Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/340d375d-e064-333f-8901-2713a3e5527e.roa
File:                     340d375d-e064-333f-8901-2713a3e5527e.roa (raw, json)
Hash identifier:          +vrjDFQkD+i1NA2MfxjEcyOwUtp9b6m2y2Gqy7EPf4c=
Subject key identifier:   4D:0D:14:A2:1C:97:1E:36:98:DD:52:0C:A9:D0:2F:C2:ED:96:C7:A4
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EA79609E871466953BCD40360
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/340d375d-e064-333f-8901-2713a3e5527e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     81
IP address blocks:        152.45.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:09:e8:71:46:69:53:bc:d4:03:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3a97ead1-172a-4831-adeb-13676e25d426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a7:e2:ec:2a:82:d9:50:26:12:d1:bf:6a:93:
                    92:29:c5:f1:71:af:68:57:75:da:a4:49:3a:8e:d6:
                    8a:d9:4d:f7:95:b7:c9:67:08:fe:55:03:42:c4:15:
                    75:7c:af:3d:96:3f:56:75:e1:00:4d:7a:dc:09:52:
                    29:f4:32:8b:26:12:77:12:01:2f:db:39:8a:de:f6:
                    c5:b6:90:60:1a:d2:16:0c:f1:c9:2e:a0:a6:a9:82:
                    f7:4a:11:68:cb:8b:b3:73:a1:fc:75:c3:46:37:15:
                    78:b7:47:d2:e8:18:00:ab:d3:10:62:44:4e:ed:90:
                    40:14:d2:4c:9d:94:df:d6:63:b0:66:f6:47:02:d3:
                    24:c0:b1:b2:1b:79:92:a1:a9:24:d6:4e:46:f9:60:
                    a0:19:f6:ec:43:03:27:79:89:06:5e:58:fd:19:fa:
                    5e:c5:86:17:51:52:6c:35:99:58:cf:7d:0d:5b:0f:
                    ca:19:57:7f:ec:83:18:9d:48:40:b3:c7:40:2f:16:
                    e5:61:57:32:0c:13:3f:30:14:5c:55:01:1d:1e:b4:
                    57:33:79:14:5f:3f:7a:2d:dc:09:08:1f:65:c4:ee:
                    65:22:18:d8:e0:f9:1c:36:13:c1:4e:82:af:40:cd:
                    99:fa:03:93:60:c9:cf:07:d8:45:fd:66:62:79:b3:
                    8c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:0D:14:A2:1C:97:1E:36:98:DD:52:0C:A9:D0:2F:C2:ED:96:C7:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/340d375d-e064-333f-8901-2713a3e5527e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.45.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:aa:2d:46:2f:39:65:b2:f4:a5:f8:f6:9a:c8:ba:4d:44:9a:
         cd:02:cc:ee:25:87:4e:e4:35:ec:d4:fc:54:62:a7:27:36:7d:
         23:33:4c:a8:8b:90:e6:ec:b0:50:ca:fe:91:46:02:14:b1:60:
         67:dd:04:81:06:b4:fb:ba:0f:2c:04:92:b0:ac:87:02:41:48:
         9d:53:25:43:18:ba:93:24:2e:b6:f8:55:7c:6c:4c:d7:c9:94:
         9c:99:dc:2e:bf:10:38:62:f7:f7:90:d8:3c:72:fe:f9:f1:0c:
         34:85:8b:57:4a:47:50:52:a1:2e:2c:d4:db:61:c0:dd:43:47:
         c5:fa:05:1a:3f:6e:b1:33:de:0d:00:d2:82:b2:85:37:5a:d0:
         21:f4:7f:38:7d:c2:23:24:ce:75:e9:ef:ef:99:8e:b5:14:79:
         98:3c:7e:ed:dc:60:d6:13:11:d6:00:59:51:9b:9c:c1:a4:42:
         8b:ba:96:ba:ed:66:e5:53:6a:89:a3:a8:48:50:be:8e:0b:cc:
         50:aa:4c:ae:86:87:e9:3b:d9:a9:a1:b3:64:7e:da:92:97:7a:
         54:bf:07:ba:91:0d:50:ae:57:a3:fa:e3:42:1e:4a:63:88:b7:
         c5:b1:11:6f:02:8f:ee:0a:0f:73:c4:b1:f1:71:5f:97:d5:39:
         40:92:81:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlgnocUZpU7zUA2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
M2E5N2VhZDEtMTcyYS00ODMxLWFkZWItMTM2NzZlMjVkNDI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6fi7CqC2VAmEtG/apOSKcXxca9oV3XapEk6
jtaK2U33lbfJZwj+VQNCxBV1fK89lj9WdeEATXrcCVIp9DKLJhJ3EgEv2zmK3vbF
tpBgGtIWDPHJLqCmqYL3ShFoy4uzc6H8dcNGNxV4t0fS6BgAq9MQYkRO7ZBAFNJM
nZTf1mOwZvZHAtMkwLGyG3mSoakk1k5G+WCgGfbsQwMneYkGXlj9GfpexYYXUVJs
NZlYz30NWw/KGVd/7IMYnUhAs8dALxblYVcyDBM/MBRcVQEdHrRXM3kUXz96LdwJ
CB9lxO5lIhjY4PkcNhPBToKvQM2Z+gOTYMnPB9hF/WZiebOMaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE0NFKIclx42mN1SDKnQL8LtlsekMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMzQwZDM3NWQtZTA2NC0z
MzNmLTg5MDEtMjcxM2EzZTU1MjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC0KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC+qLUYvOWWy9KX49prIuk1Ems0CzO4lh07kNezU/FRipyc2fSMzTKiL
kObssFDK/pFGAhSxYGfdBIEGtPu6DywEkrCshwJBSJ1TJUMYupMkLrb4VXxsTNfJ
lJyZ3C6/EDhi9/eQ2Dxy/vnxDDSFi1dKR1BSoS4s1NthwN1DR8X6BRo/brEz3g0A
0oKyhTda0CH0fzh9wiMkznXp7++ZjrUUeZg8fu3cYNYTEdYAWVGbnMGkQou6lrrt
ZuVTaomjqEhQvo4LzFCqTK6Gh+k72amhs2R+2pKXelS/B7qRDVCuV6P640IeSmOI
t8WxEW8Cj+4KD3PEsfFxX5fVOUCSgbk=
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:56:22 2026 by rpki-client