Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/350b1221-b495-35a8-a540-bfc9a9d2a860.roa
File:                     350b1221-b495-35a8-a540-bfc9a9d2a860.roa (raw, json)
Hash identifier:          6evYdfxUCvykz9h/3yTd67sMnzzqlyLVihWCPdoVtx8=
Subject key identifier:   2C:07:39:33:93:9F:A7:D8:D4:FF:50:1F:BA:9E:B8:68:D9:5D:AA:36
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EB9AC52C9B6BEC3C02D219900
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/350b1221-b495-35a8-a540-bfc9a9d2a860.roa
Signing time:             Tue 04 Aug 2026 13:00:12 +0000
ROA not before:           Tue 04 Aug 2026 13:00:12 +0000
ROA not after:            Mon 02 Nov 2026 14:00:12 +0000
asID:                     23473
IP address blocks:        153.33.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b9:ac:52:c9:b6:be:c3:c0:2d:21:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Aug  4 13:00:12 2026 GMT
            Not After : Nov  2 14:00:12 2026 GMT
        Subject: CN=44b3984b-0b24-4607-9d76-6991a5db8cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8d:fd:98:20:8d:65:19:c3:cf:6d:9b:db:26:
                    49:54:5f:6f:f2:21:26:00:d1:66:b5:c1:8d:c1:84:
                    ea:ea:70:81:49:a0:0a:31:fa:d1:5f:e9:e0:12:67:
                    09:cb:8a:f5:09:5b:6d:bb:ca:65:ec:6e:26:ca:dd:
                    9a:c0:74:a3:c1:b9:8c:84:83:4f:29:93:e6:fd:21:
                    35:e4:8b:98:62:be:7f:fb:cc:49:e2:23:0a:e9:28:
                    0c:da:d8:18:e9:13:3a:78:3c:a7:de:ea:83:f3:5e:
                    b2:b7:e7:48:9c:26:05:97:ed:9c:96:b9:a4:ae:2a:
                    70:c3:72:08:06:71:72:af:39:d0:ba:df:c1:d4:01:
                    74:23:a4:8e:5a:eb:ef:76:1e:8d:90:be:b4:bf:20:
                    1f:9c:c8:64:9b:92:f1:2f:6e:ec:0d:e1:aa:89:45:
                    5f:49:e4:04:22:1c:17:90:3e:f9:30:8e:85:df:6f:
                    a0:1f:3f:f5:36:79:62:ca:d3:af:dc:fc:4d:a6:f2:
                    e2:a0:4d:82:8c:35:57:ea:7f:e4:f7:d2:ea:93:28:
                    bb:2b:69:eb:18:54:ab:9f:38:01:61:0f:81:f5:40:
                    57:2c:f9:24:e0:f7:0d:38:3b:46:e6:ce:3e:96:40:
                    05:dd:cb:dd:5e:ab:3f:5e:56:59:42:87:9e:9d:d7:
                    84:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:07:39:33:93:9F:A7:D8:D4:FF:50:1F:BA:9E:B8:68:D9:5D:AA:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/350b1221-b495-35a8-a540-bfc9a9d2a860.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:60:df:35:3d:11:9b:c7:66:ea:70:98:89:cc:22:80:72:4b:
         54:45:97:06:76:39:08:21:87:ca:5c:ff:07:12:26:5f:5b:a4:
         f7:c3:fe:bb:32:db:c3:c3:ba:e9:8a:1e:50:0d:c3:ce:ce:dd:
         3c:05:fd:f5:fb:a1:8b:a9:b4:0b:65:a3:a6:10:8e:e3:15:f2:
         92:f0:bb:6e:f2:e8:8b:4f:ed:e5:36:fc:66:dd:08:9b:96:80:
         74:23:c9:95:8f:5a:02:c8:22:d3:6d:fa:7a:c7:bf:2b:51:1a:
         30:a0:cc:09:8d:dd:79:32:9d:32:7d:fd:83:a3:d3:54:eb:b5:
         89:61:18:e1:03:59:53:1d:6d:68:8e:69:af:b3:e5:6b:38:36:
         f7:d9:b1:48:c4:01:79:05:72:a0:05:d3:a4:43:b4:14:c4:a8:
         2f:e8:95:47:ff:f1:c5:93:09:3e:87:eb:eb:27:bd:16:86:ab:
         6e:65:2b:28:db:41:b6:13:0e:c3:60:34:4e:91:e6:aa:43:5e:
         13:ba:3a:23:5d:1a:61:d2:be:df:ce:8b:e6:92:ff:7c:80:b4:
         d3:34:f8:9d:ef:5b:8b:72:b6:13:fb:5a:81:e5:d2:75:f2:5e:
         c2:98:4d:0c:36:6e:2a:96:dd:ff:75:b3:eb:79:08:91:c0:7c:
         39:e2:27:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE65rFLJtr7DwC0hmQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI2MDgwNDEzMDAxMloXDTI2MTEwMjE0MDAxMlowLzEtMCsGA1UEAxMk
NDRiMzk4NGItMGIyNC00NjA3LTlkNzYtNjk5MWE1ZGI4Y2MwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY39mCCNZRnDz22b2yZJVF9v8iEmANFmtcGN
wYTq6nCBSaAKMfrRX+ngEmcJy4r1CVttu8pl7G4myt2awHSjwbmMhINPKZPm/SE1
5IuYYr5/+8xJ4iMK6SgM2tgY6RM6eDyn3uqD816yt+dInCYFl+2clrmkripww3II
BnFyrznQut/B1AF0I6SOWuvvdh6NkL60vyAfnMhkm5LxL27sDeGqiUVfSeQEIhwX
kD75MI6F32+gHz/1NnliytOv3PxNpvLioE2CjDVX6n/k99Lqkyi7K2nrGFSrnzgB
YQ+B9UBXLPkk4PcNODtG5s4+lkAF3cvdXqs/XlZZQoeendeEqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCwHOTOTn6fY1P9QH7qeuGjZXao2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMzUwYjEyMjEtYjQ5NS0z
NWE4LWE1NDAtYmZjOWE5ZDJhODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSG6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAxg3zU9EZvHZupwmInMIoByS1RFlwZ2OQghh8pc/wcSJl9bpPfD/rsy
28PDuumKHlANw87O3TwF/fX7oYuptAtlo6YQjuMV8pLwu27y6ItP7eU2/GbdCJuW
gHQjyZWPWgLIItNt+nrHvytRGjCgzAmN3XkynTJ9/YOj01TrtYlhGOEDWVMdbWiO
aa+z5Ws4NvfZsUjEAXkFcqAF06RDtBTEqC/olUf/8cWTCT6H6+snvRaGq25lKyjb
QbYTDsNgNE6R5qpDXhO6OiNdGmHSvt/Oi+aS/3yAtNM0+J3vW4tythP7WoHl0nXy
XsKYTQw2biqW3f91s+t5CJHAfDniJ9s=
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:45:55 2026 by rpki-client