Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/93b077eb-dcaa-3327-8a1f-990198635af3.roa
File:                     93b077eb-dcaa-3327-8a1f-990198635af3.roa (raw, json)
Hash identifier:          +JUHiHr76vZeG2WRJV4bu25hWEzLXfVfMGTJ7ptxkkQ=
Subject key identifier:   80:24:B9:0F:97:C0:36:BB:24:DD:F8:2E:27:04:E8:69:A4:3D:83:70
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B73C5884DEE9A0E7653098640
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/93b077eb-dcaa-3327-8a1f-990198635af3.roa
Signing time:             Wed 08 Oct 2025 09:43:40 +0000
ROA not before:           Wed 08 Oct 2025 09:43:40 +0000
ROA not after:            Tue 06 Jan 2026 10:43:40 +0000
asID:                     23473
IP address blocks:        153.33.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:73:c5:88:4d:ee:9a:0e:76:53:09:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Oct  8 09:43:40 2025 GMT
            Not After : Jan  6 10:43:40 2026 GMT
        Subject: CN=a9fdf624-c980-45a5-aa94-f52d184c84e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:80:ea:7b:75:9e:93:4f:37:44:d0:99:36:c6:
                    dd:20:a7:db:63:ef:4c:35:91:5b:a3:eb:e0:83:1f:
                    32:28:a1:32:04:47:84:20:d9:5b:fc:4a:39:79:d5:
                    eb:cd:91:e0:9d:f4:b6:13:51:80:73:51:1a:eb:09:
                    2d:34:83:41:91:4f:6f:e9:72:8d:d4:9f:75:7f:1e:
                    4f:d4:65:ad:52:46:dc:b2:f7:71:97:e0:94:d7:9a:
                    31:91:9e:f9:90:3c:50:b9:d6:5a:ae:f7:b3:ed:a7:
                    b2:aa:34:0b:98:a9:dc:da:11:c4:e4:91:ee:85:1f:
                    ce:62:0a:b2:cd:b0:23:49:eb:e5:ea:1f:5f:23:3b:
                    b6:77:e5:05:6a:fa:50:3a:b8:7f:01:df:45:6f:94:
                    af:e7:93:4f:0d:9f:be:af:dd:2a:e3:ab:ba:47:cb:
                    69:e1:27:bc:5c:ab:76:9c:83:2a:89:99:ba:8c:14:
                    63:8d:92:c3:22:b6:07:16:73:a6:e9:be:ea:31:1c:
                    10:bb:68:e2:2e:ce:cb:cb:5a:44:05:1f:08:1a:ed:
                    f7:af:52:f4:b4:47:4b:b4:6b:c9:19:fa:f1:c7:91:
                    f3:f8:11:89:bf:61:02:50:31:cf:30:03:17:2a:bf:
                    b1:a0:62:ac:1a:8f:df:bd:bb:e4:06:cc:3d:95:c8:
                    fb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:24:B9:0F:97:C0:36:BB:24:DD:F8:2E:27:04:E8:69:A4:3D:83:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/93b077eb-dcaa-3327-8a1f-990198635af3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:81:c9:66:39:2c:27:e7:c9:8b:95:37:52:34:3c:79:99:c8:
         1f:44:31:f5:71:6d:36:84:82:69:1b:c3:4e:1a:61:1b:d4:5f:
         98:10:c9:00:5d:30:15:8d:4c:ad:a4:c5:4a:69:1e:90:c2:db:
         56:d1:7b:9a:3d:cc:08:71:85:12:23:a5:52:76:49:e2:fd:98:
         92:e3:4c:be:c2:13:1e:f7:67:57:59:2b:3a:58:b1:a1:b6:31:
         ba:06:30:7a:b6:88:03:5f:a2:61:52:b0:23:0f:81:43:87:f1:
         ca:c9:66:ed:5a:08:d4:53:08:c0:e7:c7:d3:64:8a:e2:42:75:
         b1:0c:5e:4d:30:57:89:f9:56:c5:0e:a0:db:00:eb:ca:92:34:
         a8:21:23:5b:bc:6b:83:66:0f:02:99:cb:f4:6a:b4:81:e5:5e:
         3c:d9:3e:c7:be:1d:46:c4:94:50:9b:f5:84:a5:0f:d4:92:2d:
         a2:9f:4f:8f:68:d9:a5:e3:3f:15:55:40:41:1b:79:25:24:73:
         24:b7:fe:30:ee:68:fd:d1:f7:df:a7:7e:8d:cd:e7:fe:c8:57:
         e9:18:a5:c1:1f:03:f8:b5:ae:a5:ba:5a:1b:6b:6c:cf:b5:b6:
         ce:df:8a:95:71:17:2f:4b:27:c9:96:b3:46:fb:5a:43:a8:ad:
         e8:8e:9f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:49:39 2025 by rpki-client