Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a6e1366b-3dca-369f-96e6-5b61d89ff0a2.roa
File:                     a6e1366b-3dca-369f-96e6-5b61d89ff0a2.roa (raw, json)
Hash identifier:          /5BoVYQOeZwS+SC4TETOPDcWOg9vpnPxMjzCp4c0ako=
Subject key identifier:   BA:D8:ED:EF:FB:A3:78:FE:AC:6C:70:B1:A3:83:57:D6:31:F3:CE:C1
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EB9AC53DE2AE642EB7F9F3100
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a6e1366b-3dca-369f-96e6-5b61d89ff0a2.roa
Signing time:             Tue 04 Aug 2026 13:00:12 +0000
ROA not before:           Tue 04 Aug 2026 13:00:12 +0000
ROA not after:            Mon 02 Nov 2026 14:00:12 +0000
asID:                     23473
IP address blocks:        153.33.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b9:ac:53:de:2a:e6:42:eb:7f:9f:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Aug  4 13:00:12 2026 GMT
            Not After : Nov  2 14:00:12 2026 GMT
        Subject: CN=7a26ed01-f7cc-4f84-aa18-ccdb64a36963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8d:5c:7d:f5:7f:19:a9:a8:19:7b:70:14:c5:
                    fc:75:9d:e2:ff:bc:62:1e:bb:26:a7:ca:20:3a:58:
                    86:c2:05:cd:86:70:48:67:b6:aa:f6:86:da:ad:7b:
                    df:52:f1:89:dd:04:58:11:ef:dd:3e:b3:6f:7a:6d:
                    de:1b:bf:8c:c0:19:97:dd:a7:66:8c:31:05:74:b5:
                    9a:48:0d:02:c8:a4:e1:12:99:76:8c:82:71:0a:bc:
                    b1:eb:3c:3e:a4:03:6f:0b:96:aa:dc:77:2f:d4:37:
                    aa:e7:3c:b4:d0:80:4f:ad:ee:d3:3a:a8:67:c3:37:
                    e5:87:01:8e:58:43:dc:06:08:f7:55:a3:98:be:4d:
                    85:eb:1c:7b:2e:88:ab:f5:2d:4e:d8:89:18:42:70:
                    ac:3f:f6:e8:00:d8:96:14:9a:e0:e6:1f:b4:7c:b4:
                    f2:f4:04:a0:16:d7:95:91:df:bc:4c:35:62:51:c7:
                    40:41:05:28:a5:a4:5e:42:1a:ec:90:a6:d0:8c:da:
                    39:66:f3:f9:d1:92:cc:e1:91:1a:cc:c4:b1:fe:88:
                    2f:63:e5:a1:bf:af:48:c9:af:90:f3:45:4f:0f:67:
                    17:c6:3d:03:91:d4:3a:ec:f3:d7:fd:c1:ac:2a:46:
                    7f:5b:9b:3e:5d:7c:5c:ff:e7:6e:a6:44:4d:ff:4c:
                    f2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D8:ED:EF:FB:A3:78:FE:AC:6C:70:B1:A3:83:57:D6:31:F3:CE:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a6e1366b-3dca-369f-96e6-5b61d89ff0a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:16:ec:5e:e9:02:04:ec:36:6b:c7:21:08:c9:3f:e0:29:b1:
         7c:34:c2:a2:5d:62:ab:97:0e:ff:35:de:dd:b2:6c:7d:c9:ee:
         9d:12:d4:c5:e3:21:f2:06:de:70:d4:52:46:9a:c1:3b:5f:61:
         37:0f:21:21:60:20:db:63:4d:60:17:d1:b5:c6:3d:3b:99:4a:
         7e:d9:1c:e6:bd:1d:fe:4f:c3:f2:a7:2a:ee:27:36:a7:10:d3:
         13:a5:4a:bd:f3:f4:48:4c:2b:ca:43:98:ce:63:6a:96:21:3a:
         4c:0c:77:53:50:ea:59:e9:c9:73:fe:f6:ef:34:b6:12:16:b7:
         96:59:36:d6:29:c8:23:71:04:e2:f2:9c:9d:8d:a4:bd:fa:d9:
         54:bb:ea:f7:96:ae:fa:d7:26:c4:9f:22:12:e7:db:aa:34:c9:
         6b:5c:b2:2e:71:8e:71:6c:fd:41:ff:ad:68:0c:17:cc:89:41:
         3e:cd:fd:9a:b8:c2:72:d3:38:73:08:b6:65:45:40:f2:c5:db:
         2b:6a:54:8f:a7:64:04:28:87:ff:ea:ae:d1:49:a0:d0:83:8d:
         09:65:d4:ae:cc:96:34:5d:e2:76:11:11:71:9b:79:f8:07:a7:
         cc:8f:f8:7d:ce:da:85:78:84:4e:ff:1e:9c:1e:2b:7d:69:21:
         0e:d4:33:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE65rFPeKuZC63+fMQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI2MDgwNDEzMDAxMloXDTI2MTEwMjE0MDAxMlowLzEtMCsGA1UEAxMk
N2EyNmVkMDEtZjdjYy00Zjg0LWFhMTgtY2NkYjY0YTM2OTYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgY1cffV/GamoGXtwFMX8dZ3i/7xiHrsmp8og
OliGwgXNhnBIZ7aq9obarXvfUvGJ3QRYEe/dPrNvem3eG7+MwBmX3admjDEFdLWa
SA0CyKThEpl2jIJxCryx6zw+pANvC5aq3Hcv1Deq5zy00IBPre7TOqhnwzflhwGO
WEPcBgj3VaOYvk2F6xx7Loir9S1O2IkYQnCsP/boANiWFJrg5h+0fLTy9ASgFteV
kd+8TDViUcdAQQUopaReQhrskKbQjNo5ZvP50ZLM4ZEazMSx/ogvY+Whv69Iya+Q
80VPD2cXxj0DkdQ67PPX/cGsKkZ/W5s+XXxc/+dupkRN/0zyCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLrY7e/7o3j+rGxwsaODV9Yx887BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYTZlMTM2NmItM2RjYS0z
NjlmLTk2ZTYtNWI2MWQ4OWZmMGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSG9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACAW7F7pAgTsNmvHIQjJP+ApsXw0wqJdYquXDv813t2ybH3J7p0S1MXj
IfIG3nDUUkaawTtfYTcPISFgINtjTWAX0bXGPTuZSn7ZHOa9Hf5Pw/KnKu4nNqcQ
0xOlSr3z9EhMK8pDmM5japYhOkwMd1NQ6lnpyXP+9u80thIWt5ZZNtYpyCNxBOLy
nJ2NpL362VS76veWrvrXJsSfIhLn26o0yWtcsi5xjnFs/UH/rWgMF8yJQT7N/Zq4
wnLTOHMItmVFQPLF2ytqVI+nZAQoh//qrtFJoNCDjQll1K7MljRd4nYREXGbefgH
p8yP+H3O2oV4hE7/HpweK31pIQ7UM6Q=
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:43:16 2026 by rpki-client