Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3b0135f5-807b-3866-b6d8-58969cea8883.roa
File:                     3b0135f5-807b-3866-b6d8-58969cea8883.roa (raw, json)
Hash identifier:          FNrgkD77RrpFDNiqc2TGeYBp/L9tTvWlVs/Ztxu7YFo=
Subject key identifier:   6B:19:CA:BE:B1:01:2F:90:B0:ED:58:6C:29:07:77:CD:7E:59:9C:6E
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EBC77162948BC4A8C5CB5F180
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3b0135f5-807b-3866-b6d8-58969cea8883.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     23473
IP address blocks:        153.33.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:77:16:29:48:bc:4a:8c:5c:b5:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=71df9e99-c913-4429-9ee2-7f9187624906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f0:73:3f:77:11:ca:dd:09:44:c7:01:24:9a:
                    99:26:34:a8:0c:53:66:f2:c4:df:fb:7a:22:31:b7:
                    02:29:e7:f8:7f:24:f1:1a:a2:12:f7:76:41:24:8d:
                    2b:53:9f:a4:5e:20:7a:da:c9:bd:f3:97:01:29:78:
                    7b:ca:8d:d6:2a:44:a7:30:b8:a3:5f:2b:8d:ea:be:
                    40:94:c0:ab:d9:44:7d:9a:eb:9e:d1:54:25:26:b0:
                    45:37:9a:50:21:a7:c9:c0:13:44:67:d8:49:2d:d5:
                    db:e1:e4:ad:79:40:46:47:45:7a:b8:89:69:34:8a:
                    ff:ef:fa:de:18:cb:69:f5:11:c3:24:51:86:e2:2b:
                    e6:02:eb:e7:3b:77:3b:ad:cb:19:bb:d6:51:e9:6a:
                    64:c5:93:a8:c3:f5:e0:a5:d5:a1:97:35:f3:b4:63:
                    01:91:20:fc:bf:cf:39:9d:87:12:12:3f:e9:79:1e:
                    69:ee:5f:7f:fa:5e:bf:d7:2a:3f:63:7a:7e:ff:06:
                    23:82:de:8e:9f:7e:e8:d6:01:03:f2:54:c4:25:1a:
                    2c:a9:d9:4c:d5:d7:47:bb:63:2f:44:90:35:e8:21:
                    0a:8b:76:5c:c9:75:39:e1:f1:84:a9:42:f1:df:c2:
                    e8:cb:f3:5c:d1:ba:9b:71:3c:4d:d6:cd:7c:ec:c9:
                    24:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:19:CA:BE:B1:01:2F:90:B0:ED:58:6C:29:07:77:CD:7E:59:9C:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3b0135f5-807b-3866-b6d8-58969cea8883.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:68:80:5c:23:64:ab:0e:52:ab:91:3f:ee:f8:7c:e3:c5:3c:
         2d:21:37:42:04:34:89:c1:8c:e6:99:6f:e5:4c:3b:12:34:57:
         5a:ce:9a:90:fd:64:18:70:7b:ce:d3:3e:5e:7b:a6:1f:a0:e1:
         77:e8:1a:9b:f1:5a:87:f1:40:eb:2f:5e:b8:e3:60:d7:1e:35:
         95:6c:1c:5e:19:54:87:41:64:c1:14:65:c1:c4:89:78:92:d0:
         94:99:f4:2e:be:c7:fc:ee:a7:db:25:f5:02:45:2b:e4:c4:5b:
         08:16:4b:0c:9e:f7:4f:8c:69:0d:40:07:12:6b:f5:70:4d:44:
         01:ba:21:a1:73:fb:dc:32:7b:ac:b3:30:ce:fd:cb:aa:7e:ef:
         b3:0b:96:03:3d:2b:3f:fc:f8:42:df:60:03:f8:b6:c3:35:3f:
         ab:78:2e:c0:12:dc:16:35:75:ef:48:99:f0:87:a2:e6:56:28:
         9f:01:60:0f:b7:43:8d:ab:b3:d6:a6:4d:ef:39:0e:f0:0a:f9:
         ff:e0:33:dc:3f:c8:3a:89:81:27:18:6a:e6:5a:10:1e:4b:96:
         83:80:fb:71:c2:73:47:45:7a:4a:62:17:a1:22:37:1b:a2:10:
         9f:33:f6:09:e5:5b:1d:f7:32:a8:12:ed:b0:26:34:e9:26:11:
         36:b7:57:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE68dxYpSLxKjFy18YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI2MDgwNTEzMDAxMloXDTI2MTEwMzE0MDAxMlowLzEtMCsGA1UEAxMk
NzFkZjllOTktYzkxMy00NDI5LTllZTItN2Y5MTg3NjI0OTA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/BzP3cRyt0JRMcBJJqZJjSoDFNm8sTf+3oi
MbcCKef4fyTxGqIS93ZBJI0rU5+kXiB62sm985cBKXh7yo3WKkSnMLijXyuN6r5A
lMCr2UR9muue0VQlJrBFN5pQIafJwBNEZ9hJLdXb4eSteUBGR0V6uIlpNIr/7/re
GMtp9RHDJFGG4ivmAuvnO3c7rcsZu9ZR6WpkxZOow/XgpdWhlzXztGMBkSD8v885
nYcSEj/peR5p7l9/+l6/1yo/Y3p+/wYjgt6On37o1gED8lTEJRosqdlM1ddHu2Mv
RJA16CEKi3ZcyXU54fGEqULx38Loy/Nc0bqbcTxN1s187MkkEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGsZyr6xAS+QsO1YbCkHd81+WZxuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvM2IwMTM1ZjUtODA3Yi0z
ODY2LWI2ZDgtNTg5NjljZWE4ODgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSHKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAElogFwjZKsOUquRP+74fOPFPC0hN0IENInBjOaZb+VMOxI0V1rOmpD9
ZBhwe87TPl57ph+g4XfoGpvxWofxQOsvXrjjYNceNZVsHF4ZVIdBZMEUZcHEiXiS
0JSZ9C6+x/zup9sl9QJFK+TEWwgWSwye90+MaQ1ABxJr9XBNRAG6IaFz+9wye6yz
MM79y6p+77MLlgM9Kz/8+ELfYAP4tsM1P6t4LsAS3BY1de9ImfCHouZWKJ8BYA+3
Q42rs9amTe85DvAK+f/gM9w/yDqJgScYauZaEB5LloOA+3HCc0dFekpiF6EiNxui
EJ8z9gnlWx33MqgS7bAmNOkmETa3Vzc=
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:45:53 2026 by rpki-client