Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e4bd1d27-b711-390d-9dc8-ee37e95abca2.roa
File:                     e4bd1d27-b711-390d-9dc8-ee37e95abca2.roa (raw, json)
Hash identifier:          MMDnZvWyqc6kgLo/ieg6QnhX09A85i/XwgHhjFyYtRA=
Subject key identifier:   65:39:34:5A:B5:23:87:30:B7:8B:E6:3E:7A:11:F4:F9:14:74:B8:D6
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584E1A1434EDDEB8B432EC497500
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e4bd1d27-b711-390d-9dc8-ee37e95abca2.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     23473
IP address blocks:        153.33.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:34:ed:de:b8:b4:32:ec:49:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=bce88df3-0e71-4f87-bb3b-afb97ecbeb04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:37:45:25:05:a3:bc:ef:4d:d7:fd:f0:3c:7e:
                    5d:86:e6:ca:ec:0e:e5:36:6c:3a:4d:29:0e:1c:23:
                    bd:0c:bd:8d:73:21:f2:21:a7:cc:e7:04:ba:bf:69:
                    67:24:76:4b:b8:ee:7e:6b:b6:2f:9d:37:67:1c:b0:
                    75:51:c3:98:a1:63:06:2e:4f:b0:83:78:75:af:9e:
                    94:1a:6b:59:09:83:58:40:8f:c8:af:2e:cd:17:43:
                    ff:f4:35:b1:97:a9:ef:ff:d3:3b:d3:05:78:5c:c7:
                    13:d9:fe:30:de:1b:16:21:46:be:57:68:6a:52:5e:
                    56:10:c8:18:ca:48:cb:35:2e:d2:59:de:d7:fa:7e:
                    09:b7:15:58:0d:f6:0f:34:dc:a8:9b:4e:aa:a6:e9:
                    48:7c:1b:69:f9:79:04:a9:7f:72:76:98:e4:ac:75:
                    6d:03:4c:1d:6a:43:51:a1:c2:da:4b:d8:fb:cd:16:
                    6c:46:33:64:3e:74:ca:09:ad:c2:9b:90:a6:b8:9d:
                    c5:ac:99:c8:0c:7c:8e:e7:14:da:ad:03:cc:c1:9c:
                    97:0a:ca:c1:b2:82:af:2d:0a:8a:ad:23:05:01:f7:
                    72:de:f2:72:53:5f:ff:b5:98:d2:ab:a0:51:ac:e9:
                    9b:fa:ae:20:0a:3a:9b:f6:8c:a5:21:cf:88:18:42:
                    17:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:39:34:5A:B5:23:87:30:B7:8B:E6:3E:7A:11:F4:F9:14:74:B8:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e4bd1d27-b711-390d-9dc8-ee37e95abca2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:1e:30:39:19:f8:45:a8:e8:96:5f:dd:0f:21:78:3c:bc:53:
         fb:89:f3:ab:20:f8:f6:e1:9e:83:06:6d:b2:8a:61:7f:c6:b5:
         7e:37:77:c4:72:7a:2a:81:49:15:ba:d4:1d:63:3f:50:d1:14:
         62:2d:12:35:d8:2f:7e:25:1f:70:04:87:e3:1e:78:60:4a:30:
         34:6a:f9:c3:20:9b:81:23:a9:a0:de:d0:b7:30:e2:9f:ac:58:
         c4:84:33:38:bb:15:cf:e2:a7:da:d7:38:29:03:fe:7f:07:85:
         d3:99:d1:96:67:69:5b:af:8a:7b:40:b0:ff:3c:6e:0b:35:c6:
         05:77:92:36:62:ba:ad:de:af:60:5e:5b:7f:70:73:9c:83:3f:
         5d:2d:88:eb:7f:b1:db:db:54:fb:35:de:99:ec:f1:6f:c1:e3:
         de:28:73:70:06:13:88:a2:28:aa:10:17:ad:66:68:24:aa:2b:
         17:49:17:0f:9b:fe:5d:24:f0:49:4d:6c:66:d4:00:33:05:c4:
         33:6a:8a:f2:36:33:b1:ef:65:e5:0e:83:92:3e:3a:09:a4:cd:
         2e:73:cc:58:21:4a:1c:35:25:5b:55:cc:55:34:c0:e4:d3:28:
         11:b3:2e:0f:c5:8c:88:18:2c:d6:20:f1:04:03:29:7d:f0:85:
         dd:cd:29:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:00:49 2026 by rpki-client