Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/d4027007-cb64-3b6c-a1e3-689b363c9a8e.roa
File:                     d4027007-cb64-3b6c-a1e3-689b363c9a8e.roa (raw, json)
Hash identifier:          cIEpdAfWuP/H0X0ZyQUWsRTK2h35HlHttnGICQthV5s=
Subject key identifier:   E7:02:AC:A8:D0:BF:77:0B:93:70:63:DE:A6:A9:CF:86:AA:D0:8B:05
Certificate issuer:       /CN=37d65fc0-6e4c-4477-9488-812657d0d39e
Certificate serial:       010D0C9F4328584F4B6CDA4BB9DCC82A9EF74DC0
Authority key identifier: 91:D8:E9:F5:3E:49:C5:9D:62:75:1C:43:E5:41:A3:BA:E4:9D:3C:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/d4027007-cb64-3b6c-a1e3-689b363c9a8e.roa
Signing time:             Fri 25 Sep 2026 18:00:24 +0000
ROA not before:           Fri 25 Sep 2026 18:00:24 +0000
ROA not after:            Thu 24 Dec 2026 19:00:24 +0000
asID:                     8070
IP address blocks:        153.45.148.0/24 maxlen: 24
                          153.45.149.0/24 maxlen: 24
                          153.45.172.0/24 maxlen: 24
                          153.45.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/37d65fc0-6e4c-4477-9488-812657d0d39e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/37d65fc0-6e4c-4477-9488-812657d0d39e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4b:6c:da:4b:b9:dc:c8:2a:9e:f7:4d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37d65fc0-6e4c-4477-9488-812657d0d39e
        Validity
            Not Before: Sep 25 18:00:24 2026 GMT
            Not After : Dec 24 19:00:24 2026 GMT
        Subject: CN=42eab3dc-a423-4a96-9cdb-141da1d11715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:63:42:5c:b0:88:0e:11:24:48:b8:0e:26:a2:
                    13:a9:b0:d2:95:62:6b:30:b9:a9:4d:04:9f:c1:92:
                    d5:b3:04:35:4c:06:dd:f3:c9:a7:6d:3c:57:3c:a6:
                    14:63:ff:78:fb:19:15:16:81:aa:a0:0e:9d:6d:67:
                    0a:c2:f0:38:bb:02:90:31:71:0f:dd:9e:6b:92:27:
                    66:ad:96:00:7b:cd:fb:18:da:87:e4:5c:fb:54:b1:
                    94:c7:1f:25:e0:b6:88:7c:c5:54:03:a9:a8:96:60:
                    6b:69:57:cc:78:f8:1e:4b:f5:6d:f7:55:d9:bc:33:
                    f2:b3:bb:0d:f3:f5:85:c9:9d:f8:ef:90:d9:a3:0c:
                    d7:19:59:f5:43:d9:0b:09:55:76:b8:fd:0c:6b:10:
                    23:9f:04:63:2a:33:57:15:89:f2:fa:3f:88:21:50:
                    51:12:45:2e:e3:dc:c4:30:ec:54:e3:3b:4a:85:8e:
                    7e:10:65:63:6a:a8:b4:63:38:4f:3c:52:eb:b9:12:
                    c7:24:15:34:5f:57:74:73:db:7a:8e:43:b6:98:3f:
                    d0:14:9b:12:79:7b:91:a2:16:8b:ba:36:78:0f:4d:
                    e0:be:b5:82:74:69:18:bd:47:28:e0:be:87:ce:7f:
                    6d:43:62:31:1f:75:6f:2b:02:25:70:4e:61:f0:35:
                    e7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:02:AC:A8:D0:BF:77:0B:93:70:63:DE:A6:A9:CF:86:AA:D0:8B:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/d4027007-cb64-3b6c-a1e3-689b363c9a8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/37d65fc0-6e4c-4477-9488-812657d0d39e.crl

