Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5ec3f6ec-6a1a-3817-8316-e0dc27d00448.roa
File:                     5ec3f6ec-6a1a-3817-8316-e0dc27d00448.roa (raw, json)
Hash identifier:          n0gVQWGqTQEJ5nLQyWJkRIkTdg+21Mghiszz5/u/7WE=
Subject key identifier:   C1:49:36:09:26:8D:43:C0:C6:76:B5:BC:7C:64:96:F7:7C:A3:84:CA
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F5E62E6DC1BF3E0395962B5C0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5ec3f6ec-6a1a-3817-8316-e0dc27d00448.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     23473
IP address blocks:        153.33.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:e6:dc:1b:f3:e0:39:59:62:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=86e47131-61fb-4f62-9428-e4c6a2790d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:61:df:64:77:82:20:44:39:9e:07:31:05:d0:
                    e8:09:cc:56:15:84:f2:92:2a:e1:a6:7a:7c:3e:d8:
                    b7:9c:5e:40:ff:a5:a9:88:4c:6f:58:eb:26:5e:fd:
                    29:94:cf:2f:a7:fb:e1:05:40:97:47:9c:f3:6e:98:
                    0d:ea:9d:c9:91:b4:50:5e:6a:57:a1:af:22:4b:a7:
                    4c:4f:4e:91:91:c6:22:03:3e:5f:35:9d:62:dd:7f:
                    62:da:8a:31:e0:c0:7b:53:58:cb:2c:8b:0c:de:6c:
                    1a:85:ba:b7:87:6e:93:34:7a:67:30:c6:82:f1:fb:
                    bc:07:0c:8d:28:0a:d7:a3:a8:0e:5b:71:dd:28:ab:
                    18:10:8d:bf:ea:59:35:bd:af:f0:fe:3d:c9:a8:eb:
                    c7:d0:03:c1:7c:4e:dd:54:b2:31:10:82:df:c8:f7:
                    51:4b:2e:46:f5:cf:a3:3b:92:30:84:38:45:14:83:
                    68:7d:dd:06:e3:2d:1e:78:d2:af:d1:e6:fc:04:d6:
                    5e:94:ad:aa:4a:79:90:aa:05:0c:9f:69:6c:a1:b0:
                    cc:4d:71:fa:23:13:a9:97:d4:42:76:fc:85:45:32:
                    9b:a4:e1:3a:92:52:a2:70:97:68:a0:49:3a:66:00:
                    3f:cf:be:d5:1d:56:b4:50:14:99:e8:bc:ea:cb:19:
                    b1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:49:36:09:26:8D:43:C0:C6:76:B5:BC:7C:64:96:F7:7C:A3:84:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5ec3f6ec-6a1a-3817-8316-e0dc27d00448.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:72:32:12:28:c1:96:a3:f9:73:e9:70:0c:ce:94:73:db:46:
         f8:23:7e:ec:9f:ac:ea:f2:ed:8b:af:cc:46:d2:0b:06:f2:78:
         3c:95:00:6c:2c:9b:b0:fc:ac:65:8c:4d:07:a9:c0:c8:63:96:
         23:5b:b5:21:5a:8e:ce:59:a3:0d:79:37:51:c1:b7:75:5d:be:
         1d:ef:9b:62:ef:d5:06:94:d1:4c:0a:22:f7:bb:04:ef:c6:0b:
         08:d7:11:a9:de:bd:56:9c:b8:64:38:78:7b:bf:61:ed:6c:ce:
         e1:72:2e:6d:b9:69:dc:c3:68:c1:ad:f8:96:0f:7f:94:9e:d9:
         09:d6:7e:5c:c9:f9:d2:43:2a:18:dd:5a:a9:bd:93:9a:29:91:
         a1:cf:89:7a:b5:e3:b2:dc:8f:ec:c5:ab:6f:6e:31:7e:dd:8d:
         18:0f:10:15:ff:b2:5c:42:3e:14:a7:4f:77:78:92:c8:cd:b3:
         8d:6f:33:ec:ab:94:4e:1e:d3:a7:d2:c8:ba:cf:f8:b4:34:bb:
         1a:75:96:5b:98:7e:22:9c:e8:f0:2b:eb:b2:a3:79:7a:87:c1:
         db:44:fc:fe:47:6f:48:3f:e9:0d:6a:00:b9:06:24:a9:87:b9:
         b5:27:42:4a:58:5f:2b:5d:be:0c:c2:a2:e5:76:b6:78:dc:80:
         94:5f:75:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 21:59:38 2026 by rpki-client