Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/82a39aa4-a04f-3930-8f25-5b23b167307b.roa
File:                     82a39aa4-a04f-3930-8f25-5b23b167307b.roa (raw, json)
Hash identifier:          J1BOx9Vap+MfcwJo1gCcKSsLRIP2cmvjrl5GhPxFvj4=
Subject key identifier:   2B:35:A0:87:90:00:5D:CD:F7:49:E8:7D:55:10:B2:C0:2C:6C:EC:51
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584E0700877ABD085709F3E6A080
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/82a39aa4-a04f-3930-8f25-5b23b167307b.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     23473
IP address blocks:        153.33.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:87:7a:bd:08:57:09:f3:e6:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=0caccd72-4381-4396-b683-34b58d5b52f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:88:5a:07:f4:15:bd:cc:05:9b:78:d7:59:07:
                    88:34:a3:6d:14:10:ed:bc:a8:ff:d9:92:ef:fc:3c:
                    e7:c8:99:e0:f6:3e:9d:94:75:03:2c:fe:be:d7:e1:
                    49:71:51:54:2a:3e:fb:7d:ac:a1:d7:32:fd:19:e1:
                    e5:e3:ca:6e:b7:a5:e0:5c:ba:78:2d:4f:92:91:c6:
                    e6:0b:27:71:77:fb:c1:3a:ab:32:6b:a9:66:04:75:
                    47:32:a7:58:e6:3f:74:59:38:4c:d5:be:ee:0f:3a:
                    be:cd:0c:56:af:97:eb:cc:22:d0:30:03:e7:51:66:
                    04:8e:85:64:61:10:20:6d:86:4f:40:63:9d:e6:7a:
                    45:a4:9b:dd:a9:0a:e6:eb:76:70:85:4d:c4:11:dd:
                    3e:58:07:e9:d0:ac:7b:c5:b8:2c:4a:3d:8c:fc:a0:
                    bf:f3:30:06:13:42:d6:b6:d8:2b:83:00:3a:da:d2:
                    bb:78:0c:26:11:35:7d:82:28:14:b1:d2:2b:ab:bc:
                    12:bb:5f:8b:52:20:03:38:5a:4b:3a:86:3d:1a:97:
                    1d:ce:6c:29:39:ad:be:66:8a:e7:3b:a1:4b:be:6d:
                    36:29:f9:33:31:83:18:cc:cd:55:b4:0a:dd:92:02:
                    44:4d:32:06:b7:39:c0:08:08:64:f4:ff:d5:48:9d:
                    7f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:35:A0:87:90:00:5D:CD:F7:49:E8:7D:55:10:B2:C0:2C:6C:EC:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/82a39aa4-a04f-3930-8f25-5b23b167307b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:c1:34:fb:0f:62:99:d3:76:37:ac:18:17:a0:e3:1b:65:35:
         ca:46:ff:f0:c0:4d:8e:02:69:2c:49:1c:29:dd:5c:f7:23:7d:
         fe:ce:b3:7b:52:7d:6a:b3:53:15:07:e7:b5:33:87:7e:e5:4e:
         a7:af:44:6e:73:2b:8b:7d:91:bd:05:d0:a4:50:c2:f9:84:ba:
         10:80:73:8e:e5:84:5d:2d:50:33:69:b7:fd:5f:2c:b8:46:de:
         ba:fb:42:ee:6f:7c:c0:0b:50:85:ad:d2:31:bc:26:88:97:f2:
         19:01:57:7c:40:35:8c:92:1e:20:c0:04:b2:46:5d:52:6a:65:
         b1:6a:9b:a9:f4:0f:6c:89:2a:34:0a:87:74:68:08:99:a0:f5:
         d7:1d:11:27:21:cd:12:40:7f:bb:15:c9:ea:9d:71:70:11:ea:
         f0:21:7c:cf:c3:ac:13:83:82:ac:73:55:7d:ad:dc:53:84:8b:
         ad:52:2c:2c:be:b0:8c:c1:98:b7:37:fe:e6:77:4f:5e:52:5f:
         cd:47:0a:0c:96:ce:31:aa:a8:48:6a:28:bc:45:92:ba:27:5e:
         09:a3:42:ad:af:02:fd:ef:10:1d:2e:97:0b:ac:f4:ad:84:1a:
         b4:bf:0e:eb:b0:04:38:eb:13:81:3b:48:41:34:58:73:0e:1c:
         89:9a:7c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:11:53 2026 by rpki-client