Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c4c9fb1f-74a0-35f6-85b1-457d92e1b158.roa
File:                     c4c9fb1f-74a0-35f6-85b1-457d92e1b158.roa (raw, json)
Hash identifier:          utnqIdBru5Panm6Cy2proozzTXmyrB6LFrc0e/00M/0=
Subject key identifier:   37:8D:3E:88:D4:51:49:9B:AC:30:E7:B4:C1:2A:ED:C5:59:E4:54:39
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EB416F7D5B20D4B1C3ABEA0C0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c4c9fb1f-74a0-35f6-85b1-457d92e1b158.roa
Signing time:             Sun 02 Aug 2026 13:00:12 +0000
ROA not before:           Sun 02 Aug 2026 13:00:12 +0000
ROA not after:            Sat 31 Oct 2026 13:00:12 +0000
asID:                     23473
IP address blocks:        153.33.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b4:16:f7:d5:b2:0d:4b:1c:3a:be:a0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Aug  2 13:00:12 2026 GMT
            Not After : Oct 31 13:00:12 2026 GMT
        Subject: CN=d8cdeb35-60ae-4a66-9349-9023067aa861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c2:98:a0:ca:a6:cb:52:68:2e:91:29:57:f3:
                    57:cb:3f:f7:f6:f0:6e:bb:5e:fc:66:3d:9d:ad:11:
                    2d:86:bd:91:9c:f6:e0:3e:1d:e9:c3:32:c2:44:82:
                    c6:32:9b:1a:ff:dd:cf:50:39:7f:56:ce:b8:78:74:
                    93:65:ca:58:48:95:3c:39:16:f8:02:79:67:0c:23:
                    46:93:fd:0b:ae:31:71:ff:b8:f2:16:7b:30:74:14:
                    72:6b:1c:c3:bf:c0:ba:ee:92:13:59:b8:9f:04:06:
                    5f:89:8b:ee:e7:e5:d2:5d:b8:c1:bb:75:90:c9:3b:
                    77:61:87:1c:2f:5b:c0:2a:b9:3d:2d:6a:58:da:30:
                    cf:6a:4b:19:2f:a9:61:55:01:ea:f7:c9:e6:71:52:
                    67:8c:ad:68:26:99:fc:8b:2c:fd:13:98:9f:c1:17:
                    87:0e:10:47:09:1c:9f:b3:26:09:81:23:88:de:94:
                    8d:da:02:c6:cf:76:97:74:10:aa:35:19:8c:8e:46:
                    a3:dd:df:e2:4c:f8:c3:99:64:8b:1e:aa:bd:b2:d9:
                    b2:03:b2:2c:7a:89:64:4b:38:94:84:6b:c9:09:7e:
                    60:e3:27:ac:8b:65:69:71:2f:cc:47:8c:e8:a5:c9:
                    53:75:77:74:e8:c8:e1:62:6f:73:12:fc:04:a9:f4:
                    03:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8D:3E:88:D4:51:49:9B:AC:30:E7:B4:C1:2A:ED:C5:59:E4:54:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c4c9fb1f-74a0-35f6-85b1-457d92e1b158.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:76:16:ea:ce:a6:e0:ff:03:30:0f:a3:c5:0c:e4:bb:71:06:
         b0:b7:e8:1b:bf:60:a6:6d:0b:0d:ff:f5:ac:01:38:a0:a6:ca:
         80:9f:eb:a8:2a:10:cf:31:b1:72:bd:0a:58:b4:34:86:56:ed:
         32:39:91:a3:84:a0:fc:0f:f8:ce:d3:b3:bb:41:4a:4e:3f:21:
         79:8d:25:10:44:d1:17:d3:f5:69:d0:34:e2:0d:c7:e2:ac:7e:
         45:36:d8:a0:e7:c9:ef:c1:e5:62:87:96:a9:dc:09:25:53:9a:
         4f:a0:44:d8:7b:52:c0:c2:90:61:a6:b3:d6:e6:36:f7:a1:f4:
         22:3f:35:94:7e:22:11:27:79:ec:89:c2:e2:ec:b0:21:85:bf:
         70:16:83:49:1c:32:8e:62:21:20:a9:22:e1:04:f5:9b:1b:08:
         82:a1:74:2e:aa:08:25:41:14:ab:7d:96:00:21:9c:e6:f9:86:
         49:02:98:9a:6b:50:7c:a8:f9:86:76:d0:b4:86:69:e1:83:86:
         85:14:bc:93:7b:74:54:99:09:89:8d:14:40:ee:21:df:d5:b1:
         d9:5e:10:fc:0b:b9:0d:f5:71:01:f6:b2:90:84:61:9a:7d:4e:
         6b:36:c7:45:eb:29:82:bd:6a:f7:56:b1:e5:80:33:45:2d:93:
         2a:2b:73:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:44:42 2026 by rpki-client