Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ec772d27-1192-3c18-888b-c12668fb07a2.roa
File:                     ec772d27-1192-3c18-888b-c12668fb07a2.roa (raw, json)
Hash identifier:          UKBdoj9TZWC9VsfCkm/WvVOYJMkzcTY2VB+T25FArdo=
Subject key identifier:   83:BB:A0:08:E0:8B:B2:1A:00:C2:B1:0B:C7:EC:3C:F3:14:A9:73:FE
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B73C07EE91D16A956F032FD80
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ec772d27-1192-3c18-888b-c12668fb07a2.roa
Signing time:             Wed 08 Oct 2025 09:33:31 +0000
ROA not before:           Wed 08 Oct 2025 09:33:31 +0000
ROA not after:            Tue 06 Jan 2026 10:33:31 +0000
asID:                     23473
IP address blocks:        153.33.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:73:c0:7e:e9:1d:16:a9:56:f0:32:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Oct  8 09:33:31 2025 GMT
            Not After : Jan  6 10:33:31 2026 GMT
        Subject: CN=e7cde769-d4b5-48a6-92ce-c7055ff38f6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:15:6f:27:ac:df:78:9c:74:0e:c5:ea:b3:f1:
                    5a:4e:f4:2e:c7:b0:2f:32:c8:53:7d:14:7b:2b:52:
                    f7:48:8c:e9:c5:5f:bb:47:33:18:b9:f1:00:ee:94:
                    cf:25:f2:50:f8:42:37:df:1c:58:ad:4e:0c:8c:48:
                    33:99:6c:2f:57:ed:d3:ae:3d:44:37:24:77:21:17:
                    5e:35:42:bf:80:67:1a:b4:be:09:23:c0:ec:17:6f:
                    69:51:47:93:c1:50:4b:e3:4b:d8:06:22:0b:03:59:
                    ce:7f:38:6f:80:17:3f:69:fe:bb:96:03:81:fb:c1:
                    56:e8:3d:de:ac:53:a2:20:14:e0:ab:8a:01:1e:cf:
                    8e:fa:0f:9f:16:38:cc:f5:95:3c:d2:5a:bd:39:ab:
                    f8:78:92:f2:be:48:bb:5f:06:10:8c:85:61:27:fe:
                    41:c1:a4:96:b1:d2:e6:fb:d5:ef:c3:4c:8c:f8:43:
                    ba:01:70:fd:d2:41:f8:7d:3e:41:3e:c2:1e:c1:ec:
                    f0:db:24:d2:e1:6a:ad:c3:b0:59:22:cf:45:c9:c1:
                    51:0b:a9:11:97:43:c9:5a:25:be:eb:32:97:62:29:
                    5d:28:df:c8:11:df:d3:f9:92:10:77:2f:da:4f:50:
                    34:55:d8:c5:2a:3f:b2:ac:73:86:a8:09:0f:db:62:
                    5d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BB:A0:08:E0:8B:B2:1A:00:C2:B1:0B:C7:EC:3C:F3:14:A9:73:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ec772d27-1192-3c18-888b-c12668fb07a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:46:ff:2d:c4:73:98:e6:f2:06:91:1c:28:a4:43:7f:02:fb:
         32:a2:f2:90:e5:70:98:96:4f:b2:26:be:14:27:55:f2:2d:92:
         ce:21:fa:f6:6d:15:8b:59:b1:68:ce:b4:65:9d:39:48:2f:b9:
         e1:a5:c1:9a:14:4f:75:2f:30:37:c4:d1:e2:d6:08:05:90:c7:
         7c:af:4c:cd:ab:32:3b:fe:bf:27:a1:45:eb:c5:5e:60:53:8d:
         a4:30:da:61:c0:4d:de:d6:75:79:73:54:4c:fc:b8:04:77:1a:
         a7:56:49:b2:01:c0:8e:46:76:0d:72:58:3b:73:5a:01:16:84:
         74:f8:9e:01:ec:dc:a9:5b:23:20:d9:c8:fe:bb:40:8a:79:92:
         e8:d3:ca:5b:6a:76:80:74:e2:1d:06:71:7f:27:7b:0f:df:c6:
         80:28:e1:20:c6:6d:7d:f3:cd:cc:58:aa:7a:51:6b:45:88:d0:
         f7:4e:76:d2:d7:32:56:df:fc:9c:13:fe:dc:77:cc:70:18:3e:
         22:76:78:41:cf:4c:ae:84:64:bd:a9:3c:eb:78:c1:05:ac:ef:
         b9:93:59:20:33:20:7d:de:e7:78:55:80:22:f9:97:08:40:ea:
         ef:96:e2:86:c8:01:45:09:d4:e4:bc:71:09:2c:ce:c1:0c:51:
         b0:62:9f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:49:24 2025 by rpki-client