Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/45db1138-014a-3675-81af-627a0951dfec.roa
File:                     45db1138-014a-3675-81af-627a0951dfec.roa (raw, json)
Hash identifier:          qbBadOBI9MKXsGUHlIEIa2k8JpSowSovGJHNX0pEsOE=
Subject key identifier:   D7:F4:79:1D:51:E7:75:D0:FE:64:B8:ED:E6:4B:C4:7C:6E:67:30:D8
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328584EDC9203BAC3C5344EDBA29080
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/45db1138-014a-3675-81af-627a0951dfec.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     400754
IP address blocks:        160.153.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:03:ba:c3:c5:34:4e:db:a2:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=f85da377-95df-4329-a2c1-322fced08b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b5:5f:3d:d2:c9:97:71:14:ec:06:cd:c6:1c:
                    8a:4b:9d:23:f7:e6:e7:6e:4b:b8:59:20:45:b2:11:
                    cf:68:77:e1:b8:3c:59:5c:39:5e:3b:a0:e1:f8:14:
                    44:f8:bd:ae:08:6f:28:26:2d:cb:33:8c:7c:50:f7:
                    ad:6e:b5:e8:4a:d9:64:2f:56:3d:85:b0:f5:14:ad:
                    dc:8d:6b:4f:ad:9d:39:33:31:0a:68:e9:6d:49:1f:
                    da:8b:ac:49:32:44:76:62:08:49:38:12:cd:f0:a8:
                    7a:77:9c:fc:ed:ee:11:a7:ea:25:8f:be:5e:06:75:
                    fc:45:fa:d1:50:0b:20:11:02:a9:eb:53:38:50:5d:
                    5a:8a:54:86:30:7d:d1:b7:3c:8f:fc:7f:c8:18:ce:
                    c9:50:99:47:88:11:66:fa:c1:83:89:e6:98:dd:6a:
                    00:a6:26:ef:a3:1b:07:11:70:ee:aa:ab:5e:64:04:
                    c8:3f:bd:ce:a2:8d:2d:98:cc:ca:13:b1:74:4a:6d:
                    7a:fe:67:77:e2:00:c0:f5:3e:07:e2:19:68:3b:c3:
                    1f:c3:58:a4:12:8c:b9:ef:bb:82:81:82:dc:ec:17:
                    1f:93:38:a7:37:e1:7f:26:98:e4:0b:10:63:e3:6b:
                    24:ef:36:c9:55:18:56:14:85:eb:b0:22:3c:dc:d3:
                    d8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F4:79:1D:51:E7:75:D0:FE:64:B8:ED:E6:4B:C4:7C:6E:67:30:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/45db1138-014a-3675-81af-627a0951dfec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.153.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:02:43:1f:62:14:44:70:5c:92:47:56:58:69:b3:0b:8c:a7:
         26:ac:20:10:e5:a2:51:fd:df:7c:11:ad:48:47:2a:4d:2b:25:
         6b:bd:60:ca:09:3d:e8:6d:4a:0c:3e:94:a3:59:0d:72:94:cb:
         a1:f1:9e:95:ac:f3:60:7a:34:25:ce:00:c4:60:f1:bd:95:ac:
         21:26:be:8d:84:42:7f:26:6b:7e:e1:dc:79:8a:f6:ba:ab:7f:
         77:c6:96:90:30:ff:57:b5:1d:90:16:0c:c5:6d:a3:0b:9a:9b:
         ff:5e:ae:e9:60:c8:c3:ab:0d:5c:4e:28:f9:f0:db:65:7d:02:
         ff:de:8e:7d:98:0f:01:71:9e:15:1b:ce:be:d5:b9:36:12:42:
         9d:c0:71:88:6b:dd:f1:a0:fe:42:9d:fe:98:ae:1d:11:45:65:
         8b:cb:cf:8b:e6:4a:dd:e6:ea:ed:cd:4a:af:d2:46:f0:a5:2a:
         b6:3a:12:e7:54:11:0f:bf:a9:04:30:5e:1d:df:d5:00:53:ea:
         c5:51:49:4a:46:33:61:55:f4:27:7f:33:9e:0f:e3:b0:d1:dc:
         4e:a1:e9:05:59:9d:d2:27:e8:a6:2e:21:74:0a:d7:ed:e9:c6:
         de:fa:d7:88:6f:fe:ff:70:25:d7:47:2c:5d:03:00:c5:18:82:
         98:16:65:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:14:38 2026 by rpki-client