Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/6346d9f1-9e1f-39f6-b559-f6f3d812b2ce.roa
File:                     6346d9f1-9e1f-39f6-b559-f6f3d812b2ce.roa (raw, json)
Hash identifier:          JOsynrViFCPXhoc51AvaXPxvvHsrwrLSNX9fIm/mEtk=
Subject key identifier:   9E:7F:B0:51:B5:49:09:BD:03:26:EF:24:75:8D:66:3F:1F:71:CD:86
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584D39CF7C29B2FBFE4B42297580
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/6346d9f1-9e1f-39f6-b559-f6f3d812b2ce.roa
Signing time:             Fri 20 Mar 2026 01:00:32 +0000
ROA not before:           Fri 20 Mar 2026 01:00:32 +0000
ROA not after:            Thu 18 Jun 2026 01:00:32 +0000
asID:                     23473
IP address blocks:        153.33.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:cf:7c:29:b2:fb:fe:4b:42:29:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Mar 20 01:00:32 2026 GMT
            Not After : Jun 18 01:00:32 2026 GMT
        Subject: CN=4ca1f274-a4d1-4553-85da-2d1a5d5fe767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b3:22:6e:a7:f0:1b:fb:4e:42:f4:cb:2d:dc:
                    a7:fc:a9:9f:32:a5:fe:eb:f6:6c:42:32:4d:1f:c7:
                    f9:76:8e:69:39:1b:b1:ee:90:31:7f:d5:a0:31:ff:
                    6a:bb:5a:bc:ae:82:a8:0e:1a:b8:36:08:3e:c6:43:
                    18:92:88:bb:18:02:7c:5e:b9:59:98:00:b4:82:d9:
                    e3:cc:ba:df:ab:6c:b9:e9:61:41:c1:a2:f8:55:f0:
                    bb:4b:fa:07:ec:e4:f2:29:09:d0:50:a1:a7:f7:a6:
                    b5:0a:67:39:ef:ca:4b:5b:3b:a4:02:c6:9f:e9:47:
                    15:08:d8:26:e7:80:78:d1:7c:69:75:92:1c:56:8c:
                    e9:c8:c8:19:94:12:cb:f7:6a:85:a0:2b:85:67:41:
                    19:58:ae:7b:72:e6:a9:30:1d:f5:55:ef:b2:13:db:
                    a9:4a:be:d4:3d:ee:b1:c8:21:1d:fa:b5:fd:15:10:
                    d3:a8:df:e7:fd:b8:54:dd:09:2a:96:65:20:39:ac:
                    d1:a2:a6:3d:7b:08:3a:78:40:3f:b4:25:65:08:e2:
                    79:95:65:e6:64:35:57:cb:7f:c4:5e:59:6d:4f:6f:
                    d2:33:3b:9a:51:fe:55:93:f1:ca:3f:70:f7:52:17:
                    4a:11:78:9b:fa:bd:6e:52:1a:33:33:b1:16:04:b8:
                    4d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7F:B0:51:B5:49:09:BD:03:26:EF:24:75:8D:66:3F:1F:71:CD:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/6346d9f1-9e1f-39f6-b559-f6f3d812b2ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:5e:f0:3b:a7:56:59:d8:13:a4:a4:fd:8e:e6:fb:8c:b4:39:
         98:2c:9f:b0:4c:88:56:be:8a:76:3c:5c:a5:ca:e4:d1:6e:6d:
         93:41:50:da:20:61:ac:70:ed:5e:66:0b:01:a1:52:8f:44:cf:
         61:c1:fd:46:cf:17:cc:d2:a7:77:95:73:d6:62:a0:39:88:34:
         50:19:51:19:4c:27:68:22:c0:77:2a:f3:00:de:f8:00:0b:35:
         ba:d6:ae:2b:99:e9:11:50:a8:d8:b9:91:4d:10:14:93:43:7a:
         88:6d:1d:34:e0:43:08:66:1e:94:ae:db:8a:2f:ba:e9:ec:07:
         25:82:40:4d:5c:bc:bd:c9:00:77:a1:43:00:a0:ab:7a:1d:da:
         e3:37:e5:51:30:e3:d9:ef:c8:25:40:6e:63:42:35:4b:7f:ef:
         fa:ae:b2:f7:ac:be:30:44:dc:7e:e5:0f:64:37:e3:8b:24:46:
         03:2e:ea:e7:f3:d1:64:77:1d:22:7d:53:39:e8:03:85:77:8a:
         59:68:3a:1e:6d:48:00:5c:49:b7:12:08:e6:bf:c6:00:35:2c:
         b2:4e:f9:1f:34:88:8f:34:42:4f:2b:50:dd:bb:39:7d:00:92:
         c5:56:6b:c7:6c:d9:bf:c4:53:01:ad:3f:da:e3:84:22:a3:d1:
         f5:5c:29:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 20:56:49 2026 by rpki-client