Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b75825a3-ba43-3372-9cbc-ebf79ca62cb7.roa
File:                     b75825a3-ba43-3372-9cbc-ebf79ca62cb7.roa (raw, json)
Hash identifier:          a4qHTe5Z9TxkHJG9MhI9NIPQptSCD9kM97H9zVtJNDo=
Subject key identifier:   A8:4D:58:B1:65:E6:0B:51:24:7E:94:39:35:F1:DE:95:81:D3:87:61
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B7A0BEE807870900AB74BFE00
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b75825a3-ba43-3372-9cbc-ebf79ca62cb7.roa
Signing time:             Fri 10 Oct 2025 15:40:22 +0000
ROA not before:           Fri 10 Oct 2025 15:40:22 +0000
ROA not after:            Thu 08 Jan 2026 16:40:22 +0000
asID:                     23473
IP address blocks:        153.33.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7a:0b:ee:80:78:70:90:0a:b7:4b:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Oct 10 15:40:22 2025 GMT
            Not After : Jan  8 16:40:22 2026 GMT
        Subject: CN=3e30dbc6-b619-4b75-971b-9c1c9942fb3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0b:3a:13:0b:d2:15:04:e6:e5:da:28:24:42:
                    44:27:cc:4b:6c:7c:6b:98:93:19:a8:9e:43:66:62:
                    8b:7c:1a:b5:d4:11:2b:9c:53:72:23:75:5b:d7:48:
                    3a:b5:45:82:2d:7c:57:01:fd:86:85:02:58:7b:3e:
                    d9:9e:17:37:30:99:bd:9b:8d:08:40:56:66:e8:9f:
                    71:90:78:cc:87:ea:dc:4d:84:49:a4:8f:10:b9:39:
                    e6:67:2f:30:75:43:b4:c7:55:18:95:c2:a5:dc:55:
                    0c:ee:9a:48:91:0d:2f:5c:60:ab:71:55:7a:1a:36:
                    84:37:2d:61:f7:31:21:46:0b:d1:72:f5:4a:ca:5a:
                    a1:b7:c4:93:5b:bf:52:62:62:9e:44:97:0d:86:3f:
                    9c:a8:84:a4:33:65:68:bb:e6:76:0e:30:bb:81:f5:
                    86:02:80:a4:80:f0:77:ee:89:39:dc:63:83:dd:40:
                    60:d7:d1:65:cd:a4:74:a6:b1:d6:85:c3:23:8e:4d:
                    9f:99:30:e5:ef:08:d7:2f:cb:bd:34:6f:68:a7:33:
                    df:ef:e3:92:d4:dc:c4:5b:84:6b:a8:e9:f4:9b:ff:
                    05:77:c7:5c:61:a8:cd:3c:33:37:44:76:f3:fe:a4:
                    d7:5f:2a:aa:15:64:54:70:db:11:bc:5d:c9:fd:47:
                    c4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4D:58:B1:65:E6:0B:51:24:7E:94:39:35:F1:DE:95:81:D3:87:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b75825a3-ba43-3372-9cbc-ebf79ca62cb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:2e:7a:3a:c8:5a:e6:5d:70:ee:09:a2:1b:eb:6c:bf:14:9d:
         92:9c:25:fc:70:5b:a7:3d:7b:1b:25:f4:9c:a8:b3:b6:2c:76:
         e9:04:b9:3b:75:6e:9e:f9:bc:43:d3:4d:7e:86:da:ed:c4:cd:
         a1:48:af:7b:c4:cd:14:20:c2:ce:64:fa:fb:2c:2e:08:f8:1e:
         7b:38:38:f7:08:6f:d6:16:8c:9f:69:99:48:8e:ac:49:2c:ed:
         fb:72:16:03:40:a0:69:5c:dd:47:d2:48:95:54:f0:56:13:d4:
         f9:91:60:36:68:07:0f:13:43:db:1c:cb:7f:ce:28:14:a3:24:
         f4:5e:6c:ba:81:cd:1a:c2:1f:fd:ee:b9:a8:bd:76:a7:de:f6:
         81:c4:83:c5:9e:b9:a4:52:12:ec:a7:b6:0a:55:b7:ac:b5:84:
         b3:86:31:6b:6a:e2:22:7b:0e:f8:fa:3a:5c:a4:32:1e:09:d5:
         97:3a:0d:c2:1f:9b:e9:71:16:f7:a6:84:5d:59:98:3b:1b:13:
         ee:84:27:66:99:97:23:b0:3f:c8:94:06:08:5f:41:03:0b:f9:
         6d:51:ab:35:9a:3e:20:57:e7:15:3f:75:df:0c:22:c6:95:6c:
         58:9a:f7:82:4f:40:76:ee:c3:bd:2c:2b:4e:e8:70:82:c3:7a:
         e2:a8:19:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:49:09 2025 by rpki-client