Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/07d78086-6a3e-39f6-9550-e9077fc80c5b.roa
File:                     07d78086-6a3e-39f6-9550-e9077fc80c5b.roa (raw, json)
Hash identifier:          DopKS1PHSvdIvugFhq7qwTOlwlbaeUaODXFZ0bIgQic=
Subject key identifier:   DF:3E:51:4F:BB:B5:B9:A4:8E:07:0F:A8:18:48:FA:AA:E5:82:EC:C1
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584E1749887034DCB694B3D45D40
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/07d78086-6a3e-39f6-9550-e9077fc80c5b.roa
Signing time:             Sun 07 Jun 2026 09:00:13 +0000
ROA not before:           Sun 07 Jun 2026 09:00:13 +0000
ROA not after:            Sat 05 Sep 2026 09:00:13 +0000
asID:                     23473
IP address blocks:        153.33.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:17:49:88:70:34:dc:b6:94:b3:d4:5d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jun  7 09:00:13 2026 GMT
            Not After : Sep  5 09:00:13 2026 GMT
        Subject: CN=47c8fa59-144f-4258-9474-6c681f90a4bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:67:7c:9c:0e:e9:30:d9:5f:fb:91:bb:92:dd:
                    a7:42:4f:b2:26:76:2c:8e:f4:68:e0:23:f5:25:02:
                    1a:18:2a:20:de:be:91:59:20:69:4d:40:9c:eb:b6:
                    39:56:f7:87:63:13:83:87:43:4f:44:31:e3:c2:a9:
                    57:67:06:e4:bc:bc:14:f8:a0:db:d9:60:e2:d1:07:
                    b1:ad:f1:4c:4c:7d:bc:da:0f:80:e1:c3:3d:9e:6b:
                    f6:67:c7:89:df:d5:70:d0:bc:31:be:0c:42:0c:47:
                    15:e8:9f:bb:da:55:a5:74:b6:12:b7:68:eb:40:67:
                    2d:c0:8a:f9:c7:a8:21:fc:49:1f:f6:01:7b:36:7b:
                    37:3e:2b:30:09:ad:39:1a:24:2b:34:d5:d2:2c:c0:
                    77:82:91:c6:d2:5b:65:f9:55:00:77:23:df:e4:60:
                    3e:fb:03:55:bd:a3:f3:7a:d8:c0:93:c1:fc:c5:36:
                    07:40:5f:d7:48:00:8b:a5:c6:ed:ff:44:6c:1e:82:
                    b5:4f:e1:d7:e5:a2:ba:c6:b9:a3:f1:13:a2:b7:7e:
                    0e:bd:ac:18:ec:d5:2b:4c:eb:ab:82:19:94:be:84:
                    99:83:51:c7:78:e2:19:fa:e4:cc:34:b6:6b:15:a8:
                    75:86:a8:34:7f:4c:78:d2:b1:83:63:4a:76:8f:c1:
                    43:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:3E:51:4F:BB:B5:B9:A4:8E:07:0F:A8:18:48:FA:AA:E5:82:EC:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/07d78086-6a3e-39f6-9550-e9077fc80c5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:eb:22:f4:3d:af:fb:f0:b0:b0:83:24:9e:10:93:18:1b:a2:
         1e:e7:36:44:05:8d:c0:54:49:d4:38:83:c8:5b:c4:43:bb:e0:
         81:1f:97:fb:27:8f:ad:6d:8f:c4:e5:ae:11:ed:dc:c8:c0:96:
         0b:68:59:50:14:36:df:21:61:0a:2b:20:fa:cb:81:88:39:4b:
         ce:85:95:07:72:d8:7f:bc:3d:21:5f:b1:d8:86:30:d4:bf:c3:
         49:a5:06:40:3a:06:bf:80:0a:a1:4f:b0:bb:27:9f:ad:ea:5a:
         56:eb:75:8e:b3:3c:86:c5:82:31:c8:01:7a:02:fc:d7:f3:5f:
         5d:43:ac:8c:58:86:b9:3e:d6:57:11:e1:81:20:8f:c4:1e:19:
         40:38:a6:ba:d0:37:be:e9:44:fc:d0:d3:91:b4:ee:5f:c4:73:
         6b:24:df:9d:ad:51:5d:71:78:de:2c:6b:4f:48:49:c2:57:bd:
         77:29:1e:a1:ee:63:86:95:d4:0a:e0:80:17:ac:f3:b0:66:31:
         d2:27:ce:bf:72:14:6b:3c:b6:e2:f6:17:36:2c:12:ac:65:d3:
         0b:5b:6e:73:65:e0:7a:c4:4f:12:75:88:a2:f4:0b:4b:6b:9c:
         a1:5d:32:9c:ea:22:f7:f2:a0:15:91:c7:5e:ae:50:2a:9b:c7:
         4d:0c:1a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:05:25 2026 by rpki-client