Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/8473396c-8a36-3619-80aa-c025ed526998.roa
File:                     8473396c-8a36-3619-80aa-c025ed526998.roa (raw, json)
Hash identifier:          4wLx85C71SyAaEICxY6KPkcty9cTbpSonib2LbrjLAs=
Subject key identifier:   14:5E:0E:7D:75:2F:1D:D1:13:36:24:C2:27:FA:52:BC:42:8C:60:8F
Certificate issuer:       /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
Certificate serial:       010D0C9F4328584F6C5838B990DDA0D837E9EC00
Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/8473396c-8a36-3619-80aa-c025ed526998.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     13984
IP address blocks:        164.153.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:38:b9:90:dd:a0:d8:37:e9:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=d6f3d626-acf4-4215-a2b6-b05299624639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5b:80:28:9f:0b:f4:c6:90:24:a3:13:b2:26:
                    13:7a:db:9f:02:21:9b:2c:7c:83:57:9b:46:b0:a6:
                    ee:df:b3:a4:2f:8e:21:e4:1e:e9:e6:77:8d:db:2b:
                    d0:cb:78:3f:2f:64:87:30:5b:77:d4:e9:66:a9:1b:
                    cc:2a:4d:e8:e6:dc:cd:c2:a5:f1:cc:25:eb:6b:a3:
                    89:f2:fe:e2:0b:e5:8d:61:0b:38:dc:23:6a:17:62:
                    19:c6:6f:85:0a:5e:aa:77:0f:d9:a9:2c:3b:be:6b:
                    be:3b:76:b3:a2:0e:cf:8c:71:89:64:e8:c6:ea:9c:
                    0d:60:6b:ad:77:9f:9d:df:18:2b:48:3c:fe:cc:07:
                    4b:16:be:d2:28:60:fa:1b:33:d7:9a:98:e9:f6:c8:
                    86:9a:05:ec:3b:aa:71:ff:c1:67:23:0a:5f:03:23:
                    5d:e0:1b:bb:cf:82:f0:bb:58:88:03:45:17:82:8b:
                    f0:dc:fd:44:b1:3c:72:52:d1:a8:4c:64:c5:78:79:
                    fd:95:db:b0:1c:4e:89:6d:59:96:0a:68:a0:52:38:
                    a0:53:6d:3e:22:25:aa:9a:98:af:f6:4d:b6:3d:da:
                    0b:25:38:b4:6c:e2:2c:8d:05:d2:5b:9e:ab:36:c5:
                    f2:2d:70:d3:ee:32:8b:f8:51:00:27:2c:22:28:83:
                    8e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5E:0E:7D:75:2F:1D:D1:13:36:24:C2:27:FA:52:BC:42:8C:60:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/8473396c-8a36-3619-80aa-c025ed526998.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.153.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:a9:e3:7d:ef:9d:7f:d1:fa:5c:d6:10:71:36:ea:b3:26:f0:
         78:7d:3d:bb:9b:ad:cb:7b:46:54:a6:5a:a1:04:b6:af:3d:72:
         ac:45:54:04:99:00:dc:48:be:5b:ab:3e:43:96:71:64:36:ed:
         ed:22:87:8a:d9:60:13:9c:c7:5f:d8:7e:19:f1:67:b0:f9:63:
         d1:62:06:89:d2:0f:62:ea:f5:37:35:d5:d6:00:98:dd:b9:2c:
         21:4f:bf:68:b1:cd:75:a2:2e:96:95:a1:9b:8a:a9:a7:15:10:
         87:dd:03:41:29:c7:4e:95:16:a0:53:61:7e:fe:43:03:5d:01:
         29:d5:22:b6:7b:1b:b9:d1:fb:02:fc:d6:3d:9a:ec:02:be:02:
         0b:60:b1:3e:f4:8a:b8:f1:2e:82:fd:7e:ba:32:92:b8:e7:51:
         7c:fd:c3:79:61:31:5f:3c:32:4b:1f:c1:45:c8:e8:ea:55:03:
         63:7a:14:e8:d1:c3:0c:60:31:74:df:f1:0b:40:38:85:e3:d5:
         ef:f9:78:e0:48:b0:e1:e3:d6:69:72:b2:ed:fa:6c:77:92:a0:
         63:b5:c2:e1:9b:4d:28:c5:44:a2:ca:9c:58:34:bd:97:e1:de:
         f7:37:68:04:1f:3f:08:da:45:5f:24:2a:3e:cc:f5:07:93:f9:
         27:fc:92:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:08:20 2026 by rpki-client