Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/fca7f489-20bb-3f8e-82e9-ca0d59d3126b.roa
File:                     fca7f489-20bb-3f8e-82e9-ca0d59d3126b.roa (raw, json)
Hash identifier:          +y/zzHz2us6yYJhUniOJMEh5WpsqOQtl6IdZJK8XwKU=
Subject key identifier:   F0:F5:D8:DD:F0:94:09:61:98:0E:C4:3E:1E:0B:56:FC:A7:D2:50:77
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F5E62F6927F4D4A13237E4F00
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/fca7f489-20bb-3f8e-82e9-ca0d59d3126b.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     23473
IP address blocks:        153.33.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:f6:92:7f:4d:4a:13:23:7e:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=5f4cfda2-bb42-4cdf-9edf-6328365d0765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:44:a7:c0:e0:60:e2:f8:e3:9f:c5:7a:b7:54:
                    d2:ce:a2:ca:b6:18:78:d0:35:60:de:8e:a3:8f:ce:
                    69:6d:76:0e:b4:64:38:e2:bb:a0:59:26:bf:a9:a9:
                    2c:5d:74:3c:ee:81:80:cf:6a:a8:8c:43:d3:6d:88:
                    2d:a5:22:39:f3:a9:0f:b0:76:3a:ef:32:98:6d:79:
                    2a:0a:fa:a1:27:f9:04:10:91:b7:fc:a7:2d:40:db:
                    ba:5f:3e:d9:0f:c4:6b:a9:33:34:79:22:01:cf:29:
                    c3:a2:9d:de:1a:b5:fb:08:53:2c:78:ff:a5:75:ad:
                    a5:e7:fb:d8:a9:f1:8c:b2:32:ef:b0:8e:3b:e7:88:
                    87:4e:7b:43:91:a8:9c:9a:82:58:c7:11:d7:c4:8a:
                    4a:7b:24:83:f5:bd:5e:0c:58:7a:2f:97:06:f4:dc:
                    ef:a3:b9:ee:e2:f4:13:ea:bd:39:6a:21:72:7c:51:
                    d8:91:be:d0:7f:d9:00:e1:26:0e:e1:47:fa:18:85:
                    87:1b:e5:25:92:d1:b7:ec:ef:cb:15:1c:d4:5b:66:
                    63:99:97:0c:ee:91:93:88:c2:be:97:9f:2a:93:89:
                    c8:cb:76:ad:11:cf:35:4b:3e:85:57:9c:13:df:67:
                    62:d2:d4:ab:44:7a:b2:bd:2f:96:bc:a9:03:50:ae:
                    94:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F5:D8:DD:F0:94:09:61:98:0E:C4:3E:1E:0B:56:FC:A7:D2:50:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/fca7f489-20bb-3f8e-82e9-ca0d59d3126b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:08:fc:fa:54:be:dd:5e:5a:72:9d:9c:bf:9a:12:a0:57:03:
         db:39:8c:ec:bb:e8:5f:43:75:37:82:99:20:98:5e:71:ff:e1:
         ca:9e:ac:22:77:2c:51:0d:a2:f1:f6:7f:41:dd:46:27:9e:88:
         0d:5d:8c:cb:76:5e:14:f6:e3:1b:a2:be:1b:53:60:ab:27:31:
         ca:c6:99:0c:b5:2f:0c:53:49:ad:6f:29:0f:a4:94:9d:79:96:
         8e:50:06:5b:44:78:7f:f2:bb:e7:e7:1e:01:24:0f:8e:8f:9b:
         40:c0:81:33:24:d1:c2:63:69:61:d9:00:e0:ef:5e:2e:32:65:
         6b:92:7f:ba:6b:5f:20:3a:d8:61:a0:7a:31:cc:a7:71:67:d1:
         d2:66:d9:60:8a:35:c7:01:ec:1d:a4:a8:43:6b:44:ca:9b:c7:
         e7:f6:04:b0:76:0a:43:31:14:f6:a3:da:c7:66:71:cb:c5:c2:
         c8:fc:be:21:61:10:50:d3:b0:60:76:b1:3d:49:69:e4:a7:70:
         a0:15:d8:be:3f:3f:ad:38:12:d9:bf:ea:e2:59:73:19:21:63:
         d1:44:26:ee:31:dc:c8:fd:83:e2:47:bf:82:5e:d5:79:82:d1:
         1e:3b:52:d1:ed:01:c3:09:74:1e:89:6b:2b:bc:bc:d5:4c:fa:
         38:e5:5d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:33:32 2026 by rpki-client