            X509v3 Authority Key Identifier:
                keyid:91:D8:E9:F5:3E:49:C5:9D:62:75:1C:43:E5:41:A3:BA:E4:9D:3C:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.45.148.0/23
                  153.45.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:d1:a9:95:ed:cd:41:87:96:a4:03:b0:89:0d:e2:83:f1:f5:
         e4:4b:49:17:1f:24:9d:99:60:28:3c:d6:ef:07:b1:ea:a1:39:
         71:09:39:bb:da:fa:50:d7:bb:83:75:e1:be:fe:5c:ec:3b:dd:
         5e:ef:93:be:0a:b3:34:4b:6f:84:60:fa:6b:7e:3e:e8:35:dc:
         5f:3c:8d:36:37:58:5b:ea:8e:77:e7:1b:d8:d8:94:ed:66:1a:
         4d:e6:45:07:1c:10:da:e1:96:17:94:46:76:03:b4:4b:b3:d0:
         97:26:d6:0c:1d:6f:8e:aa:f8:fc:e1:38:e4:92:6a:b5:c0:bc:
         64:77:2d:27:95:42:63:63:b5:a2:23:d2:7f:15:f5:29:f5:85:
         4f:75:b2:20:ec:81:a3:20:06:44:8b:46:ac:91:9f:b5:d7:a4:
         a9:06:92:f5:2c:62:82:97:6d:8b:5c:a3:85:65:18:6e:72:c1:
         b0:8f:6d:9d:a6:fc:68:e3:74:44:96:2a:95:26:70:09:5c:08:
         5f:d4:3f:5d:1c:62:cb:8e:54:eb:31:a8:37:3f:f4:b0:0b:76:
         4f:7b:93:17:1a:9c:29:4c:9e:2f:a6:c4:0a:53:b7:33:7e:5b:
         6e:bb:36:10:4a:01:b1:bf:f9:9a:c9:42:09:63:e4:6d:cf:12:
         7d:9a:ef:f7
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9LbNpLudzIKp73TcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzdkNjVmYzAtNmU0Yy00NDc3LTk0ODgtODEyNjU3ZDBk
MzllMB4XDTI2MDkyNTE4MDAyNFoXDTI2MTIyNDE5MDAyNFowLzEtMCsGA1UEAxMk
NDJlYWIzZGMtYTQyMy00YTk2LTljZGItMTQxZGExZDExNzE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGNCXLCIDhEkSLgOJqITqbDSlWJrMLmpTQSf
wZLVswQ1TAbd88mnbTxXPKYUY/94+xkVFoGqoA6dbWcKwvA4uwKQMXEP3Z5rkidm
rZYAe837GNqH5Fz7VLGUxx8l4LaIfMVUA6molmBraVfMePgeS/Vt91XZvDPys7sN
8/WFyZ3475DZowzXGVn1Q9kLCVV2uP0MaxAjnwRjKjNXFYny+j+IIVBREkUu49zE
MOxU4ztKhY5+EGVjaqi0YzhPPFLruRLHJBU0X1d0c9t6jkO2mD/QFJsSeXuRohaL
ujZ4D03gvrWCdGkYvUco4L6Hzn9tQ2IxH3VvKwIlcE5h8DXnLQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFOcCrKjQv3cLk3Bj3qapz4aq0IsFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zN2Q2
NWZjMC02ZTRjLTQ0NzctOTQ4OC04MTI2NTdkMGQzOWUvZDQwMjcwMDctY2I2NC0z
YjZjLWExZTMtNjg5YjM2M2M5YThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzdkNjVmYzAtNmU0Yy00NDc3LTk0
ODgtODEyNjU3ZDBkMzllLzM3ZDY1ZmMwLTZlNGMtNDQ3Ny05NDg4LTgxMjY1N2Qw
ZDM5ZS5jcmwwHwYDVR0jBBgwFoAUkdjp9T5JxZ1idRxD5UGjuuSdPGkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8zN2Q2NWZjMC02ZTRjLTQ0NzctOTQ4OC04MTI2
NTdkMGQzOWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBmS2UAwQB
mS2sMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAF3RqZXtzUGHlqQDsIkN4oPx9eRLSRcfJJ2ZYCg81u8Hseqh
OXEJObva+lDXu4N14b7+XOw73V7vk74KszRLb4Rg+mt+Pug13F88jTY3WFvqjnfn
G9jYlO1mGk3mRQccENrhlheURnYDtEuz0Jcm1gwdb46q+PzhOOSSarXAvGR3LSeV
QmNjtaIj0n8V9Sn1hU91siDsgaMgBkSLRqyRn7XXpKkGkvUsYoKXbYtco4VlGG5y
wbCPbZ2m/GjjdESWKpUmcAlcCF/UP10cYsuOVOsxqDc/9LALdk97kxcanClMni+m
xApTtzN+W267NhBKAbG/+ZrJQglj5G3PEn2a7/c=
-----END CERTIFICATE-----
Generated at Sat Oct 3 23:01:27 2026 by rpki-client