Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0801669e-190a-3da7-9901-5a5c60aa718a.roa
File:                     0801669e-190a-3da7-9901-5a5c60aa718a.roa (raw, json)
Hash identifier:          7rbQj4PZmGgw/43920dWBxyLmobzrXp6EAG1C9+mECk=
Subject key identifier:   06:D0:9F:01:33:8E:D5:10:CB:7E:A3:D3:46:C2:43:83:49:5E:05:BB
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B6ECE1250F89F4D647B8DC500
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0801669e-190a-3da7-9901-5a5c60aa718a.roa
Signing time:             Mon 06 Oct 2025 15:01:50 +0000
ROA not before:           Mon 06 Oct 2025 15:01:50 +0000
ROA not after:            Sun 04 Jan 2026 16:01:50 +0000
asID:                     23473
IP address blocks:        153.33.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6e:ce:12:50:f8:9f:4d:64:7b:8d:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Oct  6 15:01:50 2025 GMT
            Not After : Jan  4 16:01:50 2026 GMT
        Subject: CN=5c9cb455-ad42-468d-bf52-ef29222b6a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:24:76:1c:12:6f:b1:ef:a8:db:01:86:a7:08:
                    a4:85:89:3f:74:c8:a6:ec:06:09:ed:9c:22:bd:0b:
                    89:46:12:fe:71:22:79:57:10:43:41:79:64:03:65:
                    91:af:3a:8b:b8:32:b9:8c:8a:6f:92:d3:f2:d2:23:
                    19:fe:af:f0:1f:b6:db:ba:d5:a8:48:25:65:9e:6b:
                    8d:a7:95:8e:dd:1e:34:ee:84:a1:83:0c:9e:b6:b6:
                    60:c7:81:2a:74:20:4d:31:e9:c4:96:86:d8:60:d3:
                    ca:b2:10:06:58:86:87:99:b0:77:c1:2f:db:9d:05:
                    22:9b:72:0d:78:af:b9:5b:78:a4:67:93:24:44:6b:
                    a2:71:90:ce:7d:66:fb:be:07:12:57:b8:6b:7f:b4:
                    7d:11:8b:ef:ab:40:a6:cb:2d:64:21:a5:22:7e:1d:
                    ac:1e:e2:81:d8:f4:57:d6:0e:a9:dc:1a:13:62:56:
                    22:59:3a:f2:3d:92:6a:d2:76:bb:b0:8e:9a:1a:6d:
                    3e:93:36:a5:e3:ec:35:a6:fe:b6:e9:e5:6b:f1:a5:
                    e9:d2:77:dc:e6:88:0f:72:3f:0e:66:13:b1:7f:97:
                    61:5e:51:50:3f:7f:ef:70:69:b7:77:c4:2b:fe:84:
                    3a:23:45:9f:ae:fd:a3:e6:8b:96:2e:26:89:16:75:
                    a7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D0:9F:01:33:8E:D5:10:CB:7E:A3:D3:46:C2:43:83:49:5E:05:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0801669e-190a-3da7-9901-5a5c60aa718a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:96:fe:cf:6b:b5:92:e3:ba:97:05:89:1b:29:05:d9:2f:be:
         06:7e:7a:83:de:3d:48:97:8b:0d:f4:11:2f:d7:e1:25:a3:d0:
         c3:42:26:92:a7:aa:54:b5:b9:33:21:ce:66:24:fd:3d:a3:07:
         9d:ec:0e:46:42:5b:b3:dc:99:88:ab:8e:a7:bb:bd:54:c9:b9:
         39:5e:a8:da:35:38:47:f8:b1:4f:16:9a:5e:9d:3c:2c:c6:d6:
         38:67:b6:91:43:be:a0:bb:a7:59:be:45:a3:05:ba:69:c5:59:
         a0:d4:f9:1e:13:98:f3:5c:bd:58:90:6f:0b:4a:b3:67:d0:37:
         8e:2d:34:f2:5d:23:a5:ea:99:54:9b:50:9f:4a:09:d8:e8:24:
         3a:e0:be:34:35:3d:94:69:71:17:47:86:c0:74:f9:87:ee:11:
         8d:ad:ab:ae:16:79:e5:09:a2:1d:8c:b3:33:cf:ff:48:33:2f:
         1b:9c:43:65:81:36:52:c4:39:0e:a8:c1:8e:2c:b6:63:d4:1b:
         66:42:92:ba:0b:d1:ee:b4:d3:82:e7:c4:82:0c:e3:6f:d6:8b:
         bd:73:8b:fd:0d:b2:30:ff:f0:e7:9c:00:51:ec:c1:0e:95:11:
         49:ee:e7:b4:da:c2:44:fe:d5:9e:4c:b3:6e:28:ce:dc:0b:2a:
         8c:5b:a5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:49:30 2025 by rpki-client