Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/c0da7b6e-b122-3d93-acd2-080ea245eda3.roa
File:                     c0da7b6e-b122-3d93-acd2-080ea245eda3.roa (raw, json)
Hash identifier:          Xk7TtNiIl41yUvDAjdsjM46alkYtJw4+k3rIAgsB6yE=
Subject key identifier:   44:4E:90:AB:78:B4:B5:39:2E:DC:3E:AB:A2:52:78:AB:A4:39:A5:C5
Certificate issuer:       /CN=37d65fc0-6e4c-4477-9488-812657d0d39e
Certificate serial:       010D0C9F4328584E257D632292EE426727F22480
Authority key identifier: 91:D8:E9:F5:3E:49:C5:9D:62:75:1C:43:E5:41:A3:BA:E4:9D:3C:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/c0da7b6e-b122-3d93-acd2-080ea245eda3.roa
Signing time:             Fri 12 Jun 2026 11:06:04 +0000
ROA not before:           Fri 12 Jun 2026 11:06:04 +0000
ROA not after:            Thu 10 Sep 2026 11:06:04 +0000
asID:                     8075
IP address blocks:        153.45.160.0/24 maxlen: 24
                          153.45.161.0/24 maxlen: 24
                          153.45.162.0/24 maxlen: 24
                          153.45.163.0/24 maxlen: 24
                          153.45.164.0/24 maxlen: 24
                          153.45.165.0/24 maxlen: 24
                          153.45.166.0/24 maxlen: 24
                          153.45.167.0/24 maxlen: 24
                          153.45.168.0/24 maxlen: 24
                          153.45.169.0/24 maxlen: 24
                          153.45.170.0/24 maxlen: 24
                          153.45.171.0/24 maxlen: 24
                          153.45.172.0/24 maxlen: 24
                          153.45.173.0/24 maxlen: 24
                          153.45.174.0/24 maxlen: 24
                          153.45.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/37d65fc0-6e4c-4477-9488-812657d0d39e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/37d65fc0-6e4c-4477-9488-812657d0d39e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:7d:63:22:92:ee:42:67:27:f2:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37d65fc0-6e4c-4477-9488-812657d0d39e
        Validity
            Not Before: Jun 12 11:06:04 2026 GMT
            Not After : Sep 10 11:06:04 2026 GMT
        Subject: CN=f8ba4c5b-6444-4741-bcf5-f09255fcd1d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ca:0d:f8:6c:96:f2:08:fe:ee:89:ba:4b:56:
                    83:e9:9e:03:08:51:38:56:f1:f0:cd:99:10:c3:5c:
                    82:97:ab:3d:65:9d:a8:0a:87:d5:e9:4f:5d:e3:84:
                    7d:2f:6d:85:31:0c:cc:5e:53:8c:54:0f:05:d9:3d:
                    22:28:06:e3:a3:20:61:ca:84:24:d5:4d:a0:15:d8:
                    96:d2:74:f5:19:ff:60:4c:d5:63:92:9f:19:a7:d2:
                    90:5f:30:72:39:43:07:ee:d0:66:5f:25:69:c6:8b:
                    c6:c6:da:92:24:8c:da:b6:06:4a:00:58:ff:dd:7e:
                    61:99:47:10:8e:bc:97:37:4d:c7:b3:7a:46:18:91:
                    02:91:9b:3b:80:9c:69:c4:f4:7c:55:81:62:a4:55:
                    75:f7:0a:3c:96:0f:89:22:29:05:b7:26:95:b4:ec:
                    e4:58:c9:22:e7:cc:d2:64:68:d5:d3:42:b9:ab:f3:
                    d3:1c:b5:b8:d3:3b:21:25:ea:d5:4b:dd:48:fe:7e:
                    17:26:d0:2c:ab:09:dd:f8:1d:0b:bc:77:75:41:53:
                    f7:3c:26:60:23:6a:6f:d8:44:3a:74:54:75:6f:05:
                    0a:83:10:88:62:19:c5:b1:dc:4d:3c:c1:5f:8a:ee:
                    0b:0f:72:0e:4f:69:9c:79:a7:76:2a:8c:5a:09:dd:
                    d3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4E:90:AB:78:B4:B5:39:2E:DC:3E:AB:A2:52:78:AB:A4:39:A5:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/c0da7b6e-b122-3d93-acd2-080ea245eda3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e/37d65fc0-6e4c-4477-9488-812657d0d39e.crl

            X509v3 Authority Key Identifier:
                keyid:91:D8:E9:F5:3E:49:C5:9D:62:75:1C:43:E5:41:A3:BA:E4:9D:3C:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/37d65fc0-6e4c-4477-9488-812657d0d39e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.45.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:35:25:05:b2:33:42:98:a8:11:64:8e:5f:0a:fb:d1:05:1d:
         b2:68:29:ae:c7:01:11:12:db:79:b4:a7:44:dd:c3:8b:56:d3:
         e4:34:13:61:73:02:f9:90:3a:a9:90:31:7b:56:91:58:28:e7:
         95:b7:5b:b4:9c:ae:56:64:a1:0b:78:0e:7c:8b:d5:fa:7f:d4:
         87:97:2d:38:58:0b:3f:b6:d6:f9:39:ed:9c:fd:8b:b8:40:d1:
         d9:6e:a9:89:23:27:75:38:a0:a5:4e:e2:fc:72:05:f1:19:66:
         31:72:07:b1:99:72:7f:eb:3b:fe:68:34:f9:b0:3c:e5:e0:57:
         e5:47:95:37:aa:63:21:11:93:52:80:08:f1:3f:07:20:b2:d1:
         db:57:51:a7:11:c0:55:4f:1e:aa:4e:4b:65:b9:5f:c8:22:ae:
         36:c2:84:fb:6a:cf:e5:b2:9f:c2:a0:1e:41:a7:d7:46:8b:bf:
         ef:14:83:25:f8:ff:92:ce:59:32:f2:8f:60:a1:82:15:71:00:
         6d:b5:9a:eb:5d:b8:13:da:21:2b:bd:29:83:03:ff:f1:0b:35:
         00:17:c8:72:1a:33:38:e7:90:e1:d0:12:65:bc:7f:8e:39:8d:
         66:9b:32:86:0d:a7:01:06:1b:b3:5d:95:36:f3:3c:63:b2:84:
         bd:5d:fb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:24:41 2026 by rpki-client