Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b75825a3-ba43-3372-9cbc-ebf79ca62cb7.roa
File:                     b75825a3-ba43-3372-9cbc-ebf79ca62cb7.roa (raw, json)
Hash identifier:          S+V/+RmZzqeTKEJgqtNNdPgQ5I1nSgWAWe8CDwdfHrQ=
Subject key identifier:   D2:F9:79:8C:BB:E5:A2:CF:D8:77:89:11:00:D9:78:51:A9:39:1B:81
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EBC77170D7AD32B4D7780B548
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b75825a3-ba43-3372-9cbc-ebf79ca62cb7.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     23473
IP address blocks:        153.33.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:77:17:0d:7a:d3:2b:4d:77:80:b5:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=d8dc269d-3395-4021-a675-dffc94a6ddda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4a:b1:68:6d:77:38:ca:57:6c:51:e4:88:72:
                    4a:79:da:b3:82:35:a1:ab:54:74:83:e1:c5:ec:f4:
                    a7:a1:9a:b2:4f:bb:e6:12:06:d4:33:94:78:cb:91:
                    ba:5a:6b:dc:9b:f4:d6:ae:ce:78:2d:e7:bb:b7:2f:
                    f0:6b:2e:a4:48:37:41:43:51:32:62:91:ba:68:6b:
                    f0:d1:c8:89:24:31:77:44:b4:e2:52:c5:67:30:7b:
                    25:cf:99:1a:c3:c6:58:8e:76:bd:58:20:12:a7:b2:
                    1e:b5:d2:cc:6d:1f:ba:2b:7f:a2:f4:ae:90:d4:3e:
                    d2:96:3f:84:3f:76:0f:61:1a:b5:d8:fa:e9:57:57:
                    0b:2f:2b:af:27:dd:a5:0e:da:ef:7d:1f:e6:46:8d:
                    84:48:4b:21:b7:18:86:72:31:4b:d3:7b:5b:09:3b:
                    f3:be:21:16:6d:bd:f4:8e:d3:c5:98:35:8d:37:45:
                    c7:3d:bb:11:09:ec:47:ef:05:7f:0c:4a:f0:ca:32:
                    b4:d9:57:de:ff:a5:87:7e:8b:34:80:4d:38:1b:ef:
                    e5:52:2d:b9:80:bb:66:be:8c:8a:a0:bf:70:9a:51:
                    f9:58:ed:77:01:f2:69:22:cf:10:31:3f:4f:d6:42:
                    34:66:ad:fb:7a:e8:26:b0:71:c6:a1:8e:34:68:98:
                    d5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F9:79:8C:BB:E5:A2:CF:D8:77:89:11:00:D9:78:51:A9:39:1B:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b75825a3-ba43-3372-9cbc-ebf79ca62cb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:bb:c2:3f:6b:68:6d:b1:5a:74:d6:23:5c:b7:ec:47:21:8e:
         e7:a7:d9:1b:27:38:0a:3a:d7:2e:1e:8a:fa:0b:a9:86:40:88:
         cd:53:23:87:3c:e4:43:8e:07:31:f9:a1:3d:69:d6:0a:7b:93:
         4e:a7:f1:29:e2:91:09:77:37:84:05:9e:c6:b8:d2:06:26:94:
         77:73:dc:0f:66:12:7c:4b:1e:72:10:60:8d:68:55:2e:bc:e3:
         e7:46:73:9a:09:2f:3b:a2:7b:9a:da:5c:4f:df:6a:dc:17:a0:
         42:f9:e0:b4:90:49:91:cd:d1:af:4b:f2:15:ee:eb:d3:6c:a5:
         f9:f0:2f:2a:0c:ce:07:fc:2d:31:59:fd:bb:4b:53:82:51:7d:
         49:34:91:7a:93:f9:85:5b:9c:1c:a9:95:a3:44:b8:f6:b4:78:
         7e:2c:38:aa:c1:fd:1f:4c:98:03:6c:3e:b5:d3:57:f1:23:fa:
         9a:ea:32:59:1f:16:5d:a7:45:99:d1:74:9a:54:15:a1:ea:ee:
         c4:2c:30:5f:69:d1:17:f7:98:e4:d6:ae:c6:7b:df:b2:89:d6:
         f3:9b:6f:75:8a:b2:73:4a:9e:c0:df:00:7e:9a:f8:60:95:50:
         74:02:ac:3b:36:4e:6f:dd:14:00:e3:9d:dd:ae:aa:d3:39:34:
         35:01:a6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:44:42 2026 by rpki-client