Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/45db1138-014a-3675-81af-627a0951dfec.roa
File:                     45db1138-014a-3675-81af-627a0951dfec.roa (raw, json)
Hash identifier:          So3w4cdBd7WX9JGr3ngrSiGRCwHJy6kftoAF/x4Q8J4=
Subject key identifier:   36:14:25:1F:0A:95:A3:C7:3F:C1:64:07:36:E0:AE:78:D3:A7:68:23
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328584AB7B6207F394EBF515931E748
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/45db1138-014a-3675-81af-627a0951dfec.roa
Signing time:             Sat 02 Aug 2025 01:00:32 +0000
ROA not before:           Sat 02 Aug 2025 01:00:32 +0000
ROA not after:            Fri 31 Oct 2025 01:00:32 +0000
asID:                     400754
IP address blocks:        160.153.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b7:b6:20:7f:39:4e:bf:51:59:31:e7:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Aug  2 01:00:32 2025 GMT
            Not After : Oct 31 01:00:32 2025 GMT
        Subject: CN=c677d5c5-cfa8-44cd-957b-0e071181a635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d7:67:a8:41:81:33:ba:f7:f1:a5:5e:1b:6c:
                    52:c5:e7:ea:55:82:f5:a6:a4:d5:09:6d:15:ae:af:
                    7c:8c:41:72:27:35:b4:a1:b7:cc:9e:23:a1:1b:b4:
                    4f:0c:32:e9:88:19:f4:22:d8:64:f6:4e:b4:2d:4a:
                    ec:75:52:77:ee:b3:84:d9:54:bc:01:fb:ed:86:f2:
                    49:86:d2:f0:89:be:75:8e:c3:fc:98:b0:5e:45:35:
                    a2:c1:a0:6a:57:b4:72:c9:ca:3c:81:e8:2a:63:4d:
                    37:68:22:82:5e:6d:04:1d:a1:12:46:55:15:d3:8a:
                    82:3c:3d:72:1b:8b:1e:ef:47:7d:ec:6f:e4:d7:d8:
                    79:c6:b5:fd:74:78:2c:16:a0:82:1c:36:37:73:57:
                    8f:d0:9a:88:6c:b2:f3:55:35:8d:a1:41:ef:34:af:
                    20:49:f4:5f:13:be:32:1c:f7:0b:5a:1d:b4:29:98:
                    dd:69:ed:20:6d:e8:eb:d7:40:66:96:25:ae:77:f7:
                    9d:bf:eb:d9:e4:85:8b:b6:a3:e2:b0:e9:c8:2f:a6:
                    eb:39:77:01:71:ef:47:e1:fd:c6:db:e8:3c:f8:6e:
                    3c:b8:e3:89:06:fe:4f:bd:cf:12:7f:3d:2f:b8:c3:
                    b3:74:4b:8c:58:8c:e9:85:da:05:81:5d:c5:8b:8a:
                    92:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:14:25:1F:0A:95:A3:C7:3F:C1:64:07:36:E0:AE:78:D3:A7:68:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/45db1138-014a-3675-81af-627a0951dfec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.153.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:3b:b0:d3:c3:ee:5f:67:3c:61:8e:f3:b4:84:97:af:a3:aa:
         14:6e:28:b6:e0:47:7f:1a:2c:d5:c1:1d:be:d0:cc:62:42:0c:
         b4:7e:6b:56:bd:81:fd:63:d9:84:9f:5b:96:89:92:95:75:a2:
         0e:b5:7a:93:37:3a:c0:80:17:ef:5d:d7:de:48:d3:ce:1f:84:
         a3:c4:26:1b:7d:a7:3e:32:98:3d:df:0a:40:5a:99:b8:05:8b:
         9c:00:69:cc:4d:ed:3c:00:5e:bd:2b:db:d0:7a:28:a7:03:17:
         d5:2e:50:c8:99:d8:32:58:90:cf:78:3f:c5:ab:79:57:ad:36:
         f3:12:51:64:6f:72:72:53:cd:f2:e3:76:e9:d9:64:0f:83:f4:
         3a:6c:20:aa:99:33:e8:d4:46:b0:1b:a0:bd:1e:f3:fc:8c:9c:
         c9:1b:e7:49:8b:a6:8e:22:8e:3a:a6:5b:c4:ae:55:c4:d8:74:
         dd:95:e8:97:d6:f0:fa:9d:19:a1:da:d4:7e:b9:7e:d2:9a:f6:
         45:e3:ee:09:a7:a1:f4:60:3c:af:40:de:85:ce:cf:e1:a2:51:
         8d:91:33:1a:27:c3:e5:e7:11:5c:6a:72:50:12:65:f7:37:c5:
         71:65:b1:50:42:60:d8:d7:f5:67:a9:9f:3b:bc:b2:f0:11:9f:
         bb:fa:f3:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq3tiB/OU6/UVkx50gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWVkNWNlODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4Y2Nm
MTNmMB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk
YzY3N2Q1YzUtY2ZhOC00NGNkLTk1N2ItMGUwNzExODFhNjM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9dnqEGBM7r38aVeG2xSxefqVYL1pqTVCW0V
rq98jEFyJzW0obfMniOhG7RPDDLpiBn0Ithk9k60LUrsdVJ37rOE2VS8AfvthvJJ
htLwib51jsP8mLBeRTWiwaBqV7Ryyco8gegqY003aCKCXm0EHaESRlUV04qCPD1y
G4se70d97G/k19h5xrX9dHgsFqCCHDY3c1eP0JqIbLLzVTWNoUHvNK8gSfRfE74y
HPcLWh20KZjdae0gbejr10BmliWud/edv+vZ5IWLtqPisOnIL6brOXcBce9H4f3G
2+g8+G48uOOJBv5Pvc8Sfz0vuMOzdEuMWIzphdoFgV3Fi4qSGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDYUJR8KlaPHP8FkBzbgrnjTp2gjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1
Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZjZThjY2YxM2YvNDVkYjExMzgtMDE0YS0z
Njc1LTgxYWYtNjI3YTA5NTFkZmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWVkNWNlODAtMjI0ZS00NmFiLTk0
ZjEtMWFmY2U4Y2NmMTNmLzllZDVjZTgwLTIyNGUtNDZhYi05NGYxLTFhZmNlOGNj
ZjEzZi5jcmwwHwYDVR0jBBgwFoAUOB2fprp8wahErgn+WgCWnTv84Q8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZj
ZThjY2YxM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoJkBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEc7sNPD7l9nPGGO87SEl6+jqhRuKLbgR38aLNXBHb7QzGJCDLR+a1a9
gf1j2YSfW5aJkpV1og61epM3OsCAF+9d195I084fhKPEJht9pz4ymD3fCkBambgF
i5wAacxN7TwAXr0r29B6KKcDF9UuUMiZ2DJYkM94P8WreVetNvMSUWRvcnJTzfLj
dunZZA+D9DpsIKqZM+jURrAboL0e8/yMnMkb50mLpo4ijjqmW8SuVcTYdN2V6JfW
8PqdGaHa1H65ftKa9kXj7gmnofRgPK9A3oXOz+GiUY2RMxonw+XnEVxqclASZfc3
xXFlsVBCYNjX9Wepnzu8svARn7v68xE=
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:50:07 2025 by rpki-client