Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a7b80b80-ace6-3c38-be56-bed3f4d6e916.roa
File:                     a7b80b80-ace6-3c38-be56-bed3f4d6e916.roa (raw, json)
Hash identifier:          +Xl9I+38QHuZrrnRSYAZxl7PoLoqOwLLi+eWB8w28DM=
Subject key identifier:   A1:67:BA:87:90:D2:1C:AA:3A:7C:7D:F2:8E:19:5A:E3:86:07:B3:A2
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584E1A14501E6E18AB42C20B1E40
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a7b80b80-ace6-3c38-be56-bed3f4d6e916.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     23473
IP address blocks:        153.33.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:50:1e:6e:18:ab:42:c2:0b:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=86a559e6-9df3-4858-b2cc-34d951afd15c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:74:1f:f3:2f:1e:ee:91:8d:fb:18:9d:9a:00:
                    c3:b4:67:0f:8b:14:6b:cd:0d:f5:a3:cf:66:f0:ee:
                    35:2d:cf:22:4b:a2:d1:c3:9e:e4:f4:38:91:6e:53:
                    7e:a1:d4:bd:c1:c3:5c:af:ec:36:84:a1:98:9f:95:
                    ab:a5:8c:01:9c:90:dc:c1:94:c3:79:ef:16:71:dd:
                    5f:15:1c:fb:fc:ff:c5:fb:d8:13:c5:88:7f:70:5a:
                    b1:21:8c:ac:db:6b:62:15:3d:e5:f5:63:4c:7f:fb:
                    bb:10:09:b9:32:2c:35:09:aa:71:a3:4a:72:1e:00:
                    80:da:d9:58:08:ce:82:a7:c4:62:8c:77:0a:64:14:
                    5c:7d:e3:8e:fa:ff:6d:41:90:1b:ea:42:ea:a2:8b:
                    ac:61:35:53:4b:0a:1f:d3:00:35:17:51:89:39:34:
                    b2:29:c5:0b:64:5b:76:5f:a9:a0:a0:50:23:b1:60:
                    06:f8:d3:e7:07:b5:7c:bb:31:d8:92:ee:36:fa:49:
                    3f:51:00:5d:20:f7:ac:20:02:fc:61:8c:05:32:3d:
                    bd:73:14:9a:dc:af:d1:8d:1e:2e:5f:59:6c:04:47:
                    af:0f:c1:41:90:0a:6a:6d:b8:8c:04:c3:93:13:17:
                    93:a8:72:db:5c:8c:34:63:69:a6:28:0e:68:ed:87:
                    41:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:67:BA:87:90:D2:1C:AA:3A:7C:7D:F2:8E:19:5A:E3:86:07:B3:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a7b80b80-ace6-3c38-be56-bed3f4d6e916.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:52:72:2e:ab:95:4b:cd:54:13:37:4a:0d:08:07:47:2e:38:
         75:18:93:ae:68:f4:25:2c:72:31:50:8a:df:bb:55:da:d2:3e:
         9e:26:a0:e5:7c:1c:2f:c9:df:7e:2c:4c:f7:63:82:03:4a:04:
         25:09:34:33:93:9c:b9:ca:43:87:5a:30:b0:7d:4e:fa:d4:a0:
         7d:02:cd:6d:78:0e:3f:12:f4:35:22:3e:01:ab:9f:41:c4:cb:
         62:ea:43:4a:55:20:ac:e1:90:2c:ab:e1:69:f7:93:98:61:e0:
         c7:34:82:9d:41:b8:c6:b3:82:05:17:c2:0c:f5:80:0b:74:de:
         10:fe:6c:3e:ea:b4:31:e6:db:ad:d8:ea:82:e5:9d:a8:db:15:
         11:3e:db:8b:04:b7:09:9a:5c:cb:2e:50:72:e4:73:d9:bc:cf:
         0d:05:7d:de:e9:72:bf:a6:a4:71:7a:26:11:8a:68:2c:d7:62:
         00:29:72:44:b4:dd:d5:5d:6c:cd:93:c3:f5:6b:56:8b:b5:05:
         0f:15:ce:37:01:af:8e:8a:3e:bf:aa:8d:ba:a9:3b:99:4c:17:
         18:80:07:23:4e:2b:8f:4a:a7:31:ba:31:9d:c5:9a:46:c5:22:
         d6:f3:d5:0e:8d:54:65:7f:f7:cd:89:99:dd:28:5d:e8:2a:a5:
         e8:46:f4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:52:18 2026 by rpki-client