Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/812afa34-56bc-37a9-9d5a-7a4ca9c34279.roa
File:                     812afa34-56bc-37a9-9d5a-7a4ca9c34279.roa (raw, json)
Hash identifier:          keBIWAOeVA2ceUrtULQFiIsR8mu9nssNHlGkIJiwWXU=
Subject key identifier:   2C:DC:58:2C:30:FE:EB:CE:B1:6F:00:24:19:31:03:A9:57:49:11:B5
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B773A02589ABD1AFAD7767900
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/812afa34-56bc-37a9-9d5a-7a4ca9c34279.roa
Signing time:             Thu 09 Oct 2025 15:25:46 +0000
ROA not before:           Thu 09 Oct 2025 15:25:46 +0000
ROA not after:            Wed 07 Jan 2026 16:25:46 +0000
asID:                     23473
IP address blocks:        153.33.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:77:3a:02:58:9a:bd:1a:fa:d7:76:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Oct  9 15:25:46 2025 GMT
            Not After : Jan  7 16:25:46 2026 GMT
        Subject: CN=3e39629e-ec65-442f-8863-25e08d099e6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:94:5b:13:77:5f:d8:98:f6:5a:a5:8d:26:b6:
                    33:27:bd:1f:fe:06:0a:ba:c1:5f:a2:b0:4f:07:12:
                    56:cd:13:29:74:55:cf:1b:19:2e:d8:22:d9:50:d4:
                    c0:54:23:ff:96:ef:78:cf:15:ad:49:b9:e4:1e:c2:
                    01:a7:58:2d:8d:1a:e8:d9:7a:56:0b:5e:ee:1a:d3:
                    73:b0:32:9e:f0:66:d7:92:dd:2b:10:7c:98:e9:86:
                    47:f4:a7:57:18:b3:89:99:f9:3c:40:ac:ad:fa:06:
                    a7:ca:28:cc:ff:ff:13:a5:48:ca:6f:29:72:11:f0:
                    e4:da:c2:16:5a:55:67:60:04:68:60:81:e7:c5:d3:
                    b2:35:f6:7c:42:1c:ac:18:59:98:75:51:5b:5c:f4:
                    0b:5a:4a:3b:75:51:66:a1:21:f7:55:d6:c9:e7:3a:
                    5f:88:40:0f:d6:5f:ac:54:34:18:0b:c9:a5:f6:d2:
                    06:5e:c8:db:75:f3:d9:c3:dc:cd:b6:06:97:42:8f:
                    b0:69:da:e9:14:c4:06:7c:98:88:0d:6f:f7:00:fe:
                    98:63:f2:64:41:26:4d:b6:99:ea:f4:b5:f9:e2:9d:
                    c3:44:61:dd:7e:69:36:6a:bb:7b:b5:eb:7a:6f:3d:
                    c2:60:a8:75:a2:65:e9:3a:0d:b1:5b:66:93:05:02:
                    c9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DC:58:2C:30:FE:EB:CE:B1:6F:00:24:19:31:03:A9:57:49:11:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/812afa34-56bc-37a9-9d5a-7a4ca9c34279.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:e3:36:4d:1c:33:75:2a:05:56:e8:81:ae:1d:b8:a4:c4:87:
         16:3e:d1:7c:60:ec:5d:a1:8b:b9:80:ba:08:e4:ff:74:78:23:
         49:e2:1b:14:b4:ba:45:e9:62:09:46:d7:8f:fb:a6:ce:20:9c:
         ad:c2:27:2e:8f:9f:66:32:4c:49:12:f7:eb:46:0b:06:88:6b:
         34:98:dd:f8:2d:65:78:6a:16:9f:be:a0:20:4b:57:00:33:b2:
         6a:a9:45:9f:b4:33:77:6d:d9:57:e9:ae:fc:28:8e:65:f3:53:
         a4:5d:58:99:d3:f7:5e:57:5b:31:38:94:c8:c6:5e:2e:5b:db:
         11:10:db:76:cd:eb:2d:b0:a6:bb:af:94:3a:c4:30:13:8d:d5:
         b9:2d:a1:07:85:f5:b5:91:f0:4b:2a:06:d1:e5:53:34:9c:29:
         14:2e:7a:b9:d9:bc:b6:af:0b:06:5d:f4:52:44:2b:15:55:20:
         ca:2d:df:e5:91:66:e9:da:03:9c:35:e7:9e:c8:6f:9d:8d:0b:
         03:21:88:93:17:d6:c7:f6:3a:c3:4b:db:49:e5:3a:31:cc:27:
         e8:dc:66:e3:de:c6:60:d0:99:ca:8e:83:45:3a:16:45:99:68:
         c9:d0:c1:3a:cd:a8:7d:16:f5:d0:01:5f:d1:27:a4:61:95:7a:
         bd:85:f9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:50:43 2025 by rpki-client