Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/310b9057-c4bc-3d97-a888-c87614f6db36.roa
File:                     310b9057-c4bc-3d97-a888-c87614f6db36.roa (raw, json)
Hash identifier:          8d1tPvsgvsgtsM8vK3xIo/7hvDLdqtyjY+H7hnbt1uc=
Subject key identifier:   06:09:DA:16:6D:99:36:1C:2C:0D:9F:CF:D1:B5:C7:23:77:F0:06:17
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EB416F4455B658F0CD425E800
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/310b9057-c4bc-3d97-a888-c87614f6db36.roa
Signing time:             Sun 02 Aug 2026 13:00:12 +0000
ROA not before:           Sun 02 Aug 2026 13:00:12 +0000
ROA not after:            Sat 31 Oct 2026 13:00:12 +0000
asID:                     23473
IP address blocks:        153.33.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b4:16:f4:45:5b:65:8f:0c:d4:25:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Aug  2 13:00:12 2026 GMT
            Not After : Oct 31 13:00:12 2026 GMT
        Subject: CN=61fae93d-cd2d-43ff-974a-62fd34b3c603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d0:b2:9d:e9:6b:21:37:f4:08:90:15:3d:23:
                    38:27:b5:19:0d:ee:33:88:f9:cf:25:43:91:27:9c:
                    40:e5:4f:df:1b:94:15:08:31:f9:2b:b4:a8:43:3c:
                    97:99:05:a5:e5:bc:75:f5:f3:c2:93:63:cd:f2:d4:
                    d9:3a:ac:bf:f1:b4:93:37:8c:48:be:9a:ae:6a:c9:
                    b4:50:da:06:88:6d:ab:05:de:22:0f:e3:01:7e:ef:
                    c9:bf:a7:7c:ec:05:ae:18:a5:57:c5:fc:c0:7e:83:
                    3f:4f:fa:7e:2d:4e:4f:79:85:2d:90:88:80:69:27:
                    c9:4a:32:95:9f:db:a7:b9:e2:98:e1:12:48:11:e6:
                    a1:cd:00:c1:88:3a:c0:e0:a4:d9:86:6d:49:77:a2:
                    f0:75:21:51:33:61:d6:3e:ea:29:7c:b3:6f:5f:d1:
                    de:4e:b8:41:cd:5b:09:56:ed:53:28:ed:6c:ba:82:
                    9c:00:02:59:42:88:5e:88:f6:33:22:f6:50:6f:57:
                    60:5d:4f:dc:e1:43:94:be:db:ec:1a:3d:86:ea:e7:
                    9c:e9:85:f5:67:bf:2c:d7:1f:81:8f:73:90:61:a9:
                    b6:c5:66:d2:d4:ad:0f:51:23:74:cc:45:5c:0a:3e:
                    87:a3:3c:2c:9e:c5:44:5f:40:b2:91:d5:0f:d5:e1:
                    fd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:09:DA:16:6D:99:36:1C:2C:0D:9F:CF:D1:B5:C7:23:77:F0:06:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/310b9057-c4bc-3d97-a888-c87614f6db36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:83:cb:c9:fc:ca:31:3d:da:20:ce:62:29:f6:5c:37:27:ac:
         b4:9f:08:c6:a9:cc:52:c8:23:ce:28:ea:a0:a1:1c:a1:8a:83:
         38:5b:a5:9c:89:cf:37:63:55:fb:7c:63:4b:b7:7e:f6:df:d5:
         0f:9a:ba:61:14:1f:1f:f0:a2:26:6d:46:de:b4:bc:40:a0:0e:
         73:37:dd:1d:81:b0:6b:f3:46:24:84:72:2e:c3:3b:4a:f2:d2:
         27:cb:ad:6a:c1:25:8f:19:08:a9:87:29:1b:21:ed:2d:bb:c9:
         f4:bb:a4:7f:e7:ef:c3:4a:a9:2e:f2:82:aa:32:8c:39:d6:0e:
         5a:e5:7d:d4:69:dc:5d:c5:73:83:15:b2:92:3c:13:c8:dd:cb:
         b6:5d:0f:39:8f:42:a4:64:8e:31:70:8a:9d:c5:ee:6c:69:47:
         50:69:e5:cc:75:c7:30:15:fc:fb:80:cd:ca:bc:99:c6:7e:7f:
         72:02:08:39:2d:86:c7:fb:56:e4:62:59:e4:49:af:d9:11:11:
         77:b0:03:0a:91:82:b8:80:91:ca:e1:f9:19:54:27:32:15:de:
         80:24:46:24:1a:3d:3d:00:d0:7f:b2:f5:94:25:5b:59:5a:bb:
         82:9a:fc:ad:89:dd:17:d8:e7:85:ff:a6:a7:7c:40:d4:41:a3:
         2e:e3:31:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:44:03 2026 by rpki-client