Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b2998d56-7686-366d-b1a3-802e3df22ab1.roa
File:                     b2998d56-7686-366d-b1a3-802e3df22ab1.roa (raw, json)
Hash identifier:          W315nSH4mvLJtfGaedP84Ce+Vf0t/6p6crsBatgFHfs=
Subject key identifier:   48:F7:EC:33:4B:70:4E:A6:A0:BC:84:AB:53:C7:07:9A:F4:A5:5C:84
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584E104F29FE2D28B5F612F19680
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b2998d56-7686-366d-b1a3-802e3df22ab1.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     23473
IP address blocks:        153.33.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:29:fe:2d:28:b5:f6:12:f1:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=4eb14639-9524-4d28-b39a-b1997e23f775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4e:d5:f9:a3:cd:21:0a:fc:5c:6e:41:cd:9b:
                    88:b0:1e:cd:f1:a6:a0:7d:fe:65:e0:7c:73:c3:e7:
                    52:10:23:d9:7d:2e:ab:89:9d:b5:fa:0d:3f:e0:d6:
                    67:5c:a1:da:8d:2b:0a:5f:c0:9f:52:03:74:e5:ed:
                    9b:80:65:c2:23:02:95:aa:1f:50:3f:e7:52:1e:41:
                    5e:c5:b5:bb:37:d0:7f:dd:c5:11:fa:b6:87:63:70:
                    1d:6f:b7:38:5d:96:36:44:d5:ba:0b:3c:a6:77:41:
                    43:14:63:89:f7:25:e9:6f:9c:a6:66:15:fc:c9:21:
                    ab:0d:4a:33:a2:28:0b:ef:68:92:83:08:12:d1:80:
                    bd:7c:d0:b7:9f:2a:a7:b1:80:92:1a:6f:22:7b:04:
                    63:f0:e7:25:d0:0b:21:0c:30:18:40:24:c4:9e:d6:
                    ac:6f:11:24:a6:73:6d:66:36:8b:d9:ee:67:e0:d7:
                    ec:a8:da:4b:6e:5d:c4:6e:42:b4:6c:e2:28:02:85:
                    73:07:8d:40:80:51:de:12:22:57:8a:4e:2e:9f:05:
                    57:8b:c9:1b:67:2f:0a:cd:f3:1b:25:f4:1e:92:dd:
                    78:1a:a0:85:c5:b0:de:9f:ac:04:f6:9f:88:7e:5b:
                    bb:05:c1:b8:66:e7:fa:21:33:67:54:72:4e:08:70:
                    78:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F7:EC:33:4B:70:4E:A6:A0:BC:84:AB:53:C7:07:9A:F4:A5:5C:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b2998d56-7686-366d-b1a3-802e3df22ab1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:9b:0a:89:88:6d:73:62:dc:a7:60:34:85:f4:10:ab:ab:03:
         39:f1:60:af:c4:6d:45:b9:5b:9a:56:d2:02:15:36:ca:af:8f:
         bd:34:90:41:58:af:45:dd:18:29:0e:62:58:b4:69:9e:d4:a1:
         cb:7b:5d:24:6a:74:f2:68:a9:4f:0d:b8:bb:9b:4b:5f:ab:a5:
         76:f0:5c:68:85:e2:d1:f0:be:61:63:05:b5:4a:8e:10:7b:81:
         1d:92:10:06:02:a2:d8:89:d3:37:34:3a:a3:57:72:3f:06:81:
         28:63:a4:cb:17:98:4d:b0:51:55:a5:23:4a:fd:fe:d4:d9:8c:
         40:8e:ee:00:25:53:3b:73:b0:a8:a5:4e:28:d0:86:c0:41:af:
         f4:c0:ba:40:d5:92:1d:c1:00:98:75:ef:04:61:ee:92:69:66:
         89:27:8d:46:62:a7:91:ea:1d:55:0d:0e:88:e5:ea:77:a5:79:
         45:ef:54:ab:d3:07:8c:ff:fc:e5:1e:f9:d5:bc:ea:03:81:f8:
         dc:8e:f4:73:a1:ce:b0:57:2e:81:ba:bd:0d:72:fc:ca:b9:09:
         88:b0:f2:8a:1a:4c:0f:33:cb:d7:d2:2a:2b:99:1b:ad:97:8e:
         28:04:8e:af:16:7d:25:6f:61:c6:20:37:e6:6d:8c:2f:fd:e4:
         49:ff:dd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:33:16 2026 by rpki-client