Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/37380848-22f5-3e0c-8b8f-2db6347581d6.roa
File:                     37380848-22f5-3e0c-8b8f-2db6347581d6.roa (raw, json)
Hash identifier:          QYlzjmFfcXzWTTnXtUUWQTUu/J/CDIvTWk2QTYSqMtg=
Subject key identifier:   6E:C3:1F:78:BC:13:30:3D:04:2E:0E:CB:D5:CD:66:2C:0A:DF:EB:40
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B3126EB4BB3A38FB06F463A20
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/37380848-22f5-3e0c-8b8f-2db6347581d6.roa
Signing time:             Sun 14 Sep 2025 13:00:42 +0000
ROA not before:           Sun 14 Sep 2025 13:00:42 +0000
ROA not after:            Sat 13 Dec 2025 14:00:42 +0000
asID:                     23473
IP address blocks:        153.33.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:31:26:eb:4b:b3:a3:8f:b0:6f:46:3a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 14 13:00:42 2025 GMT
            Not After : Dec 13 14:00:42 2025 GMT
        Subject: CN=e14cccc8-d44b-489f-9586-85d96b6f3b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:12:e2:14:ae:52:fa:02:5a:f9:3f:80:87:dd:
                    81:94:47:5d:bc:7f:c2:20:25:f2:8b:70:2f:29:e7:
                    e5:e7:69:ec:3d:9e:e8:64:dd:23:49:45:89:d8:17:
                    9c:20:63:02:4a:3e:3a:3a:7e:c2:a2:13:15:ed:1b:
                    19:cd:18:2f:9d:29:64:40:bc:99:aa:78:1d:30:50:
                    73:77:a7:12:6b:63:2d:8c:4a:6b:8a:b9:ad:a1:93:
                    8b:28:58:f8:ea:97:20:f7:c3:f9:c4:23:d6:36:94:
                    2b:ce:a7:2b:39:25:35:fe:8f:87:51:1f:b2:eb:5f:
                    46:7c:4c:d4:f7:e3:0f:da:26:8e:8d:a7:42:2f:ab:
                    3e:99:a3:10:28:40:10:f4:c0:04:3c:cb:6f:06:54:
                    de:1d:d6:ff:ed:7a:ad:88:03:4c:eb:27:6e:d5:f4:
                    21:28:3f:8a:1e:b7:86:7d:e1:27:08:a7:d3:a2:4c:
                    25:fe:b4:ad:db:19:b0:81:26:88:b1:64:3e:d3:97:
                    2b:7c:03:84:46:91:ab:a2:eb:e2:52:e3:1c:94:78:
                    43:64:ed:99:d7:52:d9:22:20:28:ce:3f:6f:c2:91:
                    93:7b:52:96:4e:a1:bb:b9:24:a9:7e:2d:c9:0a:6a:
                    f0:b3:f6:a6:7f:a5:f8:c6:65:ee:c3:da:c6:28:a0:
                    95:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C3:1F:78:BC:13:30:3D:04:2E:0E:CB:D5:CD:66:2C:0A:DF:EB:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/37380848-22f5-3e0c-8b8f-2db6347581d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:82:ef:9b:b2:02:cf:22:a0:bd:7a:c9:e3:88:f1:c3:88:d9:
         02:26:ed:1d:91:81:02:ac:ff:50:62:b4:7c:42:46:b6:01:6c:
         c9:70:75:af:a4:b8:bb:fe:6f:63:3c:99:71:dd:78:76:8e:3b:
         76:53:93:8a:5a:df:20:e6:1a:b1:ff:b6:8f:dc:2a:80:3f:29:
         80:99:05:6b:f8:17:0d:b0:1c:0a:c8:1e:72:eb:28:4f:f2:14:
         74:8a:bd:04:b9:46:69:92:f4:73:34:b2:ab:19:e5:82:cd:90:
         54:3d:5f:81:bc:1e:ed:68:97:26:2a:20:0d:df:72:e2:b5:4b:
         ba:73:36:32:f2:6e:a5:64:0a:73:3a:ce:09:ec:ba:cc:ad:15:
         e8:18:4a:46:07:74:ec:bb:09:4c:a5:c1:1f:9d:6d:c1:bf:cd:
         6c:c7:07:00:bd:87:3c:75:3e:3f:7f:14:90:8b:d8:b9:52:88:
         04:99:c3:4b:9e:73:be:05:5f:1c:c8:fe:9f:f3:f9:24:50:f7:
         f1:c2:70:65:50:e9:62:e0:47:8a:cf:39:2b:f3:89:ad:f3:24:
         a9:fa:81:ff:90:2b:92:5c:d4:7b:c8:a5:3c:84:eb:db:13:8f:
         64:c7:79:ff:65:4b:9b:ad:bc:55:0c:ee:62:73:5c:e4:fd:b6:
         94:c2:94:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:57:13 2025 by rpki-client