Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/8085afc2-07b3-3a9d-b454-91afbe081f01.roa
File:                     8085afc2-07b3-3a9d-b454-91afbe081f01.roa (raw, json)
Hash identifier:          HGTtdTlZ330LDJDRL+FyrQitq8FnQEEn4gXrvHrYxW0=
Subject key identifier:   EE:4E:C0:DF:4E:65:05:18:A2:65:E9:F7:63:07:8A:E1:E5:73:9A:AB
Certificate issuer:       /CN=37d65fc0-6e4c-4477-9488-812657d0d39e
Certificate serial:       010D0C9F4328584DF7A5CE6DA93E6DA7E70BF4C0
Authority key identifier: 91:D8:E9:F5:3E:49:C5:9D:62:75:1C:43:E5:41:A3:BA:E4:9D:3C:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/8085afc2-07b3-3a9d-b454-91afbe081f01.roa
Signing time:             Wed 27 May 2026 01:00:14 +0000
ROA not before:           Wed 27 May 2026 01:00:14 +0000
ROA not after:            Tue 25 Aug 2026 01:00:14 +0000
asID:                     14618
IP address blocks:        153.45.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/37d65fc0-6e4c-4477-9488-812657d0d39e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/37d65fc0-6e4c-4477-9488-812657d0d39e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f7:a5:ce:6d:a9:3e:6d:a7:e7:0b:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37d65fc0-6e4c-4477-9488-812657d0d39e
        Validity
            Not Before: May 27 01:00:14 2026 GMT
            Not After : Aug 25 01:00:14 2026 GMT
        Subject: CN=ec75ddca-0a84-4af7-86a6-e41cc8cb6f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:38:d6:de:8e:3b:2b:70:7b:4b:a4:93:8f:2f:
                    6e:73:72:8b:c2:29:4e:88:5b:d4:ba:1c:16:e0:f5:
                    8f:3f:27:29:c7:06:88:1e:c1:70:47:0d:81:ab:24:
                    a4:9d:db:a9:0d:65:cb:b3:64:2f:47:89:1e:5e:89:
                    3d:e0:c9:d0:4a:4d:aa:a6:05:8a:4e:29:b9:93:09:
                    9f:8a:58:e3:2d:9d:42:66:5d:c2:f2:9f:f5:f8:58:
                    db:71:b5:3c:5e:0b:71:3d:3b:e6:3f:fa:0e:bc:62:
                    a2:67:98:ab:39:16:17:4e:48:3b:d9:c1:7d:ef:06:
                    0c:28:ef:d7:89:2c:12:35:2c:97:10:60:dc:3f:dc:
                    13:05:38:b4:6d:bb:9e:95:cc:51:f1:ce:6c:91:80:
                    4f:b7:c5:8f:5c:82:0c:4b:47:1b:2e:98:ab:52:c6:
                    e1:7d:83:e3:ad:c5:b2:ec:4e:ce:b9:28:cc:61:f0:
                    2e:e4:fc:97:f7:10:c9:0d:cc:5b:62:c0:30:34:87:
                    fe:0e:06:17:93:7c:1d:49:78:5f:8f:08:75:77:cd:
                    b9:b9:76:94:06:a1:cc:03:fa:fb:a6:4e:84:35:1a:
                    f0:8f:44:8a:16:e8:28:20:60:5d:55:da:ed:70:95:
                    df:56:cc:8f:49:2e:7c:0f:76:4d:6d:4f:f1:8a:e4:
                    1e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4E:C0:DF:4E:65:05:18:A2:65:E9:F7:63:07:8A:E1:E5:73:9A:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/8085afc2-07b3-3a9d-b454-91afbe081f01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/37d65fc0-6e4c-4477-9488-812657d0d39e.crl

