Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d23d6852-40f1-33ad-aedc-0f42655c7308.roa
File:                     d23d6852-40f1-33ad-aedc-0f42655c7308.roa (raw, json)
Hash identifier:          74Qp/eZejx31iZemV5GzPYIatnhG6onFrOtvKzh5/Q0=
Subject key identifier:   E2:D1:FE:66:C1:61:E1:87:C7:AB:13:48:BF:71:B9:F6:1D:86:36:B1
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EBC76FB8F6267458B5D0B31B0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d23d6852-40f1-33ad-aedc-0f42655c7308.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     23473
IP address blocks:        153.33.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:76:fb:8f:62:67:45:8b:5d:0b:31:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=f6f904c3-06c0-4605-a220-671545bc8df9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:55:70:7e:97:d5:58:81:76:10:9d:64:8a:10:
                    85:85:a9:54:50:b9:f0:5d:f4:c5:9f:14:8d:6d:89:
                    8b:86:e7:0d:27:55:50:07:6c:47:00:72:7b:78:02:
                    be:9a:39:a1:29:fc:2c:67:b7:73:7a:5f:06:21:03:
                    cb:21:33:0d:25:e8:f8:b5:81:89:04:e7:40:7b:d8:
                    a4:c4:58:18:f6:08:a4:0a:fe:3d:b7:37:03:d4:48:
                    64:23:5f:a6:69:1e:3e:02:a9:03:73:c5:09:ac:95:
                    86:cf:30:02:de:1b:40:11:2a:f7:8e:8c:39:e5:0e:
                    68:05:6b:b0:4c:ea:bb:88:83:84:a3:e4:43:3a:95:
                    f6:5b:a7:5b:b9:68:8e:53:f9:51:ba:e0:2e:f2:02:
                    60:16:5e:bf:43:a2:4c:95:93:bb:38:a5:d5:3e:aa:
                    0d:7a:89:2f:6c:a2:15:53:08:e0:98:de:27:ea:92:
                    19:12:a5:18:6f:ce:1f:0e:b4:66:b7:30:a8:c9:ba:
                    be:5e:f1:a0:b9:fb:4a:ab:99:f7:0a:40:11:29:0f:
                    40:ec:83:da:ed:3b:9e:ce:87:89:85:09:75:aa:a2:
                    cb:aa:f6:25:31:5a:cd:54:b8:00:ad:a9:7a:2b:1c:
                    46:bc:c6:24:fa:48:c6:c1:cb:4b:54:1f:77:97:95:
                    a3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D1:FE:66:C1:61:E1:87:C7:AB:13:48:BF:71:B9:F6:1D:86:36:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d23d6852-40f1-33ad-aedc-0f42655c7308.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:b5:76:62:de:fe:e5:94:ce:6a:7f:4d:20:82:1d:aa:8c:b0:
         96:64:b0:81:9e:fb:fd:34:1e:d2:78:16:b8:62:fc:57:a3:83:
         a5:6e:74:aa:04:94:16:30:51:50:b7:19:4f:c4:db:fc:6f:88:
         a2:fc:5e:cd:1f:bd:71:94:a1:9b:ce:f5:ce:60:bc:75:4e:38:
         c0:95:14:d0:49:6b:23:31:6a:3e:e8:6a:63:e4:02:97:bd:7b:
         08:96:8b:a7:45:7e:93:95:28:07:87:5d:fe:b6:c4:7b:03:7a:
         f6:69:0c:b7:ae:f7:88:96:22:dd:9f:2a:3f:c6:c2:6f:4e:df:
         da:41:17:41:c0:8d:ad:57:f7:45:db:13:ad:b6:24:31:79:6c:
         93:67:89:54:fa:ac:01:4a:6f:d5:c6:7f:0d:86:da:b4:13:7d:
         e1:c1:5e:60:e5:78:54:83:f9:e7:2d:30:fa:f8:52:75:f4:a2:
         ee:ba:f4:c7:a6:c9:f9:86:54:90:1e:4b:a1:4f:a6:71:9f:85:
         7b:bd:e5:48:13:74:e4:23:0a:b9:f9:3c:8e:9b:c3:f3:10:71:
         9b:29:41:d7:09:93:15:ba:f6:01:1d:0c:d8:7e:61:19:d5:89:
         03:c2:fc:f4:6e:38:e7:72:1b:1e:74:3f:df:b8:8a:49:44:c1:
         14:cb:c3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:44:03 2026 by rpki-client