Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0a31d634-8055-3295-a56b-ea66de7f4117.roa
File:                     0a31d634-8055-3295-a56b-ea66de7f4117.roa (raw, json)
Hash identifier:          /uCPjp2Wij34bVSzkybpPE6r9W4U3P3RlEygPw/tWKU=
Subject key identifier:   D7:FF:64:A7:10:9E:B5:AF:9B:0F:C9:F1:04:33:96:2C:61:BB:BD:76
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584E02D07E8F5B498C231A7FB400
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0a31d634-8055-3295-a56b-ea66de7f4117.roa
Signing time:             Sun 31 May 2026 01:00:10 +0000
ROA not before:           Sun 31 May 2026 01:00:10 +0000
ROA not after:            Sat 29 Aug 2026 01:00:10 +0000
asID:                     23473
IP address blocks:        68.180.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:02:d0:7e:8f:5b:49:8c:23:1a:7f:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: May 31 01:00:10 2026 GMT
            Not After : Aug 29 01:00:10 2026 GMT
        Subject: CN=7449407c-ad12-4bb3-b11d-2e745e7524ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4b:f0:68:6e:9f:8c:49:9b:4f:89:93:6a:63:
                    cf:dd:86:6d:95:63:c5:ea:50:b3:7d:dd:56:9f:6d:
                    e4:7a:27:35:7f:8b:3e:76:80:24:7a:85:76:83:d4:
                    1a:64:ba:af:1d:dc:b0:ce:6c:5b:92:ae:55:e2:02:
                    88:60:3e:e3:dc:f6:a7:a9:26:91:2f:ba:4a:d8:e9:
                    09:76:ec:50:ce:70:2e:50:82:ea:5b:17:3c:c2:26:
                    3a:bc:9a:e7:6e:c4:11:ff:de:de:4f:a5:c3:70:63:
                    20:07:e8:ec:1c:10:e2:5a:e8:46:f6:0e:31:fa:2c:
                    6b:d0:26:90:a3:33:58:6c:a8:58:0b:68:03:7b:48:
                    b2:83:8b:f8:9f:fe:0b:4b:be:67:f2:25:14:73:ae:
                    f5:36:80:36:2d:d2:6b:31:94:29:c5:9a:00:b7:84:
                    3c:34:32:19:62:d9:90:f3:7d:dd:89:bb:28:b4:f8:
                    e3:56:0d:24:27:81:09:f2:75:73:5c:2f:1b:f3:b7:
                    b4:a9:7c:16:26:d8:14:d1:a9:c7:db:e6:ca:9d:4b:
                    e4:ec:dc:6b:aa:40:7b:d0:b5:0e:9f:0e:a2:ce:bd:
                    51:fa:88:0b:ff:35:cc:da:c3:60:3b:b1:69:e3:cf:
                    55:85:bc:4e:ce:a1:83:36:38:70:fc:65:0b:3e:87:
                    aa:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FF:64:A7:10:9E:B5:AF:9B:0F:C9:F1:04:33:96:2C:61:BB:BD:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0a31d634-8055-3295-a56b-ea66de7f4117.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.180.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:e8:ae:58:0b:b6:f1:d7:90:32:8f:bc:6d:9e:2c:1b:a8:12:
         06:89:9a:50:ae:12:11:c5:f3:6f:e8:b5:75:ca:be:5a:d7:f3:
         32:ec:9f:77:99:d4:ee:4f:3b:7c:71:a0:d3:77:05:fe:88:60:
         de:bf:23:e0:a8:fa:c7:e9:42:ee:05:51:4b:a0:b7:d0:0a:96:
         65:22:e6:0d:42:4d:2d:d1:80:e0:ca:de:82:50:43:e7:71:a2:
         da:d1:f8:f6:32:12:51:bb:12:cd:08:01:81:bc:b7:4a:43:b8:
         dc:37:c5:43:5d:d2:a0:9e:9b:c8:c5:96:3e:b7:8d:18:42:5e:
         d1:06:96:6b:0a:29:73:59:87:52:f7:ba:08:a8:38:f2:96:39:
         34:58:b6:7f:2d:b2:e5:83:69:ea:7f:57:37:37:0e:74:1a:95:
         d6:f2:6b:71:fa:9a:68:a3:01:bc:3f:1c:13:d1:de:6a:95:82:
         da:bc:cb:a7:ef:d9:5f:9d:0c:4b:10:d5:ac:56:73:d6:3f:5e:
         55:63:19:b5:84:cf:7d:4c:bb:f3:38:b0:cf:22:74:74:d3:09:
         3e:c2:e8:b9:78:ab:62:86:68:5c:04:e9:43:48:3c:1c:d2:bf:
         e5:dd:7b:5c:f0:6f:a5:f6:68:8c:1e:0d:eb:60:83:31:88:a6:
         79:3f:db:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:11:27 2026 by rpki-client