Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4365a1ce-28fc-3db3-a21e-efeaae9b6976.roa
File:                     4365a1ce-28fc-3db3-a21e-efeaae9b6976.roa (raw, json)
Hash identifier:          wlb9caGetPC6IjYMoNcIf4cTpk46sZRPheKyuViYO/8=
Subject key identifier:   D6:BC:CF:F4:7A:15:88:DF:84:B8:66:9D:FF:3F:C4:7A:C4:FB:DD:A7
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584E11B4358610854C2EC997E580
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4365a1ce-28fc-3db3-a21e-efeaae9b6976.roa
Signing time:             Fri 05 Jun 2026 09:00:12 +0000
ROA not before:           Fri 05 Jun 2026 09:00:12 +0000
ROA not after:            Thu 03 Sep 2026 09:00:12 +0000
asID:                     23473
IP address blocks:        153.33.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:11:b4:35:86:10:85:4c:2e:c9:97:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jun  5 09:00:12 2026 GMT
            Not After : Sep  3 09:00:12 2026 GMT
        Subject: CN=aeb9050f-a83a-4d1b-af30-2fd569aab53e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e6:38:24:a5:d0:f6:3d:0a:a0:b5:6d:9a:23:
                    ab:03:d6:c1:8d:9e:4a:10:44:83:77:a3:21:65:85:
                    21:a3:e6:5f:8d:57:41:14:e9:41:40:70:d3:a0:1c:
                    93:b1:7f:88:1e:62:64:fc:d2:9d:fd:c2:79:13:f7:
                    7d:c4:5b:a1:dc:2c:70:b4:10:fa:f0:27:ce:e5:f4:
                    b8:1d:be:df:f2:33:a5:b1:b3:21:15:85:86:25:71:
                    6f:78:3a:c5:5d:4b:ce:60:40:60:92:d2:60:9f:fd:
                    bc:ea:f7:85:f8:b5:38:88:26:d2:76:2b:1b:f9:6c:
                    47:08:57:d1:b3:06:12:43:ef:38:78:8e:71:1a:a4:
                    48:2f:c7:11:e4:71:cc:8f:8e:4b:ba:c9:da:27:f6:
                    22:eb:00:1e:8b:1f:0a:72:f4:27:26:b1:2f:be:3b:
                    e5:f5:3a:7f:7e:b1:18:f8:f1:7a:8c:26:e9:d4:32:
                    0e:a8:f5:d4:74:44:5f:00:7e:e5:e4:b2:49:81:25:
                    67:f2:c9:25:87:34:50:55:ec:f3:5b:e2:21:ce:c3:
                    55:8d:09:ec:7e:77:9b:93:ca:95:c8:78:dc:72:cf:
                    6d:38:4c:e0:4d:c9:c4:7b:8c:36:00:28:20:10:03:
                    60:31:d7:ed:55:39:01:a9:80:c2:59:77:9b:cc:c8:
                    3a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BC:CF:F4:7A:15:88:DF:84:B8:66:9D:FF:3F:C4:7A:C4:FB:DD:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4365a1ce-28fc-3db3-a21e-efeaae9b6976.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:10:cf:0b:45:78:cd:9f:5d:f7:cb:fe:00:04:6c:b2:86:74:
         40:28:4a:97:5e:4c:39:0c:44:5c:14:18:2d:8c:7a:76:dd:3e:
         a9:1b:bd:1b:00:04:92:47:2e:76:45:ad:a4:c5:63:dd:46:4f:
         95:59:2a:6c:f6:c6:db:30:71:0b:29:f5:cb:b1:c3:ce:63:4a:
         a2:91:62:57:75:06:23:3b:f5:23:09:ce:5f:81:4a:87:f9:f3:
         42:e5:52:72:f6:14:78:9c:49:b1:3d:c4:e5:66:32:a3:20:a4:
         fd:a1:db:ff:0a:ca:cd:d5:dc:24:9a:87:6a:47:c8:f8:e3:da:
         48:c7:2f:fe:eb:85:2d:10:2b:28:86:6a:74:73:55:cc:d8:a6:
         00:b9:33:72:cb:73:18:c2:32:77:d7:e9:06:64:66:0d:9d:d7:
         38:e7:4b:cf:67:97:3c:53:77:fe:ef:3f:c7:17:bf:8e:b4:f6:
         22:0c:37:90:dd:50:b2:22:6c:76:f2:e7:08:9d:d5:86:e4:e1:
         b7:9b:1c:12:b8:80:7d:54:47:e2:7d:06:8a:fc:5e:ea:15:15:
         aa:57:89:2b:2c:a8:da:19:08:1e:9f:f0:21:99:db:92:16:9b:
         ef:a4:0c:49:de:72:21:57:44:24:a9:ef:eb:a4:cf:2f:aa:1b:
         b0:45:3f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:42:52 2026 by rpki-client