Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/22d55422-b973-3df1-845a-9ff2810ed000.roa
File:                     22d55422-b973-3df1-845a-9ff2810ed000.roa (raw, json)
Hash identifier:          y/egfWL6vRP+bKMcxEGzs0Jf79kgR02CvdRGQzDGf0o=
Subject key identifier:   2A:99:84:AC:39:8F:70:E0:BC:E7:E6:25:B2:E4:CC:48:CD:EA:6A:62
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584D3704BF3F7E22533B23161340
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/22d55422-b973-3df1-845a-9ff2810ed000.roa
Signing time:             Thu 19 Mar 2026 01:00:31 +0000
ROA not before:           Thu 19 Mar 2026 01:00:31 +0000
ROA not after:            Wed 17 Jun 2026 01:00:31 +0000
asID:                     23473
IP address blocks:        153.33.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:37:04:bf:3f:7e:22:53:3b:23:16:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Mar 19 01:00:31 2026 GMT
            Not After : Jun 17 01:00:31 2026 GMT
        Subject: CN=b79c029b-9a9d-433c-b717-448d06dca167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d5:af:1b:8f:9d:04:e5:82:e2:6b:db:67:27:
                    db:6b:2e:1c:6c:0b:6b:fd:80:49:7b:94:48:c6:a3:
                    d6:8b:1b:f6:a1:34:6e:63:27:1a:6a:a7:f0:23:ec:
                    ea:02:a3:1b:43:d1:93:de:ce:18:1a:f3:60:c7:5e:
                    79:c3:8c:ea:61:be:72:c9:8f:8e:94:7d:28:58:bc:
                    32:a4:ed:b9:c3:61:c2:2c:2c:4b:a3:40:b7:1f:65:
                    1d:86:c5:f3:77:6a:3a:c6:02:71:c6:8e:da:b1:5f:
                    b1:79:e7:99:0e:4d:ae:8a:32:85:1f:66:ad:4e:98:
                    f6:f0:43:e4:c8:c9:58:93:e7:56:30:8a:df:7b:02:
                    1a:f1:bd:ed:fe:9f:20:b6:e6:a7:6f:b0:27:a4:81:
                    03:8f:7a:2a:6b:14:bf:4b:9f:84:7e:84:04:70:e9:
                    65:0a:49:c0:ac:24:4a:eb:33:8a:b8:d1:2a:c2:03:
                    31:1e:a5:ab:fd:5b:43:3e:f4:c9:50:6d:28:3b:67:
                    ff:7d:6c:70:0a:36:d7:45:db:c9:99:60:d6:b4:17:
                    07:16:22:cb:72:0e:fd:6a:4a:f2:44:42:36:6a:9d:
                    28:3c:01:e9:36:a0:04:ee:f1:a2:38:09:56:fe:74:
                    d8:db:14:4d:b8:e1:4b:8c:ab:5e:ae:50:76:1b:b4:
                    1a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:99:84:AC:39:8F:70:E0:BC:E7:E6:25:B2:E4:CC:48:CD:EA:6A:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/22d55422-b973-3df1-845a-9ff2810ed000.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:11:0e:9d:09:d4:11:43:3e:24:b2:45:29:0c:89:e9:eb:16:
         5d:4b:c8:42:23:ee:fd:e8:9a:16:f1:1b:d3:d7:9a:66:9c:74:
         0b:74:e3:3e:32:7b:18:ed:0f:c2:c8:3f:00:ec:6d:57:2d:30:
         fa:6a:01:bb:49:7b:5d:b3:1a:10:71:11:f4:f6:b7:cc:9c:88:
         f7:1a:22:ba:a7:09:df:43:9a:3e:43:25:1a:92:db:76:a3:6b:
         3a:0a:0a:e7:e3:e9:da:4b:b2:33:de:e0:4b:ac:32:c8:c4:47:
         29:38:0f:84:0f:b1:17:57:ad:42:46:5b:fb:75:98:0a:c5:8d:
         47:4b:31:1a:e0:f7:bb:3f:14:41:79:79:6e:e8:3b:ea:34:45:
         6a:87:72:46:38:bd:87:20:e3:59:9b:09:1a:ff:d7:c7:30:68:
         57:ef:d2:f6:ad:10:dd:74:29:96:a2:cf:90:70:f4:67:5f:e9:
         2c:4e:59:a8:a2:1e:7a:a3:3e:c4:e9:b8:33:0f:61:04:d2:a2:
         33:f6:7d:79:52:ca:71:15:81:34:9b:19:bd:d7:b2:a0:c0:0c:
         6e:40:c2:28:3d:68:bc:26:13:35:22:e7:98:40:6e:39:88:21:
         33:cd:53:31:6a:d5:a0:7d:9f:50:c0:01:e9:bf:0d:3a:4e:4f:
         9f:5b:d2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 20:58:56 2026 by rpki-client