Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/f10a622e-1be1-3482-9538-d547ee980da2.roa
File:                     f10a622e-1be1-3482-9538-d547ee980da2.roa (raw, json)
Hash identifier:          jRqWnJ+w81HihVmlw3Ax7TrxkY1dpxLf6/XxgGZKemI=
Subject key identifier:   86:3E:C9:9C:2C:C9:32:C0:1C:14:68:50:7B:41:C7:22:F4:96:C4:63
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328584CBAE747012FB96097EC7679C0
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/f10a622e-1be1-3482-9538-d547ee980da2.roa
Signing time:             Mon 02 Feb 2026 14:00:40 +0000
ROA not before:           Mon 02 Feb 2026 14:00:40 +0000
ROA not after:            Sun 03 May 2026 13:00:40 +0000
asID:                     398101
IP address blocks:        160.153.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Feb 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ba:e7:47:01:2f:b9:60:97:ec:76:79:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Feb  2 14:00:40 2026 GMT
            Not After : May  3 13:00:40 2026 GMT
        Subject: CN=88a80b66-fb5b-4e5a-b684-dc92cee26492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c1:ef:75:e4:ac:71:b0:77:d8:af:3c:94:4b:
                    38:4f:b5:bd:f5:c6:f8:c4:08:61:72:ee:30:71:60:
                    c9:98:e5:5a:9c:bd:f2:9c:37:a7:85:9d:4c:17:55:
                    b5:dd:2b:34:b9:01:ab:c7:a0:03:fe:97:ee:1e:44:
                    f6:1b:4c:12:63:e0:3f:e1:26:5e:7b:09:13:79:58:
                    c9:78:fa:8f:d8:72:76:7b:c2:e1:23:b3:73:92:3b:
                    3a:97:9d:dd:fb:f9:4c:4f:ef:db:7f:c5:67:6f:4c:
                    89:91:12:5e:ac:5e:96:7b:63:63:d2:2b:d4:f3:c8:
                    ea:c1:98:03:30:9d:fe:3e:fe:02:7f:00:14:48:d9:
                    50:63:fb:7f:96:e7:13:cf:58:fc:67:97:ff:75:3d:
                    80:51:ef:de:98:a5:fe:d0:13:f6:8c:87:22:f7:06:
                    29:24:7e:ca:c2:84:d8:06:0a:23:7e:1e:b3:55:32:
                    c9:7d:92:8a:d2:a6:64:18:62:e5:22:1e:24:9e:64:
                    e2:6c:60:ac:27:5d:a4:2b:63:d4:35:7c:e3:04:d7:
                    f6:94:a6:02:fe:09:9e:02:f7:6e:1b:3a:ae:69:7c:
                    95:7d:e8:89:c0:40:3f:bc:6d:95:b9:4e:14:de:64:
                    35:0d:0c:00:64:61:9c:00:17:79:b2:39:d1:6c:1e:
                    f2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:3E:C9:9C:2C:C9:32:C0:1C:14:68:50:7B:41:C7:22:F4:96:C4:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/f10a622e-1be1-3482-9538-d547ee980da2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.153.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:0d:0a:cf:98:2c:5a:e6:d0:c1:31:dd:fa:3f:e6:a7:cb:cd:
         bd:94:12:a4:ce:7c:68:1f:d8:53:52:b5:27:f3:9d:2c:d5:9b:
         4f:f1:8e:6f:c8:2b:e2:a4:94:8d:1d:61:55:f2:2e:6d:9c:a4:
         fa:12:80:92:21:78:16:a6:95:ad:8a:23:30:5b:f6:36:4d:4f:
         23:e1:f7:fd:f8:6b:4d:06:27:45:ec:07:bf:ab:54:17:83:83:
         be:93:04:3c:13:57:64:cd:69:62:b5:78:b0:3b:d4:f9:4c:e1:
         01:1d:09:dd:b7:a7:da:7b:4d:11:93:0f:8d:cd:77:04:f4:5f:
         7b:ba:8c:64:46:b8:92:5b:27:09:29:14:00:05:72:d7:b2:d1:
         12:7c:5a:9a:b7:13:4b:cd:18:22:24:9c:4e:5c:04:41:27:dc:
         ce:b2:82:01:d6:56:22:22:f9:13:01:43:e4:2a:fc:46:c6:0f:
         7c:93:4e:eb:7d:52:80:db:2f:6d:2e:ba:75:ad:f8:3a:ed:2a:
         1e:12:b9:dc:48:87:e5:cd:f4:d6:5a:df:0b:a0:59:d7:f7:41:
         62:70:55:d3:72:fe:4a:f1:e7:4e:17:b9:28:a6:2f:c1:4b:dc:
         ea:f4:fe:84:92:16:50:9e:30:73:08:4d:d2:3c:3b:e0:32:47:
         86:f2:1c:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy650cBL7lgl+x2ecAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWVkNWNlODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4Y2Nm
MTNmMB4XDTI2MDIwMjE0MDA0MFoXDTI2MDUwMzEzMDA0MFowLzEtMCsGA1UEAxMk
ODhhODBiNjYtZmI1Yi00ZTVhLWI2ODQtZGM5MmNlZTI2NDkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsHvdeSscbB32K88lEs4T7W99cb4xAhhcu4w
cWDJmOVanL3ynDenhZ1MF1W13Ss0uQGrx6AD/pfuHkT2G0wSY+A/4SZeewkTeVjJ
ePqP2HJ2e8LhI7Nzkjs6l53d+/lMT+/bf8Vnb0yJkRJerF6We2Nj0ivU88jqwZgD
MJ3+Pv4CfwAUSNlQY/t/lucTz1j8Z5f/dT2AUe/emKX+0BP2jIci9wYpJH7KwoTY
Bgojfh6zVTLJfZKK0qZkGGLlIh4knmTibGCsJ12kK2PUNXzjBNf2lKYC/gmeAvdu
GzquaXyVfeiJwEA/vG2VuU4U3mQ1DQwAZGGcABd5sjnRbB7yvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIY+yZwsyTLAHBRoUHtBxyL0lsRjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1
Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZjZThjY2YxM2YvZjEwYTYyMmUtMWJlMS0z
NDgyLTk1MzgtZDU0N2VlOTgwZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWVkNWNlODAtMjI0ZS00NmFiLTk0
ZjEtMWFmY2U4Y2NmMTNmLzllZDVjZTgwLTIyNGUtNDZhYi05NGYxLTFhZmNlOGNj
ZjEzZi5jcmwwHwYDVR0jBBgwFoAUOB2fprp8wahErgn+WgCWnTv84Q8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZj
ZThjY2YxM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoJmsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEoNCs+YLFrm0MEx3fo/5qfLzb2UEqTOfGgf2FNStSfznSzVm0/xjm/I
K+KklI0dYVXyLm2cpPoSgJIheBamla2KIzBb9jZNTyPh9/34a00GJ0XsB7+rVBeD
g76TBDwTV2TNaWK1eLA71PlM4QEdCd23p9p7TRGTD43NdwT0X3u6jGRGuJJbJwkp
FAAFctey0RJ8Wpq3E0vNGCIknE5cBEEn3M6yggHWViIi+RMBQ+Qq/EbGD3yTTut9
UoDbL20uunWt+DrtKh4SudxIh+XN9NZa3wugWdf3QWJwVdNy/krx504XuSimL8FL
3Or0/oSSFlCeMHMITdI8O+AyR4byHN8=
-----END CERTIFICATE-----
Generated at Wed Feb 25 08:50:46 2026 by rpki-client