Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/39538f4f-ad02-3b2b-b537-391ebf896698.roa
File:                     39538f4f-ad02-3b2b-b537-391ebf896698.roa (raw, json)
Hash identifier:          fzB4yqpDWZV+5vEfhzprpav5JL1/DM0+biH6TNTBGN8=
Subject key identifier:   C0:9B:BE:93:B6:DA:E3:C5:E7:F2:91:17:54:A1:56:EC:D6:97:0C:74
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B6ECEB232AE0007A7EEB93240
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/39538f4f-ad02-3b2b-b537-391ebf896698.roa
Signing time:             Mon 06 Oct 2025 15:03:05 +0000
ROA not before:           Mon 06 Oct 2025 15:03:05 +0000
ROA not after:            Sun 04 Jan 2026 16:03:05 +0000
asID:                     23473
IP address blocks:        153.33.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6e:ce:b2:32:ae:00:07:a7:ee:b9:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Oct  6 15:03:05 2025 GMT
            Not After : Jan  4 16:03:05 2026 GMT
        Subject: CN=9d016568-4709-40e6-8c69-f100881bce3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:86:ad:7a:a1:cc:14:b2:ae:7f:16:06:9d:82:
                    3e:eb:90:55:14:b9:19:91:1a:8f:79:40:b9:2e:2b:
                    27:9d:8a:2d:4b:c9:fd:8b:f6:13:c1:9e:6e:7f:46:
                    46:9b:01:2d:14:e0:26:57:5b:b9:2a:08:8a:9c:64:
                    bd:41:b5:66:59:cb:3d:06:26:e4:55:98:95:fb:0b:
                    99:c7:42:24:0f:21:17:af:5f:24:6f:8e:6c:73:5e:
                    06:87:9d:18:80:6a:1d:9c:96:58:db:cd:5e:75:b7:
                    71:a7:aa:02:36:93:61:d8:c3:c3:d0:46:36:02:ae:
                    a0:c6:6e:1b:81:74:be:c4:b3:5a:39:73:a5:3e:6f:
                    5c:8f:b1:48:b6:ff:33:16:b1:8b:ef:8e:6f:90:da:
                    f2:a5:85:7d:72:a7:22:c3:ff:78:06:8c:79:90:0d:
                    20:f0:49:86:ae:64:62:d9:05:8f:d7:94:f6:84:97:
                    1f:c1:40:97:84:17:bb:dd:c6:5e:a9:03:e6:d7:44:
                    71:6e:10:6e:4c:38:2a:f1:3f:98:8f:21:ff:2d:87:
                    a4:d8:07:e6:8c:3f:bc:d6:c8:10:11:e2:a3:aa:2b:
                    3a:36:03:90:4f:44:38:fd:60:63:50:1a:6d:2b:4b:
                    40:95:55:f6:cb:bb:41:c6:1f:41:7a:26:87:be:05:
                    3f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:9B:BE:93:B6:DA:E3:C5:E7:F2:91:17:54:A1:56:EC:D6:97:0C:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/39538f4f-ad02-3b2b-b537-391ebf896698.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:c0:15:5f:96:31:e8:f2:8b:95:0d:07:a3:2f:26:a3:0d:68:
         94:0c:4e:1a:c8:3b:6d:82:47:48:4d:23:45:7a:4d:dc:e7:af:
         78:f7:07:64:a8:38:91:5a:b6:0a:32:52:94:a9:67:c2:07:16:
         e6:e9:ef:0d:74:94:34:e5:ae:da:77:06:d9:d3:f9:31:04:86:
         6e:67:d1:d5:f8:5d:70:21:35:0b:d1:52:19:b6:fd:5f:84:c3:
         de:1b:e0:b2:5a:c0:1b:76:db:0a:4d:34:35:ab:ff:72:b5:ed:
         84:86:48:4c:75:a2:71:35:9f:66:2b:21:6c:e0:f2:c9:22:11:
         ab:b6:ba:ae:7e:e2:f9:00:02:7c:c4:78:d3:af:e2:7b:2d:af:
         ef:19:3d:a6:7c:43:36:94:08:53:4d:66:e6:d5:67:13:69:07:
         02:95:8e:54:24:b3:2d:bc:ac:20:c1:27:95:2a:d0:c7:58:68:
         6d:76:01:46:61:e1:da:0b:c4:4e:2d:04:20:b5:5b:72:98:db:
         f7:96:3f:59:01:38:81:e6:67:98:30:ab:4b:28:3e:cd:f8:27:
         49:60:58:c3:f1:09:7c:89:e4:0f:ea:34:8e:8a:b4:2b:e2:53:
         9b:5e:3f:fd:1e:f5:a0:d8:42:0c:3d:74:5b:fa:b9:44:c4:d8:
         84:d3:97:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:49:29 2025 by rpki-client