABB8396FF07F120
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/f10a622e-1be1-3482-9538-d547ee980da2.roa
Signing time:             Mon 13 Jul 2026 09:00:12 +0000
ROA not before:           Mon 13 Jul 2026 09:00:12 +0000
ROA not after:            Sun 11 Oct 2026 09:00:12 +0000
asID:                     398101
IP address blocks:        160.153.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7b:ca:38:9b:ea:bb:83:96:ff:07:f1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Jul 13 09:00:12 2026 GMT
            Not After : Oct 11 09:00:12 2026 GMT
        Subject: CN=bda1af29-b6e6-468c-9e36-10c34c62165c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1d:0f:83:e1:c8:ab:f2:d8:26:f5:7b:31:57:
                    02:a7:12:ae:9d:9c:3c:75:c8:4e:86:9f:0d:25:e5:
                    46:a0:27:ea:28:aa:bf:78:0e:66:7e:a0:02:c7:73:
                    8f:90:46:d0:9d:12:ff:78:2c:65:3b:4a:49:68:c1:
                    5b:5f:d7:7d:89:6f:79:61:d5:8b:ed:b9:2c:aa:ff:
                    12:dc:c8:35:c0:c5:ec:f7:43:fe:fe:ad:0f:0a:2b:
                    c9:3e:e1:6c:66:5d:e5:29:be:4b:5a:32:87:45:a2:
                    eb:1d:32:70:77:a6:b3:07:99:3a:5d:47:b3:17:49:
                    23:4b:ab:a5:3c:d8:6c:aa:bf:7d:93:90:ad:dd:43:
                    6c:ba:7c:53:0f:58:e6:1d:9b:ed:25:a6:a6:16:80:
                    77:fb:25:2c:99:53:ec:c8:ee:72:75:ba:b6:cb:c9:
                    35:ac:4b:bf:b6:54:2c:04:25:40:c1:1c:80:f7:e8:
                    d5:3a:dc:72:5d:8c:ac:3a:7a:95:4b:a8:a1:e2:b4:
                    0c:ba:0f:d1:2f:55:65:45:5d:0e:67:90:21:4d:c5:
                    5a:91:2e:c6:ad:50:85:3f:6c:ec:d3:a3:24:3d:f1:
                    88:a7:36:70:01:b3:61:c8:8a:32:1c:4b:65:89:5d:
                    50:a6:1a:93:1e:8e:49:d3:de:db:6c:bd:67:50:ce:
                    b7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BB:3B:02:F0:BE:DC:A8:B7:49:71:B0:72:98:37:AB:28:09:E6:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/f10a622e-1be1-3482-9538-d547ee980da2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.153.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:b0:e0:bd:18:4c:72:b7:9a:be:be:cb:8c:24:75:b8:b1:db:
         3c:70:56:0b:d8:b2:e9:7b:a6:56:ea:a5:68:d5:49:a2:b2:ae:
         ba:f2:3b:ec:02:fa:f8:28:3f:c0:bc:8f:2a:67:5d:70:84:86:
         cc:c5:9d:f3:a4:05:bf:5b:5b:fa:87:a1:e4:92:00:af:20:7d:
         bf:fe:ef:13:f8:1e:a0:9f:e5:79:b0:cb:10:ff:49:dc:98:59:
         1d:a5:3b:bf:07:61:9f:22:e2:76:4f:8d:d3:a8:a3:89:04:81:
         c2:76:9f:14:ed:79:13:cc:15:84:7a:ae:d6:21:64:06:3e:fe:
         6f:45:9d:ad:d8:38:99:2d:32:3f:4a:7a:21:6b:f2:4f:4a:a6:
         c8:6f:a4:3e:69:74:a1:77:fe:0e:38:f8:3d:4a:a2:0d:96:a5:
         19:86:62:c9:b0:e2:a6:f2:d0:06:db:16:31:20:b7:fd:c0:f6:
         81:f6:35:73:81:e1:2f:5a:26:68:a0:3a:01:6c:1e:ec:ec:8e:
         7e:bc:44:6a:de:e8:fa:af:5f:f3:7f:e4:00:19:8f:1a:07:7c:
         9a:97:f3:b6:fa:5d:f5:b0:84:4d:ea:93:b2:c7:9b:c1:fe:94:
         dd:cf:82:31:2f:42:ce:8b:c7:5d:d3:86:f9:80:6d:7d:cf:77:
         8a:58:94:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE57yjib6ruDlv8H8SAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWVkNWNlODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4Y2Nm
MTNmMB4XDTI2MDcxMzA5MDAxMloXDTI2MTAxMTA5MDAxMlowLzEtMCsGA1UEAxMk
YmRhMWFmMjktYjZlNi00NjhjLTllMzYtMTBjMzRjNjIxNjVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx0Pg+HIq/LYJvV7MVcCpxKunZw8dchOhp8N
JeVGoCfqKKq/eA5mfqACx3OPkEbQnRL/eCxlO0pJaMFbX9d9iW95YdWL7bksqv8S
3Mg1wMXs90P+/q0PCivJPuFsZl3lKb5LWjKHRaLrHTJwd6azB5k6XUezF0kjS6ul
PNhsqr99k5Ct3UNsunxTD1jmHZvtJaamFoB3+yUsmVPsyO5ydbq2y8k1rEu/tlQs
BCVAwRyA9+jVOtxyXYysOnqVS6ih4rQMug/RL1VlRV0OZ5AhTcVakS7GrVCFP2zs
06MkPfGIpzZwAbNhyIoyHEtliV1QphqTHo5J097bbL1nUM638wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPS7OwLwvtyot0lxsHKYN6soCeb9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1
Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZjZThjY2YxM2YvZjEwYTYyMmUtMWJlMS0z
NDgyLTk1MzgtZDU0N2VlOTgwZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWVkNWNlODAtMjI0ZS00NmFiLTk0
ZjEtMWFmY2U4Y2NmMTNmLzllZDVjZTgwLTIyNGUtNDZhYi05NGYxLTFhZmNlOGNj
ZjEzZi5jcmwwHwYDVR0jBBgwFoAUOB2fprp8wahErgn+WgCWnTv84Q8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZj
ZThjY2YxM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoJmsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFuw4L0YTHK3mr6+y4wkdbix2zxwVgvYsul7plbqpWjVSaKyrrryO+wC
+vgoP8C8jypnXXCEhszFnfOkBb9bW/qHoeSSAK8gfb/+7xP4HqCf5XmwyxD/SdyY
WR2lO78HYZ8i4nZPjdOoo4kEgcJ2nxTteRPMFYR6rtYhZAY+/m9Fna3YOJktMj9K
eiFr8k9KpshvpD5pdKF3/g44+D1Kog2WpRmGYsmw4qby0AbbFjEgt/3A9oH2NXOB
4S9aJmigOgFsHuzsjn68RGre6PqvX/N/5AAZjxoHfJqX87b6XfWwhE3qk7LHm8H+
lN3PgjEvQs6Lx13ThvmAbX3Pd4pYlOw=
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:10:32 2026 by rpki-client