Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c4c9fb1f-74a0-35f6-85b1-457d92e1b158.roa
File:                     c4c9fb1f-74a0-35f6-85b1-457d92e1b158.roa (raw, json)
Hash identifier:          U9lUd0Y3k8FwXg3M++k7rMhkcZB2BspPVOlOuYEWxMo=
Subject key identifier:   DE:9F:33:4B:E4:ED:12:55:A2:CF:7C:0E:60:59:43:88:07:ED:2B:F6
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B71BEA25D9471D0DEE0C84DC0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c4c9fb1f-74a0-35f6-85b1-457d92e1b158.roa
Signing time:             Tue 07 Oct 2025 16:18:09 +0000
ROA not before:           Tue 07 Oct 2025 16:18:09 +0000
ROA not after:            Mon 05 Jan 2026 17:18:09 +0000
asID:                     23473
IP address blocks:        153.33.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:be:a2:5d:94:71:d0:de:e0:c8:4d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Oct  7 16:18:09 2025 GMT
            Not After : Jan  5 17:18:09 2026 GMT
        Subject: CN=a45a36c7-09d1-4069-b49c-77dc92e2f52f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f1:fc:c4:da:27:3a:7e:22:28:2d:90:f1:03:
                    f1:20:6f:4c:a5:ef:b1:5c:de:f2:79:74:55:2f:72:
                    76:12:21:48:b4:b1:58:b7:53:d7:cd:cd:de:72:be:
                    f5:50:23:c0:68:c2:68:f7:b6:9c:93:9b:b6:a0:34:
                    01:e4:d0:36:0f:9f:8c:fd:3d:b4:fc:c9:ac:30:10:
                    7b:93:f9:6a:eb:60:fb:db:2b:9d:7f:0c:4d:0d:22:
                    41:4d:5f:83:f7:99:e2:59:5b:46:0d:87:5e:51:c4:
                    11:9d:f1:70:82:43:c2:74:d9:b7:7e:b5:ea:20:73:
                    7e:fe:e8:4d:67:5e:3b:cb:b7:19:01:a3:1b:93:d7:
                    2a:95:61:d6:84:38:a5:1d:53:a3:a1:19:a2:b1:f9:
                    33:fb:7d:c6:a4:e2:7a:fe:d3:8e:e8:71:d8:b6:27:
                    09:d3:29:b9:85:a9:aa:73:97:5f:7c:1b:b6:e3:6f:
                    fe:21:ef:36:47:86:7d:cb:79:bc:bd:72:bd:68:64:
                    5c:f0:6b:65:4e:4c:c7:e5:bb:c7:71:e9:4c:f2:0a:
                    ee:aa:0f:28:79:b9:97:88:84:6e:f4:ee:48:c0:9f:
                    37:e7:89:27:c2:9e:af:be:ba:80:9b:bd:2f:79:22:
                    1c:ce:a0:6f:4e:6b:34:28:ba:61:07:28:13:94:c6:
                    f9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9F:33:4B:E4:ED:12:55:A2:CF:7C:0E:60:59:43:88:07:ED:2B:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c4c9fb1f-74a0-35f6-85b1-457d92e1b158.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:d4:84:8b:0c:1f:59:5f:5a:da:c3:3d:7f:23:dc:e0:4d:63:
         10:5f:eb:50:96:d9:d0:66:83:ae:5e:cf:f5:1d:9e:1c:fe:78:
         c2:74:df:36:7a:59:7d:97:22:74:5d:e1:2d:4b:11:48:a1:da:
         7a:19:7c:06:60:69:c8:54:40:73:50:7e:da:09:40:cd:73:7e:
         08:8a:c0:6c:12:c5:41:9d:89:b5:ca:fb:ad:c3:e7:a3:2e:6a:
         f1:7e:5c:c9:a4:c7:ea:07:9e:35:13:f1:7f:4a:d9:13:c5:b0:
         1d:e3:8b:c0:71:85:88:00:f5:c7:49:5a:83:12:a0:cf:11:54:
         55:a5:cc:a1:40:59:0d:f9:71:c9:06:0b:d3:3a:27:ec:43:e5:
         4c:f1:dc:02:df:f3:60:4a:dd:7a:54:a0:e7:e5:c1:ef:1d:8a:
         7c:f0:3d:07:21:4a:68:34:2d:3d:cd:51:ec:ae:4c:e1:c0:47:
         74:f8:ba:47:3d:57:8e:6e:91:9d:31:4e:d3:1f:94:d1:3b:cf:
         24:57:37:ca:3e:98:17:b7:0c:08:2c:4c:45:5d:fa:2d:4c:60:
         67:66:45:4b:0f:cd:15:c5:b4:36:7f:3c:39:a2:22:85:91:c7:
         19:45:a1:ed:b1:b1:fc:7f:fc:4a:5d:11:97:02:b8:b8:a8:ed:
         53:7f:7e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:46:40 2025 by rpki-client