Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cefd100a-876c-3446-9ee7-3985f0ef017d.roa
File:                     cefd100a-876c-3446-9ee7-3985f0ef017d.roa (raw, json)
Hash identifier:          W7/YqSPMwnyUAZZ7nsLFUSjdiwNvIn9ZgMOR7LIJzX4=
Subject key identifier:   63:54:B1:52:F8:1E:3C:2E:B3:85:E6:2E:EB:2A:EF:74:A7:91:61:B0
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EA8EC353B492C5509B2BFC940
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cefd100a-876c-3446-9ee7-3985f0ef017d.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     23473
IP address blocks:        153.33.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:35:3b:49:2c:55:09:b2:bf:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=81162e5d-5f9a-41a9-b28e-9737663f7ef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:92:1b:94:b7:7a:95:dd:b8:6f:53:99:a9:96:
                    37:2c:51:64:de:1c:34:27:cf:ae:fe:c5:07:9a:e9:
                    a0:b5:40:7a:ca:34:5f:5a:d8:cf:50:34:0d:03:d8:
                    55:95:32:fc:f9:a7:cf:9e:86:64:40:b7:a6:4a:86:
                    89:d8:24:d6:0a:bf:6d:78:27:fa:a9:49:69:1e:04:
                    28:43:9e:d7:fa:75:89:d3:2e:90:9c:bb:c3:89:5f:
                    c2:7b:6b:99:8e:75:0e:b5:f2:c1:8b:82:15:33:dc:
                    2c:94:31:72:a8:ff:29:48:4c:95:27:de:9f:ef:ea:
                    88:3e:fd:b0:0b:18:95:19:d1:43:d5:1b:6f:a2:1c:
                    f6:ff:61:ae:db:18:7a:d6:42:96:4b:5f:32:4c:a0:
                    0e:49:39:ba:f3:04:ec:2c:c1:75:ee:bf:e9:86:e2:
                    a0:0b:62:e5:b4:2c:63:be:ff:7d:7f:28:ee:00:bc:
                    ed:ff:2c:48:e1:cf:d8:73:5c:88:9f:52:0b:d4:ac:
                    43:23:17:b4:58:32:1b:63:08:cd:c5:28:d2:00:69:
                    ab:05:61:33:ce:10:fe:4d:7e:18:c1:34:70:a5:60:
                    28:a9:44:15:c9:fa:26:2b:59:72:16:13:f4:60:6f:
                    56:b2:2c:d6:99:5f:8a:d0:04:87:f9:c6:68:a3:ad:
                    7d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:54:B1:52:F8:1E:3C:2E:B3:85:E6:2E:EB:2A:EF:74:A7:91:61:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cefd100a-876c-3446-9ee7-3985f0ef017d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:a3:8c:3e:cf:32:50:6f:4f:0c:b2:70:7b:3b:3e:65:98:6a:
         65:31:a1:0f:c3:ba:b7:f5:72:91:0e:8f:ce:77:a1:d8:46:45:
         55:cf:f2:f2:4a:e7:56:5e:d7:15:0e:b1:f6:05:69:4f:4f:fb:
         16:95:e9:bf:5e:dd:f6:c4:cd:1e:1c:6f:f2:3d:3b:e2:71:37:
         df:78:ac:fc:0a:b7:cd:82:d2:7b:30:db:4e:43:3c:0a:4c:f1:
         34:28:90:60:43:55:19:0d:f6:fd:09:de:3d:98:ec:cf:d5:95:
         93:ca:be:23:9a:5b:5a:a8:c5:cd:f6:8e:16:ea:5c:f3:ad:52:
         43:d5:53:74:43:a4:e6:43:67:5b:17:aa:31:4a:32:02:cb:70:
         fe:49:b7:69:59:b9:d4:4b:15:87:0a:65:a4:76:47:65:47:29:
         13:c6:ed:e4:6b:96:4f:bf:b3:f8:eb:48:5f:eb:0d:90:9e:e8:
         fb:b9:85:57:6a:9e:a9:13:76:ce:31:2a:f7:4e:73:3c:31:c6:
         9f:33:cc:31:8b:4e:0e:7e:c9:3d:f0:46:ab:d5:ec:8c:14:2c:
         4f:8f:4b:d1:21:ad:31:4c:6f:73:dc:ae:26:3c:f8:1a:41:c1:
         1c:49:04:c5:a8:52:4c:68:90:e9:4f:14:27:23:97:c7:d1:4d:
         63:38:9c:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6o7DU7SSxVCbK/yUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI2MDcyOTEzMDAxMloXDTI2MTAyNzEzMDAxMlowLzEtMCsGA1UEAxMk
ODExNjJlNWQtNWY5YS00MWE5LWIyOGUtOTczNzY2M2Y3ZWYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJIblLd6ld24b1OZqZY3LFFk3hw0J8+u/sUH
mumgtUB6yjRfWtjPUDQNA9hVlTL8+afPnoZkQLemSoaJ2CTWCr9teCf6qUlpHgQo
Q57X+nWJ0y6QnLvDiV/Ce2uZjnUOtfLBi4IVM9wslDFyqP8pSEyVJ96f7+qIPv2w
CxiVGdFD1Rtvohz2/2Gu2xh61kKWS18yTKAOSTm68wTsLMF17r/phuKgC2LltCxj
vv99fyjuALzt/yxI4c/Yc1yIn1IL1KxDIxe0WDIbYwjNxSjSAGmrBWEzzhD+TX4Y
wTRwpWAoqUQVyfomK1lyFhP0YG9WsizWmV+K0ASH+cZoo619WwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGNUsVL4Hjwus4XmLusq73SnkWGwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvY2VmZDEwMGEtODc2Yy0z
NDQ2LTllZTctMzk4NWYwZWYwMTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmSEAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGSjjD7PMlBvTwyycHs7PmWYamUxoQ/Durf1cpEOj853odhGRVXP8vJK
51Ze1xUOsfYFaU9P+xaV6b9e3fbEzR4cb/I9O+JxN994rPwKt82C0nsw205DPApM
8TQokGBDVRkN9v0J3j2Y7M/VlZPKviOaW1qoxc32jhbqXPOtUkPVU3RDpOZDZ1sX
qjFKMgLLcP5Jt2lZudRLFYcKZaR2R2VHKRPG7eRrlk+/s/jrSF/rDZCe6Pu5hVdq
nqkTds4xKvdOczwxxp8zzDGLTg5+yT3wRqvV7IwULE+PS9EhrTFMb3PcriY8+BpB
wRxJBMWoUkxokOlPFCcjl8fRTWM4nHc=
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:43:04 2026 by rpki-client