Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a7b80b80-ace6-3c38-be56-bed3f4d6e916.roa
File:                     a7b80b80-ace6-3c38-be56-bed3f4d6e916.roa (raw, json)
Hash identifier:          VTdDsRSxmDT5mW93ANSIXPWBtydsI7cN/5j5ocOCtkY=
Subject key identifier:   B9:4D:CA:4D:84:DD:4D:AA:A0:28:84:D8:98:5E:C0:F4:8A:DF:2F:A1
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EBC7719318EFD085FE7F1C740
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a7b80b80-ace6-3c38-be56-bed3f4d6e916.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     23473
IP address blocks:        153.33.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:77:19:31:8e:fd:08:5f:e7:f1:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=5ae9e621-f5ff-414e-87de-92c147bee7b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e2:a2:a2:5c:87:bd:74:d1:5c:79:40:66:33:
                    eb:0a:d2:34:f6:e0:b1:85:b7:82:c4:7a:ad:5e:22:
                    3f:c7:d7:54:cc:bd:a5:48:1f:ea:49:b8:e5:72:81:
                    d1:02:29:19:2e:a4:13:f8:21:4a:68:5c:40:a9:16:
                    48:90:28:b0:8a:6c:7f:ea:a8:b9:04:d5:36:8c:b2:
                    02:32:7e:30:c7:d4:99:fe:24:f7:5b:d5:83:c8:66:
                    e5:77:c6:6d:a3:a8:57:7a:2a:61:03:40:22:19:01:
                    0d:eb:7e:ce:bd:6d:f1:1b:0c:22:76:6c:2c:da:de:
                    58:14:cc:3d:e6:67:7e:13:0f:ab:c6:28:d9:b1:05:
                    16:ae:10:6c:48:73:a3:c4:28:7b:be:1b:65:5a:d2:
                    44:a0:61:58:4f:56:01:7f:51:c7:a7:a7:6c:8d:94:
                    82:c6:d7:c7:88:b3:77:1c:ac:7d:15:1d:07:dc:5a:
                    89:39:90:05:f1:e5:d2:f7:b2:5d:e3:81:14:88:82:
                    29:0a:c8:a5:5d:46:9d:4e:7f:28:5d:ec:0c:71:c9:
                    79:de:0a:0f:16:24:1e:70:38:3e:c4:29:02:d5:f4:
                    87:bb:f1:3f:25:0f:c7:2f:09:f5:a0:c8:76:a3:a7:
                    65:27:04:05:cf:2c:d9:c3:0a:37:94:0c:c5:7f:51:
                    f6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4D:CA:4D:84:DD:4D:AA:A0:28:84:D8:98:5E:C0:F4:8A:DF:2F:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a7b80b80-ace6-3c38-be56-bed3f4d6e916.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:f5:56:94:03:1b:37:49:e9:b4:de:7e:cc:5e:77:99:3e:e5:
         68:dd:bf:ae:4c:81:08:31:96:f8:e7:83:a5:a1:10:50:f9:e9:
         6f:cd:a3:9b:4e:94:70:28:64:20:12:f9:c6:a3:c2:d0:eb:67:
         53:73:5c:8c:a3:18:c9:f3:4d:5b:b8:2d:16:8f:64:42:1e:8f:
         9a:e2:49:1d:f4:09:33:c7:4a:fd:71:3e:52:c2:66:94:c8:75:
         3d:36:d1:5f:3f:1d:98:69:17:39:e1:74:4b:77:f9:52:c6:76:
         67:9d:07:4d:2e:7c:35:d0:d1:c9:68:a0:c8:c1:86:2b:ac:e4:
         b3:50:3e:95:0c:f1:c2:3e:df:e9:cc:d9:bc:c2:1a:81:04:d8:
         0f:3e:52:3a:1c:c2:3f:b3:1c:9f:b5:43:38:8c:95:0e:15:fc:
         cd:0b:83:16:1d:8d:f7:b6:be:ab:61:86:90:05:3d:78:1f:fb:
         35:f4:59:96:35:18:68:76:12:b4:f2:cf:9c:db:ee:dc:1d:5b:
         27:06:0a:c6:36:0d:9e:c8:0a:d3:d6:c9:79:a4:c9:cf:05:e5:
         c5:ce:20:92:fb:8d:7e:ec:43:61:fb:44:0e:03:62:70:91:23:
         d1:a3:f8:aa:a4:da:ef:9a:44:e6:aa:11:50:dd:ae:d8:2b:39:
         6e:f2:27:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:44:48 2026 by rpki-client