            X509v3 Authority Key Identifier:
                keyid:91:D8:E9:F5:3E:49:C5:9D:62:75:1C:43:E5:41:A3:BA:E4:9D:3C:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.45.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:04:4b:eb:ca:a0:73:29:0e:8b:36:e0:ea:b6:c3:24:bc:a3:
         19:2a:ed:af:93:84:a4:9c:a8:ad:81:cf:c5:03:ca:83:46:ad:
         0f:ee:2a:a9:4b:ce:e7:0d:ce:ef:4d:dd:fe:d3:a2:a5:9f:b3:
         e8:47:e7:67:af:8e:bc:10:a8:01:b3:25:a8:0d:c4:fb:1f:4d:
         c0:49:5a:90:0c:3c:a8:f7:19:db:45:a1:c3:87:9e:19:fb:32:
         4f:f4:fd:40:c9:95:65:d0:74:0e:b7:cf:80:42:db:b5:0e:54:
         8a:56:86:6b:2d:f1:af:25:db:20:1b:0d:d0:02:29:f7:91:bb:
         a3:a3:2c:86:62:29:39:7f:c4:61:19:d4:38:5d:c9:98:2e:cd:
         53:00:3c:c3:af:20:31:2a:e9:46:a0:68:33:ac:5a:9e:59:2b:
         91:e5:99:0e:88:2d:d5:d8:27:b4:d3:b7:a5:0d:f5:df:24:18:
         02:3b:1d:29:86:77:7d:62:a1:79:d9:0d:17:ee:de:37:b0:1a:
         97:2d:b1:b1:b1:4b:bd:f3:8b:54:dc:1e:d1:14:f5:86:5d:92:
         0f:38:03:7f:29:da:41:01:ee:f6:a2:d5:0e:6f:d9:87:85:8c:
         de:84:f8:3e:aa:53:ea:4b:ed:50:96:c5:01:68:5a:d9:9d:db:
         16:02:8d:c6
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE33pc5tqT5tp+cL9MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzdkNjVmYzAtNmU0Yy00NDc3LTk0ODgtODEyNjU3ZDBk
MzllMB4XDTI2MDUyNzAxMDAxNFoXDTI2MDgyNTAxMDAxNFowLzEtMCsGA1UEAxMk
ZWM3NWRkY2EtMGE4NC00YWY3LTg2YTYtZTQxY2M4Y2I2ZjY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTjW3o47K3B7S6STjy9uc3KLwilOiFvUuhwW
4PWPPycpxwaIHsFwRw2BqySkndupDWXLs2QvR4keXok94MnQSk2qpgWKTim5kwmf
iljjLZ1CZl3C8p/1+FjbcbU8XgtxPTvmP/oOvGKiZ5irORYXTkg72cF97wYMKO/X
iSwSNSyXEGDcP9wTBTi0bbuelcxR8c5skYBPt8WPXIIMS0cbLpirUsbhfYPjrcWy
7E7OuSjMYfAu5PyX9xDJDcxbYsAwNIf+DgYXk3wdSXhfjwh1d825uXaUBqHMA/r7
pk6ENRrwj0SKFugoIGBdVdrtcJXfVsyPSS58D3ZNbU/xiuQecQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFO5OwN9OZQUYomXp92MHiuHlc5qrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zN2Q2
NWZjMC02ZTRjLTQ0NzctOTQ4OC04MTI2NTdkMGQzOWUvODA4NWFmYzItMDdiMy0z
YTlkLWI0NTQtOTFhZmJlMDgxZjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzdkNjVmYzAtNmU0Yy00NDc3LTk0
ODgtODEyNjU3ZDBkMzllLzM3ZDY1ZmMwLTZlNGMtNDQ3Ny05NDg4LTgxMjY1N2Qw
ZDM5ZS5jcmwwHwYDVR0jBBgwFoAUkdjp9T5JxZ1idRxD5UGjuuSdPGkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8zN2Q2NWZjMC02ZTRjLTQ0NzctOTQ4OC04MTI2
NTdkMGQzOWUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmS0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAbARL68qgcykOizbg6rbDJLyjGSrtr5OEpJyorYHPxQPKg0atD+4qqUvO
5w3O703d/tOipZ+z6EfnZ6+OvBCoAbMlqA3E+x9NwElakAw8qPcZ20Whw4eeGfsy
T/T9QMmVZdB0DrfPgELbtQ5UilaGay3xryXbIBsN0AIp95G7o6MshmIpOX/EYRnU
OF3JmC7NUwA8w68gMSrpRqBoM6xanlkrkeWZDogt1dgntNO3pQ313yQYAjsdKYZ3
fWKhedkNF+7eN7Aaly2xsbFLvfOLVNwe0RT1hl2SDzgDfynaQQHu9qLVDm/Zh4WM
3oT4PqpT6kvtUJbFAWha2Z3bFgKNxg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:25:35 2026 by rpki-client