Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/48823d0b-2347-3cc6-adf5-1b442834c962.roa
File:                     48823d0b-2347-3cc6-adf5-1b442834c962.roa (raw, json)
Hash identifier:          FrwyjaZpiShfhgEpuQKfAsSJ6+IMIO3RcVeOV4qHo64=
Subject key identifier:   D2:AB:28:8C:4E:84:0A:C7:65:62:DC:AD:C8:B3:17:C1:AD:5A:B5:68
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584D300A16555F03E457FAA77E40
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/48823d0b-2347-3cc6-adf5-1b442834c962.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     23473
IP address blocks:        153.33.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:16:55:5f:03:e4:57:fa:a7:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=3c5ac75b-30ee-465b-8cea-691058028aa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:20:44:89:29:83:a7:ca:1b:72:35:ab:f5:54:
                    1c:8b:e5:2a:cc:d5:ae:28:70:07:bb:3e:85:dd:d8:
                    6a:f3:cb:fc:32:fd:22:77:93:f7:eb:31:0d:42:6c:
                    2b:d3:38:d6:69:e2:53:1d:fc:e6:a6:3f:98:bc:87:
                    3e:3a:04:e3:b9:5a:b1:0e:80:f8:e8:e1:39:ca:13:
                    c2:ae:46:14:44:01:b1:c1:57:ac:d7:5d:9b:a3:ae:
                    c3:37:06:6f:4e:b5:2f:78:88:31:ce:f0:09:bc:ba:
                    ac:12:47:2d:32:31:63:cd:ae:c9:f9:26:d5:16:ea:
                    df:a3:e8:61:84:55:af:87:a9:8a:35:9a:f2:ec:de:
                    62:b1:58:bf:08:b7:d5:08:d3:27:58:78:2e:86:94:
                    5d:b0:cf:fd:73:9a:89:b7:43:fa:8a:28:bb:a2:c9:
                    6c:32:96:b7:93:b4:4f:95:c6:f1:eb:6c:8b:21:75:
                    0e:e7:5e:29:3b:94:ff:cd:31:af:86:63:04:8b:89:
                    20:5d:bb:81:c5:1e:c1:15:13:77:c7:54:ec:4e:6c:
                    ab:60:6d:29:fe:f0:e9:cf:b7:03:b2:ac:d3:07:5f:
                    6c:e8:00:3d:89:3c:78:31:b9:5c:c3:1d:5e:c5:b7:
                    62:28:fd:19:38:79:a0:5d:ef:c4:b4:0f:3f:5b:d1:
                    10:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AB:28:8C:4E:84:0A:C7:65:62:DC:AD:C8:B3:17:C1:AD:5A:B5:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/48823d0b-2347-3cc6-adf5-1b442834c962.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:f3:68:d8:a7:d5:93:d1:48:86:d3:2d:70:12:8a:f1:f4:6e:
         05:d1:25:6e:e3:53:19:bd:f5:07:a5:ed:a0:93:3e:48:c6:82:
         0d:29:42:8a:1a:8c:0e:e0:0b:f7:e8:d5:d4:28:6d:e7:b7:e2:
         f5:03:c4:16:f1:a0:79:ff:42:82:f3:4d:0c:0c:bb:ee:32:20:
         78:28:a1:de:10:fa:11:8f:63:6a:98:24:ff:9b:67:c5:ac:6d:
         2e:d5:8e:d6:59:06:56:c8:7b:95:6c:d8:50:73:8d:15:35:22:
         66:85:4f:0c:e9:49:01:f5:81:56:e4:43:84:b8:d3:31:79:4b:
         5b:08:65:35:ff:65:da:13:f7:9e:e1:43:a7:ef:c3:fe:89:fe:
         94:54:56:ec:5d:50:23:b8:0b:f0:9a:a8:a8:b4:ad:1a:3a:96:
         bb:f4:ed:6a:47:57:d4:e6:8b:3e:6a:25:2e:2d:d7:af:d3:f0:
         d4:ea:77:55:a3:26:d5:0d:ea:3a:d2:8e:e7:d4:9b:cc:06:ad:
         24:5b:b0:1a:59:29:7c:1e:9d:46:70:2e:86:a1:4f:4f:01:6c:
         85:1f:77:41:23:5e:1f:7d:16:66:6c:3c:fa:d0:bc:90:c0:99:
         51:28:eb:4a:8d:c6:64:19:d0:8b:5f:1d:cb:8a:e9:c0:1e:27:
         b4:91:48:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 20:55:45 2026 by rpki-client