Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e4bd1d27-b711-390d-9dc8-ee37e95abca2.roa
File:                     e4bd1d27-b711-390d-9dc8-ee37e95abca2.roa (raw, json)
Hash identifier:          bIIdG3+mjDi+8B/xBnw3PmHovilMKBzLLNf1VPESbRY=
Subject key identifier:   B7:63:D5:74:C8:90:14:4B:DA:A5:9E:6D:AF:93:53:C2:D5:67:0C:0C
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584D39CF788C4C2C7E8E6B14F460
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e4bd1d27-b711-390d-9dc8-ee37e95abca2.roa
Signing time:             Fri 20 Mar 2026 01:00:32 +0000
ROA not before:           Fri 20 Mar 2026 01:00:32 +0000
ROA not after:            Thu 18 Jun 2026 01:00:32 +0000
asID:                     23473
IP address blocks:        153.33.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:cf:78:8c:4c:2c:7e:8e:6b:14:f4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Mar 20 01:00:32 2026 GMT
            Not After : Jun 18 01:00:32 2026 GMT
        Subject: CN=d6843f49-cddd-40ab-987e-ac1b6e83a1c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:08:54:d3:61:2e:89:81:1c:13:1a:e5:da:dd:
                    8a:11:5a:13:cb:70:c5:5e:48:fc:01:d8:a0:5e:dd:
                    e4:41:cd:0b:e9:16:21:70:fe:42:5b:c3:4b:18:0a:
                    d1:ec:d6:46:8a:78:ce:72:3e:86:1f:eb:7e:55:f2:
                    09:61:42:ee:6b:6e:fd:67:1f:9c:87:4f:5d:7b:9f:
                    69:21:0e:00:f0:57:6a:fd:fd:96:6c:fa:55:0f:e7:
                    89:f2:3c:eb:f3:b3:e2:58:55:2b:13:0f:08:7a:5e:
                    d1:88:4f:13:b2:73:cd:e6:e8:06:aa:8a:41:06:95:
                    c4:dd:ba:dd:ba:b8:a0:69:9a:82:3d:1a:23:07:8e:
                    2f:0c:00:fb:6a:78:49:4b:a2:33:bd:35:05:76:47:
                    d6:cd:7b:2c:03:63:96:54:70:80:8f:2a:ea:f8:0f:
                    ee:f4:3b:4b:d5:a3:96:aa:f7:be:8c:d2:68:24:6a:
                    16:c2:2b:8d:d8:a9:84:79:d0:54:42:6f:33:7b:bf:
                    59:c8:d6:3a:b0:f1:d9:82:13:1e:72:8b:12:08:1c:
                    fe:d0:65:ba:3d:52:42:46:a1:22:6b:59:88:30:9f:
                    14:4f:f9:87:cc:14:cb:f5:ae:9b:e2:3a:82:63:b7:
                    49:d1:1a:89:5d:56:40:ea:07:f5:94:03:ff:6a:3a:
                    be:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:63:D5:74:C8:90:14:4B:DA:A5:9E:6D:AF:93:53:C2:D5:67:0C:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e4bd1d27-b711-390d-9dc8-ee37e95abca2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:9c:11:3b:d1:a8:2e:d2:18:e4:cd:f2:fa:6a:bd:b0:8b:63:
         5e:a8:dc:cd:c0:38:19:b3:46:bd:37:7c:d5:7b:89:f9:1e:e2:
         dd:a6:15:b0:88:4c:06:11:68:5c:a5:bb:0a:3b:08:49:94:52:
         96:96:06:21:5e:45:a5:b3:fd:77:9c:98:ed:9b:63:de:a0:4d:
         2a:9a:e0:3d:55:1e:a9:d2:50:7a:26:3b:a9:24:ed:8e:2d:e2:
         90:a0:84:71:23:a8:56:c9:91:fb:fd:cf:fd:41:ca:30:79:ed:
         2f:a3:de:5a:a6:c9:30:f3:13:e9:ff:ad:22:2b:63:70:36:02:
         70:72:75:d7:25:65:6f:b8:22:39:d8:a4:8a:f0:89:ec:15:48:
         f4:26:5b:18:b7:6d:1b:04:f5:fb:7c:a6:3d:50:9c:8f:b2:04:
         ff:05:fa:27:6e:0a:9f:95:ec:b5:cc:24:94:a0:31:eb:ff:2e:
         e9:14:65:2b:de:ea:cd:af:84:72:bf:1d:ff:50:54:1f:a8:b2:
         ce:46:70:0f:0f:fa:1f:5f:cb:9a:71:2b:90:fe:2d:5c:87:05:
         58:36:4f:dc:9f:5a:97:cb:95:9f:cb:d5:7a:d5:1a:6c:fe:ef:
         ca:7b:d6:18:9e:fd:e2:fe:3a:7c:90:da:81:7b:2b:96:d9:2a:
         7b:67:f4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 20:53:09 2026 by rpki-client