Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/9d9b51e3-1f0c-3789-9aeb-995e720a1618.roa
File:                     9d9b51e3-1f0c-3789-9aeb-995e720a1618.roa (raw, json)
Hash identifier:          v9tYN1+f5KQBeAiv/pbHf/B59p+HoMgXpzndUy+4zLw=
Subject key identifier:   FD:09:11:C1:B4:3F:7C:84:C9:BB:99:76:EA:74:15:6E:4F:7D:6B:2A
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584E1A1448667536DB6D3B988460
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/9d9b51e3-1f0c-3789-9aeb-995e720a1618.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     23473
IP address blocks:        153.33.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:48:66:75:36:db:6d:3b:98:84:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=0c1ec1c3-cb18-4401-b692-477f0685c3b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1c:5b:fd:4f:ae:c7:70:f6:e3:bc:06:da:cc:
                    a8:92:f7:31:c7:db:14:40:3e:8b:49:9b:ba:d6:aa:
                    46:04:9d:95:75:0c:1f:93:92:da:a5:fc:31:c6:7b:
                    96:29:86:2d:65:c2:59:f6:84:68:3e:ad:71:a7:2c:
                    0f:c8:e6:1e:de:92:3e:20:12:60:9d:53:bb:5f:6f:
                    2f:19:a4:8f:8a:76:2d:15:a7:c1:77:db:8c:d5:4d:
                    5e:fa:cc:35:12:be:74:53:66:0b:ec:d0:12:ff:a4:
                    f5:44:ff:a3:a8:18:06:0c:8e:c0:dc:3f:f4:db:b3:
                    34:fc:cf:5b:81:fd:9b:6c:83:bf:f6:23:b1:96:5e:
                    f1:3a:68:65:c3:4d:c2:70:86:de:fa:ee:52:6c:ab:
                    b3:47:72:e8:ba:d2:ea:f6:db:ce:33:40:2e:d1:28:
                    40:eb:0f:59:32:d7:dd:79:2b:2d:44:a1:21:bf:a2:
                    c9:ac:74:5c:18:ad:78:f6:47:d9:f5:d4:9c:37:61:
                    6a:24:a6:d4:d9:8b:d2:86:ea:1e:f7:2a:b1:3b:2c:
                    ce:a2:96:22:52:22:10:92:8e:5b:c5:10:6e:f0:02:
                    8c:ea:1f:7d:24:01:8a:bb:b2:0c:d0:a6:83:3a:fb:
                    d9:f9:dd:9a:0c:56:21:a6:a1:fa:a4:ae:fb:1e:06:
                    9c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:09:11:C1:B4:3F:7C:84:C9:BB:99:76:EA:74:15:6E:4F:7D:6B:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/9d9b51e3-1f0c-3789-9aeb-995e720a1618.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:b9:17:24:29:d1:3a:f3:0f:6a:e7:a6:54:49:7b:2b:7f:0a:
         cc:73:cc:f8:86:e4:0d:07:53:41:bc:88:cd:11:98:af:13:b6:
         7c:e6:18:1d:9f:75:e6:d5:ba:75:ac:89:2a:ca:0b:cc:74:cd:
         15:b6:48:b8:2d:bb:dc:a1:60:17:e5:79:44:3f:52:e1:bf:7d:
         79:38:69:86:cf:5e:2d:01:73:2a:5f:9e:c6:7f:60:bc:ac:e4:
         63:41:b8:16:ea:e0:27:d6:92:1e:16:12:60:02:f1:c1:46:1f:
         eb:c5:5f:63:13:b1:9e:c8:0e:72:93:37:53:f3:bb:52:77:83:
         1b:f2:b5:be:f4:56:84:67:55:82:aa:e3:e7:24:39:0d:09:d1:
         9b:5b:53:fa:cd:a2:ac:7a:5f:bc:4c:05:aa:10:96:b7:b7:88:
         fb:5b:5d:81:6a:48:2f:aa:ca:b1:57:38:0e:a1:bd:ff:6b:6c:
         e4:bb:e7:77:97:95:46:5b:b8:25:58:e8:fa:47:95:aa:db:98:
         2d:c8:e9:ca:4d:9d:9b:a7:a2:bb:66:65:cb:a3:1f:65:c7:73:
         6a:73:82:5d:65:c2:18:ed:85:a7:80:b1:9f:62:b4:24:2b:86:
         97:90:e8:c0:ce:43:19:de:2c:fb:5a:dc:48:7e:1d:07:ee:1e:
         80:e1:8f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:50:49 2026 by rpki-client