Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c61981f0-ee14-3408-9d2e-7e15acfe410e.roa
File:                     c61981f0-ee14-3408-9d2e-7e15acfe410e.roa (raw, json)
Hash identifier:          GDAWtdvU2Eqb0QS0ar1EmN2OO6gv6zROg0Wgj1XsFmY=
Subject key identifier:   D6:CB:9A:4F:05:A4:4E:6C:A1:E2:C4:3D:6F:D7:90:C1:BC:26:C4:F2
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F5B980112D6D9F88E34A26C40
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c61981f0-ee14-3408-9d2e-7e15acfe410e.roa
Signing time:             Thu 01 Oct 2026 13:00:12 +0000
ROA not before:           Thu 01 Oct 2026 13:00:12 +0000
ROA not after:            Wed 30 Dec 2026 14:00:12 +0000
asID:                     23473
IP address blocks:        153.33.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5b:98:01:12:d6:d9:f8:8e:34:a2:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Oct  1 13:00:12 2026 GMT
            Not After : Dec 30 14:00:12 2026 GMT
        Subject: CN=7e971514-28f8-4c6e-835c-2a8e2cf8efe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4e:c6:b5:c1:15:b7:81:d0:d9:00:5a:73:83:
                    5a:c5:ec:c6:4a:14:30:b5:99:e4:a7:6c:8c:d2:26:
                    f7:1d:dc:64:40:ef:10:28:5e:7d:7d:61:70:e9:df:
                    ab:3a:e8:ee:b8:e2:db:80:85:85:bd:8d:57:a6:f3:
                    11:aa:57:6d:3e:37:94:16:09:d3:dc:01:55:4d:97:
                    3a:23:4d:1f:e8:cb:ac:6e:f3:39:14:33:f6:b8:a7:
                    07:8d:ac:3d:db:86:ed:d7:65:70:a1:6a:9a:aa:37:
                    5f:2f:46:4b:8a:62:ec:03:8a:fd:f2:9f:c7:21:6c:
                    c9:a6:0e:2b:ae:49:4c:9a:19:74:f1:42:a5:76:12:
                    bb:e8:24:06:77:fd:9c:43:40:c5:d2:11:1e:48:29:
                    30:46:0b:f5:67:4e:24:37:02:06:64:e0:f8:1a:f9:
                    be:28:dc:47:e8:e3:76:81:7c:31:e2:db:7f:0d:46:
                    d8:01:ae:12:76:39:67:07:17:df:0e:8b:f2:9e:4e:
                    97:d8:17:39:68:a8:18:9b:73:3a:c7:57:83:f0:7e:
                    93:de:0d:f1:01:31:61:c4:b9:74:1b:c3:c5:39:71:
                    87:58:61:72:5f:62:97:03:a5:47:82:3a:12:d7:c0:
                    e2:27:5d:f2:9c:73:63:2e:85:87:31:47:5d:4f:22:
                    4d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:CB:9A:4F:05:A4:4E:6C:A1:E2:C4:3D:6F:D7:90:C1:BC:26:C4:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c61981f0-ee14-3408-9d2e-7e15acfe410e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:13:ad:0d:0d:9e:52:22:c2:d5:e1:69:2d:e8:30:e2:d8:a2:
         74:7e:d0:c7:aa:4f:19:65:a0:dc:73:d7:90:40:cb:b0:7a:5c:
         44:5f:b5:2b:ff:47:a9:8f:ad:24:55:85:f0:30:68:e7:98:3a:
         c0:2b:a0:e1:b6:a1:c4:d9:19:50:e4:d6:85:52:8b:d2:79:5a:
         88:ae:89:fa:63:8d:c2:ac:4e:a8:75:af:d0:dc:71:35:23:0c:
         28:fb:68:3d:68:86:c3:de:96:7d:78:ac:c5:e0:98:01:03:6c:
         85:da:b1:4c:74:d9:ba:aa:36:0c:11:c3:7e:e2:a9:90:b9:c6:
         53:42:c9:1b:b7:8b:b6:3b:bc:0a:3a:be:cd:b7:8e:5c:d8:47:
         07:b8:81:6c:29:61:98:16:6b:eb:18:1a:2f:80:c3:08:df:84:
         cb:14:23:a2:34:76:1a:d7:3d:cf:3e:f5:c9:af:75:41:73:10:
         f2:35:10:d3:d9:9d:1f:78:5c:5f:e3:4b:9f:ef:a9:7d:da:91:
         d2:1c:f8:80:3b:58:16:95:61:96:8a:6b:b6:46:1d:2a:58:ea:
         81:e3:7c:d0:6c:b5:89:98:ca:bd:f7:bf:34:e5:ca:8a:b2:95:
         64:06:1e:26:cc:80:ad:f0:52:5b:b6:55:5e:8d:57:7f:69:97:
         b1:74:12:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 19:26:56 2026 by rpki-client