Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/310b9057-c4bc-3d97-a888-c87614f6db36.roa
File:                     310b9057-c4bc-3d97-a888-c87614f6db36.roa (raw, json)
Hash identifier:          4fv09M4zFJkH3wgLzTXqRor6KEvKKPD3JVoTo523pYs=
Subject key identifier:   3C:A7:68:75:24:76:DE:B8:F2:D9:9F:9A:EB:90:AA:11:3C:3F:87:73
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584E11B429B860B688023133BC80
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/310b9057-c4bc-3d97-a888-c87614f6db36.roa
Signing time:             Fri 05 Jun 2026 09:00:12 +0000
ROA not before:           Fri 05 Jun 2026 09:00:12 +0000
ROA not after:            Thu 03 Sep 2026 09:00:12 +0000
asID:                     23473
IP address blocks:        153.33.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:11:b4:29:b8:60:b6:88:02:31:33:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jun  5 09:00:12 2026 GMT
            Not After : Sep  3 09:00:12 2026 GMT
        Subject: CN=c6e4f6be-b217-428f-9839-32d7a1d09f7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0b:01:0a:c0:ee:23:fb:1a:a7:23:4a:2d:15:
                    ff:6f:a5:fe:96:19:19:05:2b:e9:50:94:aa:d0:55:
                    4e:57:9b:f3:fa:39:04:cd:de:63:5c:67:5b:fe:0f:
                    a3:29:e8:21:b0:ab:60:3d:4c:71:5c:e1:e0:b5:22:
                    ce:8e:1f:59:74:ff:62:e3:63:9b:49:6a:75:76:2d:
                    07:d3:e5:bc:cf:b2:e2:51:64:6b:94:b3:75:71:7a:
                    b4:0c:88:48:98:77:55:b3:59:00:af:8a:c4:94:df:
                    49:38:f9:27:70:b3:dd:de:d6:c8:26:96:79:57:9b:
                    9d:6c:06:07:3e:ab:d5:bb:f9:c2:55:6f:13:54:7a:
                    d8:50:65:a0:0e:3a:59:d2:51:c7:26:97:9e:aa:75:
                    18:a0:10:a8:de:fe:6e:06:bc:0b:7f:6c:0b:1a:11:
                    ad:2b:db:b1:82:07:7b:28:ef:32:0f:73:54:18:23:
                    f3:7f:fe:f9:5d:0e:68:ea:c6:d1:d7:02:25:9d:ac:
                    f6:aa:fd:d3:07:01:53:02:31:9f:f0:53:7e:f5:58:
                    1e:3b:82:34:41:dd:d9:6c:35:89:eb:48:e0:de:2c:
                    80:9b:6a:15:59:66:f9:e6:9a:2b:67:9c:d9:49:91:
                    9b:45:e9:15:36:0c:5f:25:ca:aa:42:1b:28:fd:cf:
                    03:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A7:68:75:24:76:DE:B8:F2:D9:9F:9A:EB:90:AA:11:3C:3F:87:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/310b9057-c4bc-3d97-a888-c87614f6db36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:ae:a7:1d:8c:af:18:e6:76:82:4d:ec:48:ae:7a:32:f9:d0:
         cc:c1:68:bb:62:65:52:8c:04:d0:25:dc:18:7e:d8:e9:ce:ad:
         fa:19:77:e7:92:12:a7:89:84:81:d0:4a:94:07:46:20:95:de:
         f3:89:39:87:ec:c6:60:32:5d:9e:d0:ff:e4:e0:6f:aa:ce:6d:
         9c:c0:f4:c0:32:2e:32:a6:e4:85:83:fe:93:4a:3b:3f:d8:67:
         a6:18:90:43:0b:9f:92:72:19:59:14:09:22:47:50:52:b0:06:
         79:b1:56:d9:ee:c4:86:da:3c:58:fc:c0:0d:8f:a0:7c:4a:4e:
         f5:56:38:0c:f3:c2:75:ce:a6:e6:e3:03:d6:2a:fa:2e:82:53:
         cf:0f:61:d6:b4:40:8e:de:b9:2c:6a:f3:3a:36:7b:ce:d4:dd:
         bc:f1:f8:61:44:7b:b5:ac:5b:ae:e6:b1:b2:1a:66:9e:b3:b1:
         56:b8:9e:d8:ae:80:f2:0d:d0:7c:f8:f0:3d:8a:40:2d:7e:20:
         06:89:f9:0d:24:0f:a7:f8:c5:ac:81:a8:d7:b6:d9:05:6b:3d:
         b0:0d:5b:d7:4a:14:bd:23:b2:32:59:33:da:a3:4e:c6:46:6f:
         2b:50:ff:9e:aa:de:0c:80:ed:0e:c8:66:8a:cb:57:e7:5b:99:
         33:a1:a1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:42:59 2026 by rpki-client