Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/eff62756-2329-36b9-843a-46d139ea10c5.roa
File:                     eff62756-2329-36b9-843a-46d139ea10c5.roa (raw, json)
Hash identifier:          Y+4f1RbDLcveGSoizmFORdZ52S3ARFflBeeLfTNUdTw=
Subject key identifier:   63:15:3A:9F:81:3D:EC:03:7E:E3:FA:E2:B9:67:2C:AB:76:83:70:F3
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EBC76FC50F502F75BBD945500
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/eff62756-2329-36b9-843a-46d139ea10c5.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     23473
IP address blocks:        153.33.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:76:fc:50:f5:02:f7:5b:bd:94:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=5b4e27bd-fce6-4389-977c-aad4c14b1410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:08:fe:bb:ce:3b:91:8e:05:cd:97:1c:21:77:
                    f8:94:d1:b0:05:3a:eb:43:a5:c5:bd:e5:6f:a9:75:
                    96:3e:d7:3b:1f:96:d1:1e:5c:41:d9:b9:cf:65:46:
                    31:27:44:ce:36:c6:59:5c:cf:5f:1d:4a:e6:2c:df:
                    d9:b6:8b:2b:7f:82:77:a5:24:20:7a:71:af:0f:2b:
                    0b:38:4f:61:b6:cb:6d:53:9d:8b:10:e9:f4:2a:97:
                    8b:0a:19:3c:84:c8:b4:c7:9c:15:bc:93:3c:0f:2f:
                    e1:92:73:92:b2:2d:65:78:73:ef:4d:68:8e:f3:b1:
                    04:92:d8:9d:0f:54:c4:86:e5:61:ec:41:6c:b7:34:
                    0c:29:b6:6f:e2:f8:97:72:79:9a:ae:71:48:7b:06:
                    73:4e:c5:c5:95:a4:83:91:c2:c5:2c:e8:c2:de:16:
                    92:21:18:6d:da:8b:95:a9:85:e2:53:0d:b8:5a:a8:
                    18:71:e9:f9:04:54:80:26:68:f3:bf:d6:ae:c4:7f:
                    94:c0:56:ae:4e:f3:50:8e:4b:dd:3a:69:9e:7a:93:
                    b7:58:d8:47:e4:90:5f:d1:e1:6a:9c:7b:63:f8:31:
                    98:fd:4f:cf:13:2f:a3:70:9f:31:09:a7:b3:4e:6d:
                    67:fe:de:e0:2e:31:c7:a3:65:ee:b9:bc:56:ba:ba:
                    54:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:15:3A:9F:81:3D:EC:03:7E:E3:FA:E2:B9:67:2C:AB:76:83:70:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/eff62756-2329-36b9-843a-46d139ea10c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:63:64:ff:37:74:86:c1:d5:14:44:ca:59:f3:a3:2e:9d:c0:
         fd:5c:6b:97:1a:00:8d:e6:14:6d:1e:f6:2f:67:35:5e:53:2b:
         62:25:17:c7:cc:c3:0d:b3:e6:cf:ff:ce:63:45:ba:ad:c8:55:
         51:30:d6:cb:98:c7:85:eb:63:a5:d2:cc:b6:ac:af:15:dc:dd:
         18:f5:9d:e0:fc:83:6c:3c:c8:ea:16:fe:1e:fd:08:33:96:67:
         ee:64:90:58:92:42:06:9d:1e:67:31:af:77:dc:b5:bb:6e:6d:
         a3:25:90:23:90:d2:d3:6b:7b:bb:40:87:95:ba:7d:ce:55:7b:
         cb:65:e6:2f:e4:89:0e:f9:74:9d:c4:a2:11:37:03:fa:fb:13:
         22:19:6f:af:1f:c5:4c:01:9f:ca:8c:c4:7b:1f:e2:25:bf:7c:
         76:9d:c9:fb:be:bc:d7:6c:b0:a4:fc:f1:98:ff:a8:b8:19:a4:
         09:3f:d6:96:45:93:c9:c1:bd:ea:b8:76:2f:91:90:f7:b5:99:
         af:0b:9f:29:45:5b:35:fd:04:5a:4b:cb:d4:fd:ef:93:c6:44:
         55:89:ad:57:ea:10:d1:3a:7e:79:1d:d9:c8:6f:1a:4c:e3:ac:
         08:3a:30:8a:7e:cd:7b:4e:47:55:5e:68:5a:ec:4c:6d:21:b9:
         d2:4c:65:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:45:56 2026 by rpki-client