Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4763b054-0af0-3c46-8a21-d07e42331ce8.roa
File:                     4763b054-0af0-3c46-8a21-d07e42331ce8.roa (raw, json)
Hash identifier:          c4cef6Vl4ccNgjfvDYgN30xYS3omzzPIwz9CsYMyd5k=
Subject key identifier:   C8:B9:AE:91:E0:71:41:CC:97:E4:49:31:BD:62:24:C2:03:22:74:B9
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F576828E8C511DE983DED2640
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4763b054-0af0-3c46-8a21-d07e42331ce8.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     23473
IP address blocks:        153.33.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:28:e8:c5:11:de:98:3d:ed:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=09b3dac6-1652-447f-9bbc-0a96fc26581b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:be:d0:15:96:f5:17:cf:ed:52:d5:06:85:30:
                    7a:60:32:2f:03:2c:72:5e:e0:df:50:8a:5d:fd:4f:
                    c1:13:5d:ef:33:5a:e3:d3:cc:c6:57:ef:a9:96:34:
                    bc:eb:3e:69:5c:71:b3:ae:86:65:c4:cb:70:50:6e:
                    7f:c2:70:20:84:73:80:2f:61:bd:65:ec:0c:c3:67:
                    3a:61:78:f1:91:d5:b4:d0:df:b6:ef:4b:e8:6a:d9:
                    b7:3c:d5:74:0e:62:f2:05:72:df:87:85:ce:e5:78:
                    53:48:7d:54:89:a0:3d:5f:fb:3b:03:21:83:d7:a7:
                    7f:78:93:85:2f:2b:da:7f:72:0d:48:d0:48:26:79:
                    7c:90:25:21:4c:ab:bf:1a:f1:72:a6:f7:89:b7:9f:
                    5c:e4:3b:14:99:af:22:a7:06:83:a4:de:05:96:00:
                    bd:09:60:10:a5:c4:7d:e6:49:ff:b9:ce:4b:7d:4f:
                    e7:6b:83:32:04:94:df:cc:36:56:c8:67:5b:08:30:
                    0e:cf:6b:51:67:c5:48:7c:3e:75:6b:45:a4:7b:d8:
                    66:f3:41:7d:18:74:c2:31:26:aa:c4:66:c7:a0:fd:
                    73:02:a8:b8:bb:27:6e:77:03:c2:56:01:5c:fd:ad:
                    c7:4c:8d:35:53:05:85:97:41:05:40:4d:99:18:b0:
                    b2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B9:AE:91:E0:71:41:CC:97:E4:49:31:BD:62:24:C2:03:22:74:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4763b054-0af0-3c46-8a21-d07e42331ce8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:28:88:e8:5a:d1:c0:f5:52:c8:97:dc:a8:c7:30:55:45:a0:
         d9:62:ef:dc:52:72:b7:e7:c2:87:cb:da:ff:92:9e:64:e0:10:
         40:98:94:63:ef:62:4b:6e:53:da:43:a8:ac:d2:79:1a:f6:0f:
         08:0c:d5:08:bc:f3:de:4d:58:ae:0a:1d:28:36:b7:68:7c:ff:
         fa:b6:85:7d:fd:6f:39:fc:ee:38:57:43:32:75:2b:03:ab:71:
         6c:e4:d9:3b:c0:49:2f:63:02:b1:2a:a3:82:6a:fb:5c:35:1d:
         d8:56:8e:4e:a8:65:bb:07:ce:01:d7:64:3c:16:82:d5:c0:50:
         4b:42:3c:94:b6:df:2a:ac:e1:47:af:01:a6:6b:20:57:3d:00:
         eb:fa:98:0e:19:16:05:5d:d0:8f:ea:34:9d:0b:f2:57:39:25:
         f3:5a:fb:8f:bd:62:f1:50:6d:ff:2b:32:50:68:d4:06:ff:5b:
         44:d4:33:0f:ce:58:99:21:7e:e4:93:70:18:96:8a:fa:98:e1:
         ff:fe:1d:a1:3d:ba:00:76:02:4e:ea:2a:0f:44:92:7e:4a:c4:
         71:92:d2:a9:1e:46:d1:fa:90:51:fb:58:b8:2e:4b:39:91:8e:
         79:ff:0c:d5:00:38:07:b3:b4:4d:67:25:f0:38:77:54:97:c3:
         8b:fa:57:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 12:13:46 2026 by rpki-client