Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f252c4bc-3817-3e10-86ae-8f74789b9b04.roa
File:                     f252c4bc-3817-3e10-86ae-8f74789b9b04.roa (raw, json)
Hash identifier:          j/k5X90651+oOlXSNW3FwtdFdMBhU5ejJf7Q4Z8Cxws=
Subject key identifier:   49:B1:1D:62:5D:BF:D9:57:2A:63:14:12:4E:9E:B3:63:23:18:96:4B
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584E11B42A55984591C7FBF67E80
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f252c4bc-3817-3e10-86ae-8f74789b9b04.roa
Signing time:             Fri 05 Jun 2026 09:00:12 +0000
ROA not before:           Fri 05 Jun 2026 09:00:12 +0000
ROA not after:            Thu 03 Sep 2026 09:00:12 +0000
asID:                     23473
IP address blocks:        153.33.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:11:b4:2a:55:98:45:91:c7:fb:f6:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jun  5 09:00:12 2026 GMT
            Not After : Sep  3 09:00:12 2026 GMT
        Subject: CN=3763035c-c427-445a-8feb-c52545352ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ae:9b:95:c3:d1:32:9d:7b:36:1e:fb:9b:37:
                    9b:e8:ec:03:30:6f:b5:64:d8:c9:05:97:e7:a4:26:
                    8b:18:5c:09:1b:12:51:98:2e:9e:58:89:f2:46:bb:
                    d1:6c:b9:43:cc:30:b9:b2:2f:7a:3b:4b:89:6e:78:
                    a6:f4:9f:20:97:6f:58:17:33:dc:e3:3f:78:87:b8:
                    02:68:64:97:2e:39:39:5f:df:eb:d7:40:17:65:57:
                    af:9f:45:40:39:99:db:fb:05:f7:89:25:37:3e:7c:
                    d1:32:ac:c9:c9:56:65:16:b0:b0:0b:b6:6a:80:6a:
                    1c:3d:d0:eb:4c:09:3a:9a:77:a7:24:2e:07:2c:bf:
                    8d:27:97:d2:61:e5:e9:d8:9c:04:09:d1:3a:6e:78:
                    e2:1b:30:6d:f5:e0:39:a1:98:84:57:86:61:07:2b:
                    4e:3a:1a:57:d5:89:9a:ba:69:96:6f:1c:a2:9a:83:
                    02:db:36:1a:85:0d:33:cb:1d:e5:8f:6a:48:d1:9c:
                    16:34:0f:88:dd:4b:61:dd:8f:ca:f7:6a:38:46:9f:
                    23:9d:4d:63:86:d4:a8:47:85:52:71:74:a1:c8:c9:
                    57:d7:6b:49:19:b0:bd:11:e6:2f:89:8e:ae:ab:d9:
                    fc:e0:e8:42:7b:c7:b7:8b:5b:86:2e:2e:6b:a1:cb:
                    70:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B1:1D:62:5D:BF:D9:57:2A:63:14:12:4E:9E:B3:63:23:18:96:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f252c4bc-3817-3e10-86ae-8f74789b9b04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:7c:c1:8c:e3:dd:e0:2a:63:7f:e8:b3:50:96:71:b0:18:98:
         ca:16:00:23:6d:9f:9a:ed:2c:b2:1f:5c:49:44:10:de:11:18:
         cd:73:06:82:f1:27:3e:e5:f5:0d:09:fc:7d:df:0e:9f:e7:ff:
         e1:ed:3d:92:67:8a:12:19:ee:82:3a:ab:76:0c:e4:c4:50:7e:
         6f:a1:87:a7:60:43:51:0b:d2:d1:6f:f8:b7:06:81:ed:c4:71:
         07:94:27:dd:57:b4:4f:2e:28:dd:6e:dd:c3:cc:dd:29:e1:a5:
         35:a3:ad:92:04:e6:5f:6d:fa:dd:5a:dd:70:0b:6f:a2:91:a3:
         47:ab:e2:f4:8e:ec:32:3b:cd:91:5d:35:f4:b0:1f:0b:3f:39:
         e7:10:c9:8b:8e:a9:42:52:bc:5d:14:36:dc:11:ce:a1:59:4d:
         78:2d:83:d5:2d:af:17:4d:d7:0f:72:ac:21:d4:5d:c3:db:d9:
         b0:8b:d1:a2:c5:ee:c9:50:81:78:9c:1f:9c:78:38:7a:89:a8:
         16:38:08:93:bb:15:bb:f5:fd:06:f1:05:43:08:74:cd:d9:ae:
         b1:1d:ab:e4:5c:8a:55:b3:71:e1:03:4a:38:2a:a3:07:d3:44:
         9f:a1:89:8f:9c:f3:5a:65:cf:67:24:54:ff:19:e5:bc:65:8e:
         15:a2:b4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:25:24 2026 by rpki-client