Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/8b400545-e32b-3df8-a0e0-a6c00d49422c.roa
File:                     8b400545-e32b-3df8-a0e0-a6c00d49422c.roa (raw, json)
Hash identifier:          miYfv+z0iKLsvFcxRudAIXLOokx2bvouEkNv71zlN0w=
Subject key identifier:   C9:B1:63:A3:FF:CB:AD:2D:5C:6F:BC:8D:75:E0:20:8B:46:E6:55:21
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B71B79B0DB9CF20A4A90515F8
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/8b400545-e32b-3df8-a0e0-a6c00d49422c.roa
Signing time:             Tue 07 Oct 2025 16:03:59 +0000
ROA not before:           Tue 07 Oct 2025 16:03:59 +0000
ROA not after:            Mon 05 Jan 2026 17:03:59 +0000
asID:                     23473
IP address blocks:        153.33.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:b7:9b:0d:b9:cf:20:a4:a9:05:15:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Oct  7 16:03:59 2025 GMT
            Not After : Jan  5 17:03:59 2026 GMT
        Subject: CN=62ad7d16-eff1-4ae5-809a-c81c1d859c52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3c:25:30:6b:e0:fe:c0:9c:55:17:b4:10:97:
                    7c:7f:94:aa:85:9a:57:fb:7f:17:9e:39:97:68:2d:
                    66:02:4a:60:d5:e4:bc:03:43:a5:14:44:15:02:0f:
                    44:7a:f5:44:c4:54:d6:40:f8:af:2d:fe:22:df:72:
                    bb:41:4c:98:56:72:7a:21:f3:46:ed:21:38:58:94:
                    8b:b6:f3:78:34:32:2f:3c:4a:39:5c:1c:ab:58:8a:
                    d6:11:fa:77:86:d1:99:a2:d3:e3:35:26:fe:db:0f:
                    60:99:bd:40:7e:c4:9f:f8:38:b2:6e:4d:4b:0d:e1:
                    c3:1d:40:cd:ca:df:72:11:6a:e1:09:a5:e2:9c:95:
                    4c:31:8c:b6:88:29:0b:93:a2:c0:37:65:c3:35:3e:
                    f8:59:19:0a:59:a5:f3:3b:c0:55:43:d8:39:be:8d:
                    b0:99:4a:45:ce:27:b6:fd:75:3a:2a:67:d4:89:99:
                    bd:47:82:66:7b:1c:bc:57:cf:3c:b5:01:aa:0a:7b:
                    d6:7e:a3:ab:5c:2a:c3:e5:ca:64:34:f6:cc:27:62:
                    d6:ab:b9:70:77:31:83:b6:25:de:23:19:82:f0:64:
                    c5:9a:83:53:6a:90:28:c2:17:89:f1:a4:ec:e1:17:
                    3c:ce:ea:4c:88:3a:c9:8c:d4:fb:e2:41:3c:53:40:
                    ea:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B1:63:A3:FF:CB:AD:2D:5C:6F:BC:8D:75:E0:20:8B:46:E6:55:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/8b400545-e32b-3df8-a0e0-a6c00d49422c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:e7:a3:c9:5a:ed:fd:12:83:ad:52:a8:b1:c3:e8:25:d7:7b:
         3c:22:46:bb:e9:3a:e7:35:b4:8a:b0:15:81:a9:b9:1a:48:8b:
         20:8d:06:b6:9a:d4:a1:ee:48:90:88:c6:f7:92:81:87:93:8a:
         70:58:9e:da:17:27:b2:85:ca:74:46:f5:3e:9f:c5:e8:14:f9:
         d6:32:66:20:04:8e:ab:ba:6a:94:92:51:57:12:a1:2d:4e:62:
         b9:4c:bd:b7:7b:c4:db:3a:cd:21:58:23:e6:38:d0:d8:f0:24:
         b9:ec:a3:f6:fc:1e:ba:60:5b:68:fa:a6:03:f2:31:79:4f:ba:
         2b:05:00:82:16:53:0f:ca:c2:5a:56:f0:86:98:69:d2:16:8d:
         f0:a7:de:ac:89:ff:2c:1e:4f:c1:03:7d:4c:4b:2d:9e:5e:fa:
         52:4c:a7:1e:5b:f7:ea:af:b1:7f:53:3c:8d:ca:ca:c5:62:26:
         a5:b1:7a:89:3c:e5:75:69:81:52:ac:b3:dd:88:c4:a1:b6:b6:
         ee:be:4e:24:6e:1c:c3:6c:84:35:ea:1d:a0:82:7e:1f:69:7d:
         b4:e0:79:86:43:ae:3e:71:cb:4a:53:d6:9f:b6:b3:7c:be:78:
         4d:7f:48:3e:2b:44:14:f8:5a:e8:90:4d:be:80:85:da:b8:e8:
         de:78:6b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:58:30 2025 by rpki-client