Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d8e0d83b-b7b8-3749-958e-92125d792895.roa
File:                     d8e0d83b-b7b8-3749-958e-92125d792895.roa (raw, json)
Hash identifier:          3MCGLEF9nDvHlqmLjWkXHiNCEwmOJGw3v/DJ67JNSC0=
Subject key identifier:   95:43:99:2C:F5:D2:C3:91:37:1B:F7:22:BB:85:FC:53:59:68:7C:11
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EA8EC36434723EA4CE2799660
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d8e0d83b-b7b8-3749-958e-92125d792895.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     23473
IP address blocks:        153.33.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:36:43:47:23:ea:4c:e2:79:96:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=7ecc4ad9-68f7-4a6d-abc2-71b35d43b40b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:08:41:cb:e4:42:ef:77:5a:f7:d6:a6:d9:2b:
                    5e:e9:f0:1b:92:3d:2f:52:b4:ab:a9:92:43:ad:77:
                    1a:76:1b:92:ae:ba:82:ad:ad:fb:14:47:5c:93:8f:
                    4f:22:07:5d:29:78:47:c3:cd:24:1e:9e:c6:1c:5a:
                    d8:61:33:f8:6e:62:9e:87:c3:e3:fc:3a:ce:41:6e:
                    ad:49:0d:62:c4:f7:af:da:f6:c6:51:10:ec:40:ec:
                    ec:6a:7d:35:db:67:cf:86:9a:a6:5d:7a:a9:f9:2b:
                    f4:1b:55:0f:82:9f:5a:75:b2:f4:dc:2c:b8:e7:39:
                    b5:bf:f3:77:9b:86:94:4e:ca:fa:7d:0f:9a:10:80:
                    b4:01:1c:91:6b:94:b7:b2:03:54:b8:d4:a8:9e:b5:
                    d7:66:46:4a:8b:42:54:50:c5:e0:71:fa:15:6c:c5:
                    b6:ef:5c:e5:0a:03:19:a6:80:57:bf:63:39:bd:88:
                    19:70:06:a4:89:81:cb:ab:36:cc:26:8f:1b:de:21:
                    a4:e5:ca:c8:ae:66:71:9b:92:79:dd:7f:e4:f4:fc:
                    60:bd:4a:e9:b2:44:51:b0:f1:0c:09:48:f0:ee:b5:
                    7b:18:b0:bb:b3:84:09:94:74:00:3d:6c:6f:d4:f5:
                    48:63:49:c3:b7:46:0f:78:b2:a4:6a:e2:9d:a8:6c:
                    66:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:43:99:2C:F5:D2:C3:91:37:1B:F7:22:BB:85:FC:53:59:68:7C:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d8e0d83b-b7b8-3749-958e-92125d792895.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:5e:e0:2e:d9:ac:ba:a3:54:4b:39:d2:12:45:ab:28:98:d3:
         90:e6:c7:61:8e:33:15:0a:20:64:d3:11:70:c2:5c:60:39:11:
         a0:25:14:9d:0a:05:00:43:0b:61:51:5d:f0:25:9e:39:b0:08:
         d0:76:33:08:46:32:d6:83:fe:66:d2:89:e3:fc:a1:de:ec:de:
         10:99:81:13:01:f6:bc:53:c1:4f:52:03:1d:7b:81:9a:80:dd:
         52:bc:46:3a:63:21:49:fb:58:39:f7:eb:3b:d7:c3:b1:c9:ea:
         12:2e:38:76:f3:4f:3e:bf:77:c4:e1:84:fd:0e:db:18:77:a1:
         bd:7c:52:98:52:e9:a2:c0:3a:a1:3f:14:a2:6d:60:4a:f1:47:
         52:fe:f8:92:fc:16:a9:61:7d:f5:a3:b2:42:93:e4:c1:1a:fb:
         93:07:ea:98:e2:10:b1:81:f7:36:16:76:9f:7c:c9:35:64:87:
         bb:f7:d1:b7:8c:9a:5e:5a:c7:73:35:53:d8:d7:9d:3b:34:ec:
         e7:8d:aa:54:c8:5f:38:74:c9:d0:85:81:1f:6b:f5:fb:d0:cf:
         82:b4:3f:13:f9:86:8d:7e:6a:46:e3:16:ef:90:4f:ef:a7:11:
         2e:90:3c:37:e9:35:80:88:f6:db:6a:02:91:df:49:e1:0e:06:
         08:4b:22:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:44:39 2026 by rpki-client