Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d8e0d83b-b7b8-3749-958e-92125d792895.roa
File:                     d8e0d83b-b7b8-3749-958e-92125d792895.roa (raw, json)
Hash identifier:          7AwEJiHp3ifi+HdIUd2OGsLOoaaTgf2FgrzH/XZHBtM=
Subject key identifier:   E9:39:DF:12:2F:2D:26:0D:01:53:E0:6D:93:96:41:F0:4F:D8:54:2F
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B66ADA2E60600B6F440698F00
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d8e0d83b-b7b8-3749-958e-92125d792895.roa
Signing time:             Fri 03 Oct 2025 17:10:00 +0000
ROA not before:           Fri 03 Oct 2025 17:10:00 +0000
ROA not after:            Thu 01 Jan 2026 18:10:00 +0000
asID:                     23473
IP address blocks:        153.33.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:ad:a2:e6:06:00:b6:f4:40:69:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Oct  3 17:10:00 2025 GMT
            Not After : Jan  1 18:10:00 2026 GMT
        Subject: CN=c693190e-da96-431a-867e-cb814e50eb49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:85:7d:77:3f:69:ff:91:4b:bf:2a:8a:66:25:
                    f3:ca:9f:17:f4:4e:4b:92:eb:22:a1:c6:65:f0:ec:
                    02:d0:88:50:81:60:1e:5c:57:e5:2b:f2:12:6d:28:
                    1a:64:ca:07:4a:f8:a5:35:43:d9:af:46:54:42:99:
                    c9:41:c5:5c:3e:b9:fe:7f:4c:28:01:ad:28:47:4b:
                    3e:00:60:ad:68:45:3e:c2:3f:6e:38:18:a5:6f:c8:
                    11:cf:5a:af:a9:99:fb:d8:e4:26:e4:42:96:48:57:
                    fb:89:e3:4c:ae:b5:65:0a:9c:f8:22:f9:3a:f4:10:
                    4c:a7:9f:69:38:74:c9:d7:94:04:77:b3:4d:a1:64:
                    8d:4f:ee:c1:98:7c:30:fe:53:4a:da:46:14:fe:64:
                    50:c8:8c:f7:a9:b9:58:0f:6b:59:da:51:46:99:f9:
                    31:fd:ac:25:68:48:51:c6:97:a1:99:f2:17:a2:8b:
                    e3:3e:b6:2f:f0:4e:90:9a:9f:f2:4d:17:7b:44:4f:
                    4b:f6:7d:a5:2f:00:f7:24:14:40:a5:c4:3f:6b:ca:
                    85:4c:c5:f8:6a:db:6c:53:f6:7e:1c:a1:42:7c:a6:
                    9c:38:f2:16:33:d3:04:45:71:c9:5c:cb:36:34:94:
                    3f:50:af:f3:59:95:6b:09:07:61:58:d4:f1:c2:65:
                    d1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:39:DF:12:2F:2D:26:0D:01:53:E0:6D:93:96:41:F0:4F:D8:54:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d8e0d83b-b7b8-3749-958e-92125d792895.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:73:93:56:95:e3:ae:86:67:0c:c2:ed:3d:57:77:7a:dd:83:
         af:a5:f7:61:94:7c:ce:3d:82:5b:97:6c:ee:75:5d:24:a6:62:
         9b:42:60:c5:0f:36:3c:db:40:28:35:78:c7:82:89:99:ae:85:
         8f:7a:12:0b:b9:02:40:52:93:ee:41:45:db:e1:1a:a3:11:8c:
         a9:30:66:1f:5e:91:7a:66:7c:65:8d:1c:b5:9f:2e:8e:7b:28:
         70:aa:9f:88:b3:51:e4:a4:a2:82:66:31:19:f1:24:56:e0:a2:
         5b:4d:d1:fb:5f:2f:79:cc:9e:95:03:47:1d:49:c3:4f:e2:da:
         ba:90:d6:89:7e:f6:d9:e3:9b:a7:3d:8b:32:ba:53:ce:49:a4:
         6c:92:15:c1:6f:b0:85:62:bb:d3:fb:45:99:c0:b6:b4:a3:ab:
         9a:45:1b:48:ad:e8:26:ab:45:17:bb:67:ae:05:36:99:15:e1:
         59:21:80:50:e3:d1:3c:7a:5a:9e:5c:20:7f:de:2b:79:b0:55:
         f3:43:60:6f:6e:99:01:12:f4:31:19:d2:7e:f3:d4:dc:6d:5e:
         5b:5d:c6:a9:05:e7:1d:c6:f7:5a:79:25:26:88:9f:d5:0c:2a:
         2b:1b:df:4c:b6:6d:06:39:05:40:ab:90:64:13:f9:95:f3:da:
         49:6b:c6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:49:24 2025 by rpki-client