Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/878f4de7-b29a-37a1-8710-86ab65e839fe.roa
File:                     878f4de7-b29a-37a1-8710-86ab65e839fe.roa (raw, json)
Hash identifier:          fCIUfyfg2myUXF3RG8BlgQUNvTWhqKhs0pzQi2tQ7s0=
Subject key identifier:   5D:93:5F:FC:1A:4A:19:AE:B9:9F:7F:88:C0:26:11:C3:0D:CA:B3:98
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584E131981C14341637DA567BF80
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/878f4de7-b29a-37a1-8710-86ab65e839fe.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     23473
IP address blocks:        153.33.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:81:c1:43:41:63:7d:a5:67:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=f7407bca-80a5-49dd-ad3c-2dc52d7f25bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:22:79:cb:38:62:e7:f1:7a:bb:e8:f2:6b:37:
                    27:7a:4f:df:4b:8b:6b:50:ed:ce:8f:28:3b:ea:a7:
                    20:ae:fe:3d:d8:5f:89:1a:64:0b:2b:55:8c:b0:51:
                    95:82:d6:94:42:9e:dd:e9:2c:17:5f:2b:f1:e0:a7:
                    25:c5:0b:02:c1:2b:0d:54:73:98:ed:d7:6c:59:4f:
                    eb:ca:61:5c:98:ad:5e:88:0c:e0:5d:2e:2e:da:4f:
                    28:f9:ac:eb:6a:f5:95:3a:fb:9c:28:73:92:9c:26:
                    cb:c3:5c:bb:c1:9b:2a:c0:14:b6:3a:82:7c:55:97:
                    c0:75:29:13:21:d5:49:d9:f0:63:23:49:8b:27:50:
                    2a:46:de:9a:a1:f0:38:d6:ad:fb:9b:23:f7:44:49:
                    a2:ca:e3:8d:c1:ab:fb:7e:fa:eb:45:bb:51:f4:c7:
                    30:3d:66:18:05:c5:f4:dc:02:8d:4e:18:a4:8b:81:
                    26:f1:03:47:57:c1:ae:9a:18:98:8f:05:db:61:63:
                    83:e0:80:d9:67:71:e8:a2:25:ea:ec:f9:18:74:31:
                    65:d3:38:ee:8b:e0:a8:9f:65:ad:4f:23:7f:4d:fd:
                    c4:62:fe:8d:88:10:6f:2f:ef:14:d7:e6:f3:2b:6b:
                    bb:04:66:35:e6:0e:d9:79:93:bd:05:88:2a:f7:36:
                    2f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:93:5F:FC:1A:4A:19:AE:B9:9F:7F:88:C0:26:11:C3:0D:CA:B3:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/878f4de7-b29a-37a1-8710-86ab65e839fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:2b:04:a0:2b:10:71:c2:f7:23:d5:7c:f0:55:8d:dd:c7:f7:
         28:48:fb:24:08:a9:79:61:b2:be:e7:66:c1:3e:49:a8:f9:84:
         1b:f7:8d:b8:a6:9f:31:a8:ed:02:31:f7:cc:8f:40:23:b0:11:
         e7:33:68:d0:f2:89:3f:27:a3:d4:b3:90:59:5a:a0:6b:5e:45:
         9c:5d:36:fd:4e:dd:8b:56:dc:5c:66:91:51:6c:c1:cc:e1:36:
         31:ec:4d:43:55:05:c3:e9:db:0a:7a:c5:26:e1:49:f0:b3:a2:
         c9:00:aa:88:1d:ad:f5:8d:51:d6:e2:60:e8:5b:bb:63:0c:50:
         bb:97:b3:15:12:e2:a1:98:cb:ea:0b:5d:b4:da:4e:12:5c:c7:
         25:9e:96:96:72:43:40:f5:e3:47:2d:45:c9:13:32:82:e3:21:
         73:36:e6:33:0d:93:a0:9c:bf:3a:53:f6:c5:76:d3:69:17:18:
         a6:f5:ed:b8:ee:98:38:82:26:9d:0f:2c:6d:4c:02:44:81:4f:
         45:74:5a:3b:0b:39:70:ff:3d:ea:72:dd:b7:47:20:89:2b:42:
         17:8a:22:e9:0b:d5:ae:87:00:12:fd:42:a2:4b:fc:31:e7:75:
         d6:2e:40:fe:0e:0e:ff:fa:3e:8a:52:aa:f1:6b:04:5a:1e:89:
         af:14:f2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:25:39 2026 by rpki-client