Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c5b77b96-0202-3ac6-8375-f0b0cb4b5214.roa
File:                     c5b77b96-0202-3ac6-8375-f0b0cb4b5214.roa (raw, json)
Hash identifier:          jHmn44Sy6AZ5yUpvU649N/8CpJFEdoIQXHoMuznJ418=
Subject key identifier:   FD:73:8D:3A:2C:40:C2:7E:B5:CE:06:76:C1:F2:D9:91:1F:F7:2F:94
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B79D616596E5609ABAC507080
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c5b77b96-0202-3ac6-8375-f0b0cb4b5214.roa
Signing time:             Fri 10 Oct 2025 13:51:52 +0000
ROA not before:           Fri 10 Oct 2025 13:51:52 +0000
ROA not after:            Thu 08 Jan 2026 14:51:52 +0000
asID:                     23473
IP address blocks:        153.33.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:d6:16:59:6e:56:09:ab:ac:50:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Oct 10 13:51:52 2025 GMT
            Not After : Jan  8 14:51:52 2026 GMT
        Subject: CN=8f3bc9ab-e7bd-4bb0-ae65-48f37149b143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:89:1f:a1:a3:a4:60:c2:fd:31:33:cd:85:09:
                    41:25:4b:49:c2:e4:50:24:5e:5c:f2:ad:21:48:4c:
                    23:17:c0:9e:c2:47:74:35:6a:fa:5a:65:3d:59:4e:
                    49:70:f3:fb:03:70:a3:fa:fc:04:e0:c8:86:8a:67:
                    34:7d:f2:b8:d6:4c:89:b8:bd:e9:a5:4a:8f:0c:6d:
                    e6:48:6e:5b:76:c9:d7:7c:b8:72:58:7a:5d:49:35:
                    09:16:a0:17:19:29:35:40:16:b7:38:eb:1b:98:e9:
                    89:0d:c1:4d:ee:1b:5d:49:14:9f:d6:3f:95:34:e0:
                    8c:8e:84:6d:34:2c:e0:7e:98:c6:2b:5a:94:e5:91:
                    4f:2f:77:56:cc:68:c8:fe:ad:53:ef:a7:8f:26:7d:
                    14:a0:1d:73:1c:11:d6:d6:78:21:0d:96:2b:9b:5d:
                    bf:c6:61:01:91:b5:43:45:29:4b:46:04:9a:6d:40:
                    e5:30:28:bd:00:c4:68:3f:9c:6f:0c:e2:5b:7c:51:
                    7a:1e:07:03:43:78:f8:2c:25:53:65:9d:4f:0b:28:
                    30:a8:a8:8e:a0:8a:21:23:7b:e8:a4:b3:55:74:06:
                    fa:10:80:90:29:db:b6:97:53:94:2d:28:7b:02:9b:
                    d9:82:81:94:f0:0b:8a:54:d6:c0:38:84:00:1e:9e:
                    6f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:73:8D:3A:2C:40:C2:7E:B5:CE:06:76:C1:F2:D9:91:1F:F7:2F:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c5b77b96-0202-3ac6-8375-f0b0cb4b5214.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.33.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:01:27:49:6e:24:cc:03:5b:b6:cb:e5:47:51:bc:58:83:21:
         ed:94:4e:55:77:0a:ea:91:08:88:05:33:bf:9c:6c:e0:a5:1f:
         38:ac:ac:25:63:1a:c6:8a:cd:dc:a5:7d:2f:a3:26:d4:00:b6:
         99:5b:16:0c:ed:f0:7c:15:94:70:c1:27:c2:54:22:9d:d2:37:
         69:9f:95:14:6b:8b:65:f4:2c:98:39:dd:35:75:62:b0:f7:d6:
         7a:48:14:60:48:7b:59:87:8a:87:7e:be:2c:01:8a:86:af:99:
         ac:96:19:dc:dc:1d:6b:02:38:8a:ba:1b:f2:38:cf:39:b4:20:
         20:7f:be:22:ad:a0:b9:ca:91:53:c9:98:50:93:c7:c9:08:83:
         a2:b6:a1:4f:d8:dd:1c:52:96:16:9b:b8:54:f0:cb:6f:f2:40:
         36:00:af:0d:cf:26:a8:58:8e:50:18:44:c1:18:21:05:0f:6c:
         98:65:84:12:a9:6c:36:08:bb:c5:af:3c:b0:e3:93:c1:72:70:
         b8:78:cd:10:d3:51:85:50:9e:21:10:d2:70:a5:af:84:05:0a:
         5a:f1:cc:a7:1c:19:e9:5a:c2:c9:ef:68:5a:a4:fc:36:55:30:
         99:d6:7e:e7:f1:9e:8a:b6:96:75:e6:ca:b5:e1:1d:37:c3:88:
         ec:36:2c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:50:17 2025 by rpki-client