Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/7abba210-a4eb-3be7-b495-780c2dae2e1e.roa
File:                     7abba210-a4eb-3be7-b495-780c2dae2e1e.roa (raw, json)
Hash identifier:          7bKJGZ540xsDxkfnET6G8NKKa2ek/+PHn136gtN8r6k=
Subject key identifier:   13:F2:0D:6E:AE:1C:11:9B:93:49:9E:D6:07:AC:F5:4A:5E:07:BB:50
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584E17498816C0C601846A4E2140
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/7abba210-a4eb-3be7-b495-780c2dae2e1e.roa
Signing time:             Sun 07 Jun 2026 09:00:13 +0000
ROA not before:           Sun 07 Jun 2026 09:00:13 +0000
ROA not after:            Sat 05 Sep 2026 09:00:13 +0000
asID:                     23473
IP address blocks:        153.33.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:17:49:88:16:c0:c6:01:84:6a:4e:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jun  7 09:00:13 2026 GMT
            Not After : Sep  5 09:00:13 2026 GMT
        Subject: CN=a5d7c138-85d1-45e0-8f81-2312649de529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:73:19:b1:42:56:a3:5f:53:d4:cd:d0:09:6d:
                    2c:2b:31:82:2b:61:89:06:82:a1:56:51:23:3f:48:
                    88:74:10:9e:1a:11:53:d8:0c:45:b9:0e:66:42:e6:
                    6d:bb:dc:e9:cf:65:d7:b2:fb:42:0d:50:a7:2d:93:
                    f3:01:e4:c2:95:86:16:73:9e:59:ad:f9:39:da:51:
                    0e:19:bf:f8:37:4d:e7:2d:12:2b:44:ff:c0:96:76:
                    69:23:30:78:48:5b:f6:b3:e5:17:af:86:11:44:f7:
                    52:d0:c3:80:59:ea:10:b5:53:e3:a0:41:53:4f:a2:
                    16:78:fe:f9:4f:f8:5e:28:2d:01:b9:aa:64:5c:c2:
                    84:30:d3:14:b1:47:05:33:fe:d5:95:10:73:2f:a2:
                    d1:13:5e:69:ce:b5:37:c3:bf:c6:46:22:71:b4:65:
                    2a:9a:90:79:4b:69:6d:81:11:f8:86:c3:2b:8f:47:
                    de:90:74:b5:63:dc:e5:a3:1e:06:a1:e6:b4:2b:56:
                    f9:3d:60:14:51:03:1c:f8:e7:98:98:87:00:86:e1:
                    92:f9:65:e4:39:96:c1:3b:ea:66:f0:44:b3:4d:c9:
                    06:0a:1e:4b:93:14:95:c6:44:a1:fd:df:16:b8:0d:
                    09:ea:15:46:46:90:9a:df:97:b5:12:74:02:aa:5b:
                    e9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F2:0D:6E:AE:1C:11:9B:93:49:9E:D6:07:AC:F5:4A:5E:07:BB:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/7abba210-a4eb-3be7-b495-780c2dae2e1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:b5:a5:0a:23:49:75:c0:79:3b:a2:07:f3:d6:57:b1:8e:76:
         21:ee:5d:db:b1:1a:31:41:c4:c3:44:da:0d:ec:4d:b0:44:4e:
         73:96:ea:db:8a:2c:28:12:cb:ec:c6:62:38:dc:b8:6e:ff:4d:
         5d:c5:f0:01:3e:44:f7:0b:95:07:90:cb:30:01:40:fe:8a:34:
         c8:3a:dd:29:99:7a:d4:35:fe:55:22:b5:0c:2d:30:f1:31:a2:
         17:5d:e4:ef:4f:40:84:4a:f5:92:65:4c:10:45:5a:e1:79:0b:
         f0:ab:30:4e:09:58:cc:c4:2f:37:dc:2a:2f:89:57:dc:04:4b:
         b0:7f:9e:04:74:59:41:95:50:11:ba:e6:6d:3f:f9:46:29:6a:
         0c:62:f6:4c:c0:e9:49:7b:7f:66:c3:4f:6f:3d:7e:75:47:56:
         07:ed:b7:b1:ba:51:4c:4e:e6:2d:94:69:53:ec:1a:58:32:eb:
         8e:fe:61:10:77:d2:c6:48:33:94:9b:f6:1d:87:b7:08:93:8e:
         36:0f:1a:99:22:84:59:7d:cb:ab:ad:04:6f:2c:b8:1d:f5:57:
         76:d5:e3:91:e3:36:41:52:4b:61:a9:92:07:15:3c:58:50:2f:
         f0:ed:52:d4:0a:48:f1:b3:e8:51:1c:85:10:2d:2f:6a:8b:fb:
         d5:1b:76:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:22:07 2026 by rpki-client