Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0a31d634-8055-3295-a56b-ea66de7f4117.roa
File:                     0a31d634-8055-3295-a56b-ea66de7f4117.roa (raw, json)
Hash identifier:          ywhER9nLcVuifImJwSRRUM4itz0TexAWjv5PJ36wY+4=
Subject key identifier:   18:A2:0D:AB:78:6F:48:29:6C:4E:F2:32:A0:AE:71:12:EC:F1:45:36
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EA79BBACA2EF312E41C09CEF1
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0a31d634-8055-3295-a56b-ea66de7f4117.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     23473
IP address blocks:        68.180.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:ba:ca:2e:f3:12:e4:1c:09:ce:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=56918df8-56ef-4748-9464-1dfb06907880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:55:41:4f:74:9b:bc:d7:58:b8:fd:00:e0:f0:
                    ba:fa:d9:f1:ed:82:04:c6:7f:49:57:bd:97:62:5e:
                    d3:28:73:a4:79:04:bf:ac:55:9e:e0:a5:a3:ad:b7:
                    78:af:84:60:f3:f1:ff:8b:98:0f:b3:a8:d4:7b:3a:
                    b5:e4:75:99:e3:9f:3c:80:df:65:17:25:b5:10:66:
                    50:b6:4a:b2:b8:66:ba:bf:62:e6:ea:df:71:bb:04:
                    ed:66:80:f0:4d:f9:26:7b:6c:2d:b9:84:8d:fe:c1:
                    42:e9:6b:af:ed:65:61:cd:9d:8c:60:ed:b1:a8:c3:
                    59:85:6d:0e:36:57:6d:65:6c:fb:06:09:7b:ac:30:
                    93:a6:6f:72:0c:74:03:06:60:1a:34:57:63:2b:8f:
                    c1:08:f3:7d:ff:09:fe:fd:46:04:c6:17:17:47:f0:
                    6e:83:24:c0:3e:a4:08:0f:aa:76:ed:71:dc:6f:1e:
                    fc:b7:0d:5c:04:8f:de:9a:ce:d1:e2:e4:14:f8:1d:
                    d8:47:87:0e:3c:05:7a:36:45:27:a6:c4:a7:b5:12:
                    f7:19:18:0e:eb:ab:2f:3a:32:e0:ee:d8:f8:11:78:
                    0c:09:af:ae:c0:cc:cb:a5:01:d0:54:02:23:c6:53:
                    b3:5d:0b:fc:4e:9d:53:09:38:fc:78:62:ed:fa:8e:
                    26:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A2:0D:AB:78:6F:48:29:6C:4E:F2:32:A0:AE:71:12:EC:F1:45:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/0a31d634-8055-3295-a56b-ea66de7f4117.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.180.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:5c:10:e0:a5:a6:02:0d:3c:dc:48:58:ba:62:a5:37:e7:85:
         44:e1:fb:ba:34:a0:b4:fb:e3:7e:00:e7:8b:0b:6a:7e:2e:48:
         2a:d2:ee:7b:e5:ce:c1:57:2c:91:86:5b:49:c4:14:8a:e3:28:
         cf:76:f0:2f:b4:a4:79:71:21:52:8e:fb:3c:27:55:e8:0f:af:
         a9:8f:c5:01:1a:96:a2:a7:52:41:fc:c0:f5:a0:56:e2:fe:8d:
         7d:83:5d:ee:5e:68:cf:f1:a4:a8:8a:a5:70:95:2f:ee:45:03:
         88:ec:8e:78:8d:eb:c7:91:f4:40:a9:eb:9a:03:81:e4:7f:00:
         dd:ff:08:f9:fd:bf:92:34:b0:63:19:15:88:d0:43:bb:a9:67:
         ed:50:32:6c:4c:20:49:ad:28:23:8a:4e:66:72:48:d3:2f:94:
         9e:91:8e:42:15:97:db:ee:f5:4c:43:fe:58:11:46:cf:84:dc:
         8f:c6:bf:ff:5b:5c:0e:67:32:e3:93:14:32:4e:cf:70:c0:e2:
         be:f1:7e:e3:e7:ea:25:3e:de:cf:2b:30:b0:e1:88:f8:3c:0b:
         40:c2:df:86:49:0e:1a:d7:d0:96:7b:0b:c6:e7:fe:55:6e:e3:
         56:41:52:b4:bd:4c:fc:c4:01:7c:37:4e:29:dc:6d:85:86:e3:
         61:4b:7b:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm7rKLvMS5BwJzvEwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NTY5MThkZjgtNTZlZi00NzQ4LTk0NjQtMWRmYjA2OTA3ODgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VVBT3SbvNdYuP0A4PC6+tnx7YIExn9JV72X
Yl7TKHOkeQS/rFWe4KWjrbd4r4Rg8/H/i5gPs6jUezq15HWZ4588gN9lFyW1EGZQ
tkqyuGa6v2Lm6t9xuwTtZoDwTfkme2wtuYSN/sFC6Wuv7WVhzZ2MYO2xqMNZhW0O
NldtZWz7Bgl7rDCTpm9yDHQDBmAaNFdjK4/BCPN9/wn+/UYExhcXR/BugyTAPqQI
D6p27XHcbx78tw1cBI/ems7R4uQU+B3YR4cOPAV6NkUnpsSntRL3GRgO66svOjLg
7tj4EXgMCa+uwMzLpQHQVAIjxlOzXQv8Tp1TCTj8eGLt+o4mzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBiiDat4b0gpbE7yMqCucRLs8UU2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMGEzMWQ2MzQtODA1NS0z
Mjk1LWE1NmItZWE2NmRlN2Y0MTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARLRIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFBcEOClpgINPNxIWLpipTfnhUTh+7o0oLT7434A54sLan4uSCrS7nvl
zsFXLJGGW0nEFIrjKM928C+0pHlxIVKO+zwnVegPr6mPxQEalqKnUkH8wPWgVuL+
jX2DXe5eaM/xpKiKpXCVL+5FA4jsjniN68eR9ECp65oDgeR/AN3/CPn9v5I0sGMZ
FYjQQ7upZ+1QMmxMIEmtKCOKTmZySNMvlJ6RjkIVl9vu9UxD/lgRRs+E3I/Gv/9b
XA5nMuOTFDJOz3DA4r7xfuPn6iU+3s8rMLDhiPg8C0DC34ZJDhrX0JZ7C8bn/lVu
41ZBUrS9TPzEAXw3TincbYWG42FLe9Q=
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:19:47 2026 by rpki-client