Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/6f807480-bec0-3656-9854-4404ca5f38af.roa
File:                     6f807480-bec0-3656-9854-4404ca5f38af.roa (raw, json)
Hash identifier:          XN0BeqkkMdPDDHEg0gWmY02163O1Giwzz735jaM7pao=
Subject key identifier:   64:0E:FF:B7:A2:E8:A6:72:9C:35:FA:8C:FD:B5:89:2A:B9:62:46:A2
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584E104EE4401712EB6C98DD0F80
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/6f807480-bec0-3656-9854-4404ca5f38af.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     23473
IP address blocks:        153.33.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:e4:40:17:12:eb:6c:98:dd:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=d269c2e4-0480-4c92-809a-705a4ca5f529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fd:89:26:66:bd:3e:91:e9:5f:ad:c5:e0:50:
                    b7:81:d9:f3:ac:71:de:4b:1c:0a:0d:f5:5e:40:85:
                    40:67:7c:f1:e5:51:5f:93:d5:71:ee:18:a1:2a:23:
                    2f:9a:9f:55:19:3d:32:cc:be:a8:94:ac:d7:31:cd:
                    63:b3:8f:ce:cb:d7:b0:db:ab:02:41:15:9c:89:3c:
                    60:df:09:cc:2c:d4:39:56:13:0a:52:09:9d:91:18:
                    7c:96:47:f3:0d:94:71:a6:98:a6:6e:c8:9c:4f:10:
                    6e:ba:11:24:d1:45:57:e4:c6:48:5f:b7:c4:6a:16:
                    16:27:2e:b3:bc:15:0c:ca:16:da:f3:e2:9c:1f:45:
                    0f:14:fe:9b:b9:4e:2a:0b:8f:4e:fc:02:02:8f:9f:
                    ed:98:ba:66:56:20:4b:c6:f9:44:2f:c2:25:f2:35:
                    e1:7e:da:ba:a1:4f:c0:05:9f:34:28:a6:5a:9f:a0:
                    04:ae:ad:b7:f7:f8:98:15:44:ff:95:eb:69:73:3c:
                    f0:93:0d:ff:d4:46:02:5d:8e:54:bc:d8:1a:e1:67:
                    f6:47:49:9d:de:5e:f1:49:84:df:2a:19:63:b7:a3:
                    f3:ce:6b:ba:46:c6:73:38:e3:c2:8b:30:53:7f:bb:
                    ff:0f:1c:d5:f1:60:2a:e2:96:15:63:39:3a:6a:08:
                    bf:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:0E:FF:B7:A2:E8:A6:72:9C:35:FA:8C:FD:B5:89:2A:B9:62:46:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/6f807480-bec0-3656-9854-4404ca5f38af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:3a:7e:2f:c0:4f:9b:18:95:fc:f3:c2:30:83:5a:d7:9b:43:
         5e:f9:da:54:b2:d6:5a:ff:e4:c7:b9:83:9b:b7:35:dc:7c:e6:
         79:20:21:d0:4f:bd:cd:b1:3e:f2:36:15:1f:19:75:ff:66:47:
         01:00:6a:10:6b:8c:9b:43:ff:81:5e:e4:38:29:fd:e0:99:bd:
         7f:4d:eb:d3:cb:ca:54:9c:18:1b:64:a0:9f:f8:4b:c2:be:cd:
         dc:b0:b8:9e:97:15:24:70:97:38:0d:f9:74:de:ea:3a:29:6b:
         2b:bb:cb:1b:ab:19:e4:5d:e5:4b:bc:0d:06:9d:ff:19:84:4e:
         f8:aa:fb:86:47:19:ea:c8:b9:ea:bf:c4:a9:f3:7c:b0:39:db:
         b6:53:06:c5:4d:c7:9b:77:dc:7b:4a:6e:48:75:88:c8:20:14:
         56:4a:7f:09:e0:08:74:de:28:bc:7a:29:b5:90:8d:7f:84:7b:
         4f:fb:ed:28:40:e3:70:04:d1:10:57:fa:49:c8:5b:e3:70:d1:
         76:e1:23:da:7e:a7:18:fa:23:c3:70:f6:23:5e:e1:d1:86:74:
         60:a5:4b:42:72:97:2c:90:11:8b:f9:f0:04:1d:d4:81:aa:c2:
         6e:3f:de:2d:de:0a:70:b9:10:cb:8c:28:54:b8:69:2c:82:77:
         06:c3:f8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:48:14 2026 by rpki-client