Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3c5ab506-46ab-3f31-a253-c65c7b33438b.roa
File:                     3c5ab506-46ab-3f31-a253-c65c7b33438b.roa (raw, json)
Hash identifier:          UMQAG//9jQusfJePz45Qrvk0KEQ6o8GbFJxy9hKBE1A=
Subject key identifier:   BB:92:D6:A7:64:06:A1:E0:37:BC:44:CE:DD:7B:0E:FC:C0:AD:DA:1D
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B6EEE11655D34512D1A708C80
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3c5ab506-46ab-3f31-a253-c65c7b33438b.roa
Signing time:             Mon 06 Oct 2025 16:06:18 +0000
ROA not before:           Mon 06 Oct 2025 16:06:18 +0000
ROA not after:            Sun 04 Jan 2026 17:06:18 +0000
asID:                     23473
IP address blocks:        153.33.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6e:ee:11:65:5d:34:51:2d:1a:70:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Oct  6 16:06:18 2025 GMT
            Not After : Jan  4 17:06:18 2026 GMT
        Subject: CN=24ddb2ef-4bd9-41a8-b482-af997020005e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0d:a4:9f:68:d2:6e:5a:b8:58:e9:07:8f:75:
                    5d:b5:d1:fc:d3:5c:45:50:f7:3e:f8:44:67:83:02:
                    6a:4a:d0:ce:95:d1:2c:2a:55:5c:50:f5:e0:72:f1:
                    6a:2b:83:e4:cf:8c:4f:7d:f4:f6:2c:3a:3c:d6:53:
                    49:62:29:a0:e2:b4:86:41:4e:e9:a0:f0:77:5e:43:
                    d8:8a:30:e2:93:63:65:c8:d5:1d:e4:d7:c5:39:f2:
                    6c:a9:4e:24:fb:4e:1f:df:f7:64:1f:03:64:76:fb:
                    1f:b0:f9:50:ac:7a:eb:66:78:f8:0d:c8:e2:06:7b:
                    d2:c1:1a:f1:16:54:42:b6:65:28:2e:86:86:03:61:
                    8e:42:e4:04:a9:28:56:e8:42:88:79:b4:78:a7:a5:
                    89:37:e9:e0:71:7e:9a:8b:c6:d7:3a:5b:0e:33:74:
                    fc:a8:56:e8:da:d1:1f:3a:e8:12:e5:24:4f:a6:c3:
                    a9:54:3b:b5:96:01:0d:7a:9c:28:6f:0e:59:c0:75:
                    d3:fe:85:7c:fe:7e:c5:d6:c2:b6:c7:1b:ff:ee:3b:
                    d3:04:e2:c2:2a:60:dd:03:9c:0e:6f:93:f6:bc:63:
                    12:c7:34:7b:94:b9:2d:f8:7b:0c:d4:f3:5a:e0:93:
                    1a:52:a7:79:27:01:34:d4:5a:b4:15:4f:aa:cc:2e:
                    94:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:92:D6:A7:64:06:A1:E0:37:BC:44:CE:DD:7B:0E:FC:C0:AD:DA:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3c5ab506-46ab-3f31-a253-c65c7b33438b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:b9:d7:5a:63:08:6f:51:9a:8a:7d:77:d4:df:67:0b:4e:e4:
         09:53:f5:13:b1:1d:90:7c:5e:71:41:b9:53:d3:33:1a:1b:e1:
         2e:fc:39:3e:69:ef:ea:ba:73:6a:d0:02:17:99:f3:66:8a:51:
         a1:31:e7:aa:b4:86:6b:aa:d1:99:c4:c2:58:6f:62:35:e6:2e:
         d3:52:b5:59:15:52:e3:ff:34:0d:7f:17:41:9f:d9:d2:d4:dc:
         bb:c7:e8:6e:46:2f:c2:e4:5f:54:0e:bf:87:08:78:eb:27:fd:
         ff:64:d4:9d:98:7e:4e:2c:6c:f4:2e:4d:35:3b:16:0c:52:f7:
         a4:16:e1:e3:0d:e6:3b:b7:5f:b9:41:1f:fa:1f:f1:97:5e:a0:
         d9:fa:fc:fa:ab:05:1a:c0:7a:07:14:38:d4:6b:ad:57:59:fd:
         f5:9a:66:f0:10:53:4d:b3:a4:c8:fa:23:1f:08:d0:1a:89:21:
         ce:5d:73:22:46:fb:85:cf:6c:80:c4:ef:ec:89:ef:2c:fa:cf:
         c9:0f:c2:3e:3f:3b:f2:e4:55:66:a1:8e:e0:a2:07:bd:d1:53:
         f6:ae:e7:8b:a2:db:01:9d:97:af:ed:a5:1d:4c:07:ac:cd:33:
         a3:e8:c6:ab:99:ea:b5:e5:1f:96:be:49:f6:19:10:73:dd:fb:
         9a:b3:33:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtu7hFlXTRRLRpwjIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI1MTAwNjE2MDYxOFoXDTI2MDEwNDE3MDYxOFowLzEtMCsGA1UEAxMk
MjRkZGIyZWYtNGJkOS00MWE4LWI0ODItYWY5OTcwMjAwMDVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3w2kn2jSblq4WOkHj3VdtdH801xFUPc++ERn
gwJqStDOldEsKlVcUPXgcvFqK4Pkz4xPffT2LDo81lNJYimg4rSGQU7poPB3XkPY
ijDik2NlyNUd5NfFOfJsqU4k+04f3/dkHwNkdvsfsPlQrHrrZnj4DcjiBnvSwRrx
FlRCtmUoLoaGA2GOQuQEqShW6EKIebR4p6WJN+ngcX6ai8bXOlsOM3T8qFbo2tEf
OugS5SRPpsOpVDu1lgENepwobw5ZwHXT/oV8/n7F1sK2xxv/7jvTBOLCKmDdA5wO
b5P2vGMSxzR7lLkt+HsM1PNa4JMaUqd5JwE01Fq0FU+qzC6U5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLuS1qdkBqHgN7xEzt17DvzArdodMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvM2M1YWI1MDYtNDZhYi0z
ZjMxLWEyNTMtYzY1YzdiMzM0MzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSFQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABW511pjCG9Rmop9d9TfZwtO5AlT9ROxHZB8XnFBuVPTMxob4S78OT5p
7+q6c2rQAheZ82aKUaEx56q0hmuq0ZnEwlhvYjXmLtNStVkVUuP/NA1/F0Gf2dLU
3LvH6G5GL8LkX1QOv4cIeOsn/f9k1J2Yfk4sbPQuTTU7FgxS96QW4eMN5ju3X7lB
H/of8ZdeoNn6/PqrBRrAegcUONRrrVdZ/fWaZvAQU02zpMj6Ix8I0BqJIc5dcyJG
+4XPbIDE7+yJ7yz6z8kPwj4/O/LkVWahjuCiB73RU/au54ui2wGdl6/tpR1MB6zN
M6PoxquZ6rXlH5a+SfYZEHPd+5qzM/M=
-----END CERTIFICATE-----
Generated at Fri Oct 10 03:50:52 2025 by rpki-client