Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/99d9df56-2921-3e39-ab4b-fb1afaf6c195.roa
File:                     99d9df56-2921-3e39-ab4b-fb1afaf6c195.roa (raw, json)
Hash identifier:          A3WUD0oUwF/5aQY7NxioH9mdiBtBddWkf7wRT9pX7BI=
Subject key identifier:   03:B3:E6:21:75:13:DC:70:3D:FA:C3:7E:3A:7F:3B:7C:5D:D8:01:23
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F5E62F39622ECCB2D7B9A77C0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/99d9df56-2921-3e39-ab4b-fb1afaf6c195.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     23473
IP address blocks:        153.33.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:f3:96:22:ec:cb:2d:7b:9a:77:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=9f6e804f-ef28-4b00-8d38-3a128127e836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:73:69:7e:45:e1:d0:73:e8:4a:31:c2:4d:53:
                    d9:60:47:5e:3a:96:21:d8:71:20:3a:49:24:42:5d:
                    e6:29:3c:8f:03:1b:74:3b:cf:a3:c2:8b:3a:77:10:
                    6c:a7:56:11:6a:f5:4f:0f:e4:ea:22:86:3c:a7:65:
                    1d:ee:f2:77:72:df:72:bc:51:5b:ae:14:ef:61:78:
                    85:d9:ef:30:80:68:18:15:31:9c:67:1c:be:97:66:
                    a3:89:4d:61:86:7a:e7:bc:d9:9d:66:29:64:d3:2b:
                    df:53:21:dd:bf:80:32:01:ab:42:c2:31:23:f4:3f:
                    5c:dd:ba:2a:b8:7e:a5:b2:35:75:1b:0e:b3:85:43:
                    fd:71:e3:ff:49:5e:63:02:bd:ec:04:93:75:d8:a3:
                    f8:f9:e4:45:15:cb:e7:ef:62:89:a2:47:93:21:af:
                    65:95:7b:21:07:75:3e:c3:a1:7b:ce:74:2b:de:c9:
                    b2:06:71:b5:2a:ad:5b:68:15:99:64:d5:eb:58:f7:
                    20:e7:10:00:af:4f:89:ce:a5:fa:8a:89:a8:0c:3d:
                    a3:61:71:fc:db:fd:ec:12:e0:c2:f0:05:a0:9a:22:
                    92:43:33:88:c5:5e:0a:23:26:c7:63:c9:da:4d:39:
                    85:49:c4:66:31:58:84:54:ce:f2:20:a0:cb:e2:67:
                    6e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B3:E6:21:75:13:DC:70:3D:FA:C3:7E:3A:7F:3B:7C:5D:D8:01:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/99d9df56-2921-3e39-ab4b-fb1afaf6c195.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:ce:40:07:3b:2d:71:33:57:e5:f2:22:98:a7:1f:f9:d3:42:
         c0:7c:c1:f1:b1:8b:71:c9:27:cb:1b:cd:c0:9b:1b:23:1c:8c:
         3d:06:a1:c4:65:3b:bd:3b:22:47:16:ba:9d:57:e8:70:23:13:
         bd:be:3c:d2:9d:5d:9c:b8:b2:4e:06:29:7a:0e:0a:3e:ab:87:
         88:e7:ef:77:c5:e3:f3:5b:2f:90:fc:0e:c3:af:9e:8d:0b:d8:
         a3:33:7f:b2:16:72:e3:48:c7:f3:2e:76:fc:6a:76:32:ca:9e:
         a2:63:0f:59:6c:b6:94:58:73:8b:e5:f9:04:c7:90:1d:ad:13:
         71:ee:c6:c6:7d:5e:ae:96:5c:f7:44:20:d4:81:86:fa:fc:fc:
         5d:be:98:50:d7:0b:c3:a6:ac:8f:30:f3:3d:7f:da:32:3c:a0:
         3b:14:88:a3:f5:f9:87:3a:d8:57:38:90:61:73:2d:35:ee:6a:
         07:a2:fe:26:f9:00:5b:93:5e:40:b7:c2:30:58:d6:4b:26:01:
         d7:99:c8:1b:78:e1:15:e5:8c:61:01:14:e2:e0:6a:55:c1:6a:
         99:b4:0a:a5:40:c8:a5:2b:51:d0:e5:33:34:3d:91:d5:77:4d:
         f8:24:65:64:a9:bd:1f:7d:a5:c6:44:6c:9d:32:14:01:36:18:
         c2:6f:8b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 18:04:24 2026 by rpki-client