Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/eed85237-d4bb-3b8b-889c-294d310a36d4.roa
File:                     eed85237-d4bb-3b8b-889c-294d310a36d4.roa (raw, json)
Hash identifier:          Q/LC8WnkzcGyCI3p7CzpD8xFJZkybkEJVe9kFDwMFg8=
Subject key identifier:   D3:3D:0D:C7:CA:09:18:7A:3E:FD:A0:58:6D:9A:CD:F9:55:91:EF:02
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B71C113664AFAB989B5807FC0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/eed85237-d4bb-3b8b-889c-294d310a36d4.roa
Signing time:             Tue 07 Oct 2025 16:23:04 +0000
ROA not before:           Tue 07 Oct 2025 16:23:04 +0000
ROA not after:            Mon 05 Jan 2026 17:23:04 +0000
asID:                     23473
IP address blocks:        153.33.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:c1:13:66:4a:fa:b9:89:b5:80:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Oct  7 16:23:04 2025 GMT
            Not After : Jan  5 17:23:04 2026 GMT
        Subject: CN=74ad5cf8-e4ed-45cf-b4e4-1e781ecbb740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bf:d3:07:20:26:ec:19:46:20:a6:9e:bd:2d:
                    5e:62:70:9c:9a:98:66:ed:54:84:b4:02:5a:3c:52:
                    06:8d:6d:8e:d2:38:ea:bd:67:c1:f0:17:fb:01:3d:
                    ee:2d:92:4a:30:aa:9c:5a:e5:46:73:ca:da:10:20:
                    c9:90:95:60:30:19:53:52:d9:7c:22:70:c8:db:16:
                    0a:5e:1e:99:86:cb:98:90:43:9e:18:1a:dd:60:c2:
                    50:71:02:f5:2b:44:67:5f:cf:68:5f:6e:24:c3:1a:
                    2f:41:30:00:25:3e:66:75:f0:bc:81:d2:00:bf:af:
                    32:2e:9b:61:b1:88:67:ba:9a:71:8b:e4:64:53:1f:
                    d8:12:80:3b:b9:48:ca:88:5a:2a:68:48:03:0d:e5:
                    25:3e:4a:34:74:94:00:e4:44:b3:7c:e1:33:97:82:
                    df:f9:db:86:57:e3:f0:2f:fb:86:58:c6:c1:ec:be:
                    12:69:68:22:09:a0:2c:ae:ae:3f:24:fa:55:46:32:
                    73:e4:f5:de:82:d7:ef:2c:61:85:78:f5:4f:9d:20:
                    53:57:7b:ec:df:be:52:ff:48:cd:57:0a:d6:c1:4d:
                    de:cc:91:97:a3:20:67:3b:1f:c8:d2:82:3a:b2:3d:
                    22:03:a9:80:40:e7:d9:b5:b8:b6:71:96:ee:a4:48:
                    13:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3D:0D:C7:CA:09:18:7A:3E:FD:A0:58:6D:9A:CD:F9:55:91:EF:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/eed85237-d4bb-3b8b-889c-294d310a36d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:e8:19:02:b8:ba:89:9e:83:30:a9:ba:89:ae:45:cd:20:dd:
         c4:8d:48:26:b2:e8:54:52:45:1b:fc:76:98:c9:0b:a8:da:fd:
         ff:c2:63:d9:9a:d3:b8:d2:90:3f:b8:45:c6:d4:45:4c:72:fb:
         76:8c:1d:4a:22:c3:8e:2d:31:86:39:6e:27:3d:43:1f:40:bf:
         39:8e:0d:b3:be:08:1d:86:42:45:2e:08:46:0a:c4:be:3c:25:
         06:a4:4e:88:59:c4:22:ec:42:86:74:48:e7:7a:93:d2:b2:8b:
         8e:a9:d4:f0:48:bd:8c:53:c1:39:56:76:97:cf:43:6c:fd:8d:
         3e:a6:50:07:85:d4:cf:a9:17:b9:a6:ef:6b:57:20:0a:31:00:
         ab:aa:56:7e:b1:e8:be:b0:c6:41:2a:af:75:79:fa:7a:84:96:
         cc:47:1b:0c:37:77:46:93:f3:44:de:f2:50:87:b4:e1:71:09:
         14:03:4e:11:b1:02:e8:29:eb:34:1e:c9:a7:ae:55:52:ae:47:
         20:3c:91:84:ab:48:59:e4:53:05:c0:0a:8f:b1:ab:10:a2:ed:
         6a:23:2f:26:b0:53:08:17:ef:89:f6:a5:34:8a:63:39:ec:3b:
         88:dd:d2:3a:41:10:d8:4f:24:d2:a5:ff:c1:e4:f3:26:6b:5d:
         12:f9:64:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:46:42 2025 by rpki-client