Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/48c8d872-3f18-36ae-b380-e8d1a3164315.roa
File:                     48c8d872-3f18-36ae-b380-e8d1a3164315.roa (raw, json)
Hash identifier:          xV19aUzKx8NEXqYgsgrAlvP2n8VYOVHAOjBbfvL+sc4=
Subject key identifier:   AF:11:48:01:D7:5C:CB:C9:D2:A8:31:43:38:D1:62:C1:23:5C:25:96
Certificate issuer:       /CN=37d65fc0-6e4c-4477-9488-812657d0d39e
Certificate serial:       010D0C9F4328584E7FFA3698FE2173759340C4E0
Authority key identifier: 91:D8:E9:F5:3E:49:C5:9D:62:75:1C:43:E5:41:A3:BA:E4:9D:3C:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/48c8d872-3f18-36ae-b380-e8d1a3164315.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     8987
IP address blocks:        153.45.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/37d65fc0-6e4c-4477-9488-812657d0d39e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/37d65fc0-6e4c-4477-9488-812657d0d39e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:36:98:fe:21:73:75:93:40:c4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37d65fc0-6e4c-4477-9488-812657d0d39e
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=765b8d66-67af-4145-a489-993e564ed51d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:04:1c:21:a8:d1:1c:8b:44:60:8f:96:c8:f3:
                    53:f2:e2:15:8e:c3:be:06:dc:99:61:6f:b9:3a:1f:
                    e5:7d:4c:b5:8f:79:db:16:6c:e6:ab:84:35:58:96:
                    68:33:48:38:3d:22:c3:fd:d7:93:7e:a9:a0:86:a1:
                    66:f3:29:48:ef:52:63:24:2a:28:38:ef:fc:35:53:
                    2f:2f:fd:1b:32:f1:75:59:f4:1a:13:d9:67:54:85:
                    fc:ff:6d:69:1c:f3:12:90:9b:36:88:37:7b:6f:50:
                    23:2c:39:dd:19:62:de:48:7a:c8:97:29:2b:a0:d5:
                    0d:49:b9:03:1c:a4:4b:02:4c:d5:b6:85:60:d5:bb:
                    0f:86:06:02:3b:96:d6:ad:d1:fa:ec:18:36:4c:bd:
                    52:1a:05:b4:4d:14:8e:33:11:93:a8:18:c3:ca:1b:
                    63:53:b5:d6:1b:f2:e2:07:26:15:e7:1e:e1:35:bc:
                    21:e3:06:08:f8:ce:c8:e0:37:27:4d:26:64:c9:2f:
                    48:0e:0a:1c:95:c0:e9:7e:b8:39:f5:81:1c:64:eb:
                    a8:b2:05:f0:50:3a:d9:12:c2:57:9a:2f:ed:9b:a0:
                    7d:0b:1b:37:67:ee:cb:e4:3b:20:8c:7b:b4:10:67:
                    04:8e:58:f3:40:53:12:58:b2:b2:cb:5c:9f:be:03:
                    07:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:11:48:01:D7:5C:CB:C9:D2:A8:31:43:38:D1:62:C1:23:5C:25:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/48c8d872-3f18-36ae-b380-e8d1a3164315.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/37d65fc0-6e4c-4477-9488-812657d0d39e.crl

            X509v3 Authority Key Identifier:
                keyid:91:D8:E9:F5:3E:49:C5:9D:62:75:1C:43:E5:41:A3:BA:E4:9D:3C:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.45.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:de:1a:af:ad:05:aa:d3:08:0d:e0:6e:99:62:87:1a:b9:d1:
         d0:8c:a7:25:70:8f:e1:8f:b3:16:38:2a:36:0f:d7:9d:2a:99:
         6e:38:88:86:ae:ad:b7:9b:97:72:d3:0f:35:43:b6:dc:72:42:
         a3:dc:07:5d:b8:9f:da:9b:37:f7:1a:69:e6:b0:aa:92:f7:30:
         90:cf:8d:2a:70:89:7e:5b:62:e8:7e:2c:ca:60:7a:89:a6:c0:
         07:17:88:19:5b:b7:fe:57:96:36:c7:ab:41:b2:a4:e2:20:3e:
         d7:fc:0a:20:b0:c8:4a:4e:2d:b1:44:e9:22:53:cb:10:b3:cb:
         53:ba:d2:bb:06:a4:d9:82:85:96:08:1c:4c:b7:f5:28:95:58:
         4b:76:b7:81:bc:2c:58:b7:b3:22:38:67:64:f1:88:cd:5b:99:
         c8:c6:8a:43:0c:01:3e:ac:c3:85:b6:90:f6:8e:7f:1d:2e:74:
         c3:73:49:68:dd:05:75:44:55:76:1e:96:cf:69:ab:10:60:01:
         17:dd:76:8b:f0:ca:39:c8:c9:db:22:a9:b2:a5:f9:1b:d7:a6:
         9e:92:88:6f:66:92:ea:67:01:18:fc:58:44:7e:92:c7:ea:e1:
         71:95:93:0c:ac:7f:c7:35:c2:53:c3:f1:b2:58:1f:a0:e5:cc:
         5e:7f:19:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:05:01 2026 by rpki-client