Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b417a1dc-4461-32fd-b746-bb13857ccf1f.roa
File:                     b417a1dc-4461-32fd-b746-bb13857ccf1f.roa (raw, json)
Hash identifier:          CGsenCXMJ2IW1awWRhgOfS8ickzk/41+8k7+mDjx9R0=
Subject key identifier:   0A:D0:69:4C:65:A4:10:96:E4:76:A3:5C:97:7A:E5:C0:FC:D2:5E:86
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EC20C7F312A593D5245153180
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b417a1dc-4461-32fd-b746-bb13857ccf1f.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     23473
IP address blocks:        153.33.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:7f:31:2a:59:3d:52:45:15:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=1d5988b7-c93f-44a6-bb74-d786d352b079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8d:dc:21:6c:81:96:fe:84:2b:41:96:eb:79:
                    d3:cb:b9:30:ad:fc:1f:8a:4c:03:c1:1c:6f:9d:c9:
                    18:28:2f:e3:2e:03:14:46:e2:65:0f:5a:3f:fb:2b:
                    22:f7:87:7c:a5:9f:9f:fe:b1:3b:1a:6c:ed:c7:f8:
                    7f:a5:b5:a6:c3:13:0e:0c:15:6c:66:42:ad:97:bc:
                    73:08:fa:39:5b:0a:9d:69:0a:c4:19:2d:70:8b:dc:
                    c4:c1:03:cc:2b:32:da:3f:e7:f0:fb:15:ba:10:29:
                    52:c6:23:9e:d8:63:f7:f4:fb:ee:33:52:77:b8:7b:
                    e0:ef:e5:16:2d:57:d4:0d:bd:1c:ff:dd:7d:74:2f:
                    e7:b8:0f:66:e1:bd:74:44:f1:4e:e6:3a:53:70:a0:
                    c8:61:62:ed:39:a5:fb:10:61:d6:02:18:f9:f7:e0:
                    89:f3:28:91:96:80:86:82:ce:4a:ca:cf:9f:e0:23:
                    9b:20:96:93:8f:09:a8:79:cd:11:a8:10:54:35:31:
                    2d:eb:5c:18:b7:66:a2:9a:96:8b:92:e9:90:3b:26:
                    5c:df:d2:f2:87:da:0d:4b:6c:20:35:ea:73:c6:3b:
                    56:e2:84:e3:e1:77:63:16:02:7f:fd:ea:e4:45:fd:
                    8c:84:e9:52:cf:50:77:7b:0f:97:08:18:0c:62:35:
                    86:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D0:69:4C:65:A4:10:96:E4:76:A3:5C:97:7A:E5:C0:FC:D2:5E:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b417a1dc-4461-32fd-b746-bb13857ccf1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:32:37:57:9f:64:e2:5e:e7:f4:1d:d8:aa:40:d4:41:ec:cc:
         20:b4:34:7a:c3:5b:d6:ef:a1:2b:d9:9c:11:cd:10:35:a9:8b:
         9f:38:3d:54:dc:5f:ee:e4:fb:48:93:95:6b:0c:d0:52:2c:27:
         be:ec:6c:25:a6:a3:f4:81:ee:c7:47:bc:2f:b9:78:7c:2b:6b:
         6e:15:07:83:33:31:0e:92:f8:b1:49:02:f3:41:9e:d8:45:f3:
         4e:63:ef:1f:08:36:92:16:2d:0b:17:b8:d8:21:22:af:b2:56:
         38:e3:95:1e:7a:09:9e:a7:d1:d9:ec:07:c2:e1:35:fe:81:32:
         6a:1d:4d:54:66:56:b2:a1:f4:c3:f6:2a:e9:33:a1:e3:53:8e:
         b1:7b:85:1a:cb:37:77:29:77:19:b4:bd:dd:18:98:12:05:af:
         d8:d2:6e:58:9d:06:22:00:3e:d6:61:df:44:4f:d3:1a:8b:93:
         20:8c:55:d9:d1:b9:3d:83:b0:4c:44:e5:76:de:eb:6b:25:f0:
         eb:60:85:13:1a:d0:90:4a:45:05:de:7a:e5:5a:ce:4e:ec:55:
         d6:da:96:b7:94:e3:62:8f:41:94:b6:ae:94:9b:dc:6f:68:cd:
         9e:81:a0:24:1e:26:86:51:a0:0f:64:a5:7a:3a:2f:ec:c1:22:
         1c:0b:22:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:43:43 2026 by rpki-client