Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/351f3b9b-1a9b-3f75-9987-5baa8b1fd15e.roa
File:                     351f3b9b-1a9b-3f75-9987-5baa8b1fd15e.roa (raw, json)
Hash identifier:          H9BNt3FVHfTaqrBDbRLNDc1DTr7Q3+JctR7x9ANLXTo=
Subject key identifier:   8A:F0:13:2C:45:2B:B1:A8:BC:7E:B9:21:96:27:C0:B0:05:C4:6F:BE
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F57682ED50C34F663A560EF80
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/351f3b9b-1a9b-3f75-9987-5baa8b1fd15e.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     23473
IP address blocks:        153.33.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:2e:d5:0c:34:f6:63:a5:60:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=c688f275-1948-4997-b74f-dbc89070ba17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:79:f1:f7:ec:12:1a:c0:cb:6a:94:11:ac:0f:
                    bf:87:09:26:a8:96:74:9a:87:48:35:51:57:2e:77:
                    c6:0c:fd:8b:74:01:6b:92:b4:8a:b1:08:8d:19:84:
                    54:34:0d:b9:1a:70:9d:5d:06:45:da:f0:79:93:7f:
                    29:27:54:b0:c4:92:fb:9f:d4:ac:73:9b:b6:56:69:
                    a9:6a:4a:68:c2:6f:2c:89:e6:38:11:95:b5:d6:19:
                    25:18:7d:fc:75:9d:b5:6f:e2:95:62:0e:01:28:22:
                    7b:59:68:6b:0c:84:4b:ad:56:c4:46:83:15:4f:04:
                    b8:ec:9c:20:8e:2d:ba:67:1c:dd:10:1a:64:80:34:
                    87:4b:0d:72:dc:7b:6b:ff:f3:4b:0c:86:73:7f:79:
                    f4:f6:c9:fe:34:6e:03:64:2c:99:f4:71:e8:59:70:
                    c5:b8:88:d5:5d:bd:f0:b7:d9:35:2d:54:ea:28:44:
                    83:f9:41:56:b3:f4:79:6d:f0:97:a9:16:ee:7d:60:
                    40:cf:4a:b6:a5:4b:c5:0a:06:dd:73:44:58:61:87:
                    02:47:fd:53:4d:d4:9f:1c:97:cb:ef:90:b2:23:be:
                    5e:d6:84:db:24:b6:01:a0:51:34:81:e0:e9:81:cf:
                    5e:72:6b:2e:e3:a3:08:5c:80:13:6f:44:19:14:d1:
                    cf:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F0:13:2C:45:2B:B1:A8:BC:7E:B9:21:96:27:C0:B0:05:C4:6F:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/351f3b9b-1a9b-3f75-9987-5baa8b1fd15e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:65:fa:9c:a0:f2:be:d4:74:99:cb:d2:a6:d5:f5:8d:e7:9f:
         36:a6:0a:14:f5:64:a6:5c:0a:f0:16:cf:89:e1:49:bc:6a:1d:
         54:5e:9f:2e:27:69:d8:f7:f4:23:82:71:14:52:5b:f3:e5:97:
         84:be:36:a0:61:87:01:7c:f4:6b:c7:5d:05:ce:9c:9c:bb:a7:
         0e:56:d4:cb:d2:5a:aa:a3:9b:a7:5f:75:94:03:a9:8f:20:e5:
         95:a3:4e:44:70:04:06:bf:c8:b4:ae:24:bc:89:99:5a:e3:e6:
         b7:06:9f:55:ce:99:9d:9c:16:23:46:06:32:54:64:f4:46:76:
         b1:40:ce:7c:5b:db:9b:2d:25:c9:07:97:a4:4b:e8:70:87:90:
         35:f8:71:e9:b3:5e:99:d1:a0:06:10:26:8a:b3:33:53:0f:0c:
         4f:49:a1:d8:03:0c:76:0d:72:1a:29:77:06:0d:68:83:47:8d:
         ba:59:43:b2:c4:c5:d6:a8:b2:a6:f1:46:60:04:52:88:23:64:
         d5:75:20:a6:50:99:f0:80:2c:e4:d2:44:f9:0f:95:87:31:a9:
         2e:30:9f:3b:bd:c3:5f:bc:e4:f9:73:42:74:54:4a:8b:84:19:
         19:bd:93:94:15:1f:a5:60:94:b4:c8:ed:c0:20:c1:d5:c4:65:
         4e:54:94:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 04:02:23 2026 by rpki-client