Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/36d13d5b-dd9e-3759-96c1-741f44376448.roa
File:                     36d13d5b-dd9e-3759-96c1-741f44376448.roa (raw, json)
Hash identifier:          ErySrEp361gKUr3OtByZeFif7XboNHWe0eurGsbrU+w=
Subject key identifier:   BB:9D:E3:A9:6C:D2:F7:4F:96:EC:6E:37:98:68:BF:B9:01:6B:10:23
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B73BD495B3A8844F557D9B0C0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/36d13d5b-dd9e-3759-96c1-741f44376448.roa
Signing time:             Wed 08 Oct 2025 09:27:03 +0000
ROA not before:           Wed 08 Oct 2025 09:27:03 +0000
ROA not after:            Tue 06 Jan 2026 10:27:03 +0000
asID:                     23473
IP address blocks:        153.33.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:73:bd:49:5b:3a:88:44:f5:57:d9:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Oct  8 09:27:03 2025 GMT
            Not After : Jan  6 10:27:03 2026 GMT
        Subject: CN=3a755cc7-95c3-43b7-98f0-2039b7901731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1a:bd:ce:61:29:cb:f5:39:b1:74:b2:e3:9d:
                    e9:2d:1d:65:b3:51:dc:1d:23:1e:92:69:a3:fa:ce:
                    dd:52:be:3e:a9:04:5b:89:98:49:03:38:6b:76:4d:
                    65:d4:b9:17:a1:b3:65:50:0c:96:c9:34:99:7d:f0:
                    55:38:07:dd:e0:64:38:97:ff:31:55:94:b1:a6:aa:
                    50:71:0f:fc:55:0c:cf:76:ba:1e:05:a3:2e:73:e4:
                    17:f5:b9:47:d1:89:3e:2b:b5:bb:a3:e3:8d:85:7d:
                    a8:5f:39:1b:11:ca:70:d6:60:0e:b1:97:2b:dc:f4:
                    da:43:13:f2:ca:af:e8:e0:af:98:9c:ce:44:db:40:
                    b7:b6:54:25:0b:9d:7e:08:45:6f:95:b4:e9:3a:5d:
                    74:26:cd:99:24:8f:ce:77:8e:90:35:22:97:5a:35:
                    b4:af:df:45:03:d6:6c:f3:f2:30:4e:c7:c2:45:74:
                    07:f0:4d:4a:f5:b7:67:0e:a0:74:e4:16:0e:42:cd:
                    cf:ae:0c:86:5f:94:41:fa:94:6c:e8:62:3d:48:83:
                    7d:b8:e6:4d:ac:1e:b5:61:16:2a:48:61:5c:9e:08:
                    49:c9:87:9d:de:40:9e:a6:9b:a8:e3:9e:b8:42:99:
                    c8:3e:25:91:bf:c3:49:db:30:f2:f9:a7:0c:c5:3d:
                    33:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:9D:E3:A9:6C:D2:F7:4F:96:EC:6E:37:98:68:BF:B9:01:6B:10:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/36d13d5b-dd9e-3759-96c1-741f44376448.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:92:a7:53:8b:e2:a7:15:c8:a8:db:9e:ef:22:10:6a:4c:22:
         c0:3e:25:48:fd:d5:7e:f1:ba:b2:8f:fa:17:24:56:77:4d:f3:
         8b:01:c3:92:5a:95:d9:56:fd:c4:36:6f:cb:03:ae:28:b9:8d:
         f5:8b:12:de:bf:e1:2c:e2:bf:c7:ea:6d:26:80:c0:97:0b:3d:
         47:f0:cf:be:ca:d6:08:fc:78:17:84:f8:cb:c6:75:86:ad:b9:
         a1:55:7e:f2:5e:4e:13:88:a0:ae:d6:c1:e4:07:f1:49:d2:64:
         d7:39:c8:de:0c:fd:13:21:87:76:41:e4:80:4c:40:cd:c4:20:
         50:39:2c:7e:8e:a2:56:19:13:48:8a:3e:0f:b2:f6:50:9a:35:
         a1:95:73:15:85:fd:71:eb:59:c2:39:e6:e8:bc:78:9a:f8:f5:
         2e:3a:84:0a:bb:87:ec:d8:05:72:91:c2:00:33:57:43:69:a5:
         5b:f9:db:98:60:4e:73:28:a6:e0:68:6c:a2:2c:0c:fc:a3:48:
         72:dd:f5:68:35:82:0e:56:7c:56:d9:70:de:3e:c4:c7:d0:c4:
         de:51:41:6b:89:3c:98:15:b6:c0:a7:c1:c0:ae:b1:b4:b7:59:
         57:68:d7:32:14:c3:a0:5f:d5:1c:ad:0a:41:72:bf:37:41:ed:
         75:0a:a3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 06:16:58 2025 by rpki-client