Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/8a943651-7a61-3624-8bdc-d2c1377ba5ed.roa
File:                     8a943651-7a61-3624-8bdc-d2c1377ba5ed.roa (raw, json)
Hash identifier:          y/VUSRom9mpkamKw8GtYiAzNFQssMQrqOxk6svs+f3Y=
Subject key identifier:   20:08:11:ED:10:DC:FE:F2:C6:56:FC:27:FE:5A:9D:E1:6E:DA:97:FC
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584E174988270DCB1F4E23ADB080
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/8a943651-7a61-3624-8bdc-d2c1377ba5ed.roa
Signing time:             Sun 07 Jun 2026 09:00:13 +0000
ROA not before:           Sun 07 Jun 2026 09:00:13 +0000
ROA not after:            Sat 05 Sep 2026 09:00:13 +0000
asID:                     23473
IP address blocks:        153.33.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:17:49:88:27:0d:cb:1f:4e:23:ad:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jun  7 09:00:13 2026 GMT
            Not After : Sep  5 09:00:13 2026 GMT
        Subject: CN=ac92c133-86eb-4ff9-b6d6-47de7e0fec88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b0:8a:39:aa:31:40:b9:d0:b5:91:73:bd:96:
                    fe:76:0e:bf:a2:ba:4a:e8:08:8f:0e:fc:2a:b6:6b:
                    eb:c9:fe:d4:0d:71:1b:83:38:43:76:c6:61:20:c8:
                    6d:da:27:92:9d:87:2d:28:41:d4:eb:10:5b:bb:3b:
                    74:05:f5:41:c6:4c:ab:88:78:a8:a3:83:5f:44:79:
                    8a:b3:77:00:6e:41:db:6f:bc:98:6f:99:97:f9:8f:
                    17:78:ae:5a:ef:21:6e:0f:67:68:af:1a:7d:a2:12:
                    25:64:03:53:0d:4b:04:a7:bd:61:19:4f:ff:42:db:
                    88:a6:f1:c4:59:a9:b4:6a:50:9a:15:cb:6b:3b:f5:
                    7e:c8:41:9c:3d:d5:f2:5a:df:3e:0b:63:70:07:00:
                    80:b9:6c:e3:1f:6e:ab:79:83:61:e8:30:5e:0c:c8:
                    fc:0c:d5:f7:a6:c9:1c:e7:d8:9b:94:87:ae:94:26:
                    29:e0:ae:55:f7:96:59:d4:7e:36:d8:76:ef:06:0f:
                    6c:96:22:56:68:fb:8b:8f:66:00:3d:87:4b:6b:5f:
                    21:74:7b:9e:b1:22:f9:4e:b6:26:e8:fa:17:ab:b7:
                    15:22:13:a0:e6:b8:a6:f6:d5:90:e8:3d:75:c4:f0:
                    58:43:71:f0:5e:07:88:20:ac:2b:76:e4:8b:3f:ba:
                    a6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:08:11:ED:10:DC:FE:F2:C6:56:FC:27:FE:5A:9D:E1:6E:DA:97:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/8a943651-7a61-3624-8bdc-d2c1377ba5ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:3f:70:bb:8d:f6:5b:ee:84:6a:0a:e7:52:80:e4:15:83:39:
         e8:dd:c6:b6:af:32:fc:3d:59:25:f5:c7:89:5d:c0:bc:58:ce:
         32:93:38:39:93:fb:07:34:a2:f7:14:39:f3:73:fe:1b:ff:bf:
         8e:ab:6b:69:b2:4f:e5:63:6d:35:9b:60:d7:f8:be:68:01:45:
         bd:ad:56:93:41:10:d4:b9:05:ff:d0:94:33:36:31:52:82:73:
         94:d1:a4:44:ee:74:d0:ea:20:a3:0f:7e:e7:d9:cc:1a:16:d9:
         f8:ce:75:ab:5d:3f:a3:80:96:5c:47:cf:48:f0:0b:29:64:ec:
         ef:45:00:69:69:db:a1:88:1d:4a:ad:87:26:63:df:d3:b9:7b:
         b5:18:d6:5a:8a:99:a9:22:78:b4:b6:df:2e:cf:b8:76:ab:45:
         d4:38:c0:8b:dc:32:25:3f:42:4e:c2:5a:d4:da:0f:b5:ff:d6:
         3d:b6:95:18:33:e8:b5:a9:31:c4:55:8f:48:b4:35:20:a7:41:
         e3:5b:e4:5e:eb:56:4f:72:66:27:c8:48:c8:26:44:23:c8:6d:
         ff:1f:58:d6:d1:72:5c:f2:ae:c6:fc:8e:de:ad:5c:aa:2e:0a:
         19:25:c5:53:7d:39:cb:8d:86:c1:a8:31:d3:6d:a5:f7:b0:89:
         38:6e:78:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:24:16 2026 by rpki-client