Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4356b5b8-6130-3892-bf52-82fc8446ca15.roa
File:                     4356b5b8-6130-3892-bf52-82fc8446ca15.roa (raw, json)
Hash identifier:          7paTXNuJgIiLp0BEB8Ovf0HnpKiE+EBXJireqOSHdFE=
Subject key identifier:   76:4F:2F:A0:68:2E:A9:4A:B9:CD:0F:D8:8E:C1:4D:DB:49:33:19:35
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EBC7708485F553D4BFE00DD00
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4356b5b8-6130-3892-bf52-82fc8446ca15.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     23473
IP address blocks:        153.33.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:77:08:48:5f:55:3d:4b:fe:00:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=2880c654-53fe-45f6-aa84-c30971bed570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:79:14:bf:4c:43:2c:d0:d8:ba:a2:06:7a:53:
                    2e:a4:de:f4:94:0c:6f:be:76:94:82:34:50:65:ca:
                    91:2f:83:e5:13:82:30:d5:bb:59:ba:9d:c9:9f:3c:
                    88:0b:12:dc:4e:a4:85:5e:bf:34:c3:79:85:d8:13:
                    ca:53:91:55:ef:ed:15:19:32:55:e1:a4:b6:47:cd:
                    d0:94:29:e1:94:7d:0b:43:5e:34:84:fd:f9:97:5a:
                    03:3d:8c:ab:04:63:4f:0f:cc:b1:08:4a:81:f9:85:
                    5b:06:bf:a0:4f:f5:28:a6:53:0a:01:97:5e:c9:32:
                    27:42:34:92:27:1b:16:91:e4:93:d7:0e:fc:1c:42:
                    86:67:9d:9c:da:49:5a:53:ee:b5:04:98:dc:f8:13:
                    b7:80:34:a6:61:71:cc:07:b4:9e:d8:19:4d:50:8f:
                    7d:6a:db:d8:a0:a2:35:f2:c8:9c:6b:59:45:cc:ad:
                    7b:59:45:35:ef:13:39:25:42:18:54:3a:dd:22:51:
                    36:d5:d1:91:cb:88:ec:ab:2e:ab:e0:c9:8f:00:a3:
                    1f:49:0b:aa:1a:8d:bb:9e:e2:96:4e:d8:eb:6a:a4:
                    21:12:a9:ef:57:94:86:60:b4:02:37:cf:14:61:54:
                    7e:83:31:d1:6c:38:92:2e:fe:68:fb:db:65:33:d7:
                    f8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:4F:2F:A0:68:2E:A9:4A:B9:CD:0F:D8:8E:C1:4D:DB:49:33:19:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4356b5b8-6130-3892-bf52-82fc8446ca15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:b4:e5:61:31:84:75:fd:1e:ed:f6:f4:8c:58:1d:bf:0b:52:
         58:54:c0:9d:7d:d4:ce:8d:5d:e9:6f:1d:3e:a1:37:fe:86:f1:
         85:34:83:7a:1b:fe:57:73:3a:21:08:3b:b3:79:ec:33:c8:97:
         a9:50:a7:17:16:88:c7:de:f8:ed:ee:7d:71:56:66:06:6d:43:
         73:91:07:da:a1:8f:e9:87:0a:fc:dc:4c:db:e5:dd:ce:87:7e:
         24:c5:26:7c:e5:4d:6a:09:49:cf:a0:47:71:35:3c:31:e2:56:
         6d:87:e6:bb:15:c4:db:b1:87:54:d6:e4:4e:6c:55:00:88:c0:
         7c:ad:c1:5e:60:c8:b4:13:50:7b:c3:ee:3e:f4:80:13:d9:1a:
         9f:b0:e6:fa:f2:c2:f9:d9:5a:d1:c8:d7:21:5e:1e:58:ef:8f:
         3d:8f:ee:38:1b:84:ce:d0:83:eb:98:d5:0a:bd:05:9f:25:93:
         36:41:fa:6d:34:69:ce:84:66:0a:c7:b2:2f:41:ec:63:5f:76:
         f1:2b:5f:86:ed:a3:3e:4f:80:8c:66:21:83:f7:a9:cf:1c:c4:
         77:23:77:1f:15:de:b9:f4:fe:ff:58:2d:66:de:5c:e0:42:fe:
         6e:27:90:b5:27:ce:56:5b:2c:d8:6d:e7:24:a9:02:a2:6f:b9:
         48:58:1c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:44:50 2026 by rpki-client