Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a27b0c7f-535b-3562-9e07-fa1249713a49.roa
File:                     a27b0c7f-535b-3562-9e07-fa1249713a49.roa (raw, json)
Hash identifier:          no0j4xYAEMbeuCRAkh4Fh7/ohMPTfm5dhrIzlTuTl0A=
Subject key identifier:   A0:CB:92:03:C9:4B:99:DF:E9:06:8E:6D:1D:63:C7:93:B4:D3:16:EA
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584E1A1439E96DCCEBB761AF6180
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a27b0c7f-535b-3562-9e07-fa1249713a49.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     23473
IP address blocks:        153.33.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:39:e9:6d:cc:eb:b7:61:af:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=9542b89b-1e60-4662-baea-b6586d45de18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e9:f9:23:5d:e7:c9:97:17:94:8b:ff:89:f1:
                    84:44:bf:91:9d:de:53:fa:0c:f3:3e:c5:19:db:63:
                    23:07:0a:ae:6b:10:02:38:d0:1b:4a:53:c2:17:8c:
                    28:a6:98:cb:b3:10:d5:da:92:d9:31:40:22:ea:3e:
                    e7:fd:a1:5e:97:84:c3:42:3f:f6:a3:c6:46:7f:61:
                    39:d9:cb:dc:5e:fa:18:c0:26:9e:9a:96:5b:a9:02:
                    1f:9a:af:af:16:f1:b0:91:50:87:ca:98:59:40:54:
                    cc:c8:57:94:a3:e2:5d:7b:40:97:c4:e8:58:7f:fd:
                    c5:49:94:c4:3c:83:68:53:dc:06:10:b5:b9:be:6a:
                    58:3e:78:c7:9a:8b:49:ef:c7:a7:07:34:54:79:18:
                    8a:cf:7b:38:d7:5e:7e:b2:48:d5:7e:3f:f7:74:13:
                    40:76:0d:26:38:29:35:90:51:9e:ca:88:9c:b3:1f:
                    2e:ce:c2:7c:bd:58:11:5f:94:1d:3a:05:cb:a4:54:
                    16:8a:f5:63:cb:8a:2d:41:3d:d9:3b:92:74:25:1c:
                    20:2d:3c:90:51:28:7c:24:e3:1c:19:da:78:ca:2b:
                    31:4d:9e:ef:5d:0c:d5:53:fb:d4:b9:77:2e:19:de:
                    9d:65:b7:6e:cd:50:0e:83:8f:89:74:3c:98:c4:ae:
                    7f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:CB:92:03:C9:4B:99:DF:E9:06:8E:6D:1D:63:C7:93:B4:D3:16:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a27b0c7f-535b-3562-9e07-fa1249713a49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:9b:37:43:ad:9a:f6:90:fc:21:63:69:8d:f6:a9:8e:7a:e1:
         b6:f0:a1:6e:fb:ac:e8:f7:93:17:e2:4d:1d:e9:2d:33:d1:b7:
         e8:04:f4:34:a2:61:24:9e:f2:24:49:7b:b8:b2:d0:6e:ad:af:
         00:d7:8a:fa:1a:89:14:8d:b5:15:9a:68:05:bc:5a:78:3f:22:
         34:c2:bb:e1:6d:7c:1d:0e:98:27:96:0d:ee:e3:30:39:61:e6:
         b4:73:d4:9f:b1:c0:56:7d:44:20:f7:32:86:06:08:dc:31:01:
         a5:91:93:a1:8e:eb:a0:56:f9:5d:30:bf:c5:f5:ed:95:06:ac:
         e8:b4:4f:47:67:f6:7f:e6:4b:07:b7:a3:bf:6d:a8:50:a5:5a:
         2a:6d:37:9a:dc:e3:a2:ae:9a:19:e7:2e:74:6b:52:8c:c7:85:
         24:7b:d5:e6:6e:bd:f3:99:87:57:d4:2e:a9:68:ff:40:04:f7:
         f9:aa:60:ec:27:7f:de:6d:41:4e:af:83:5f:51:6d:71:d3:4e:
         2f:da:ea:c0:c0:04:f5:13:3e:65:7c:37:1d:0b:73:5a:2b:22:
         16:72:91:51:96:15:14:c8:c3:97:7c:ca:d7:12:bb:5e:4f:3b:
         e6:a0:13:54:1f:56:47:04:60:30:84:09:79:26:29:a3:98:0a:
         b5:d4:da:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:14:16 2026 by rpki-client