Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/23080761-1bfd-33ab-8c74-3598247bab4e.roa
File:                     23080761-1bfd-33ab-8c74-3598247bab4e.roa (raw, json)
Hash identifier:          oDgyk8A/iwNPKiIn1BVh5VlPV3rkIquGpItYwvjWuKY=
Subject key identifier:   9A:DB:C7:B2:42:C1:61:A4:F1:35:92:E7:EE:4A:29:C0:95:D5:58:C2
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584DD78B1059EC766F9504140400
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/23080761-1bfd-33ab-8c74-3598247bab4e.roa
Signing time:             Fri 15 May 2026 13:00:30 +0000
ROA not before:           Fri 15 May 2026 13:00:30 +0000
ROA not after:            Thu 13 Aug 2026 13:00:30 +0000
asID:                     23473
IP address blocks:        68.234.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d7:8b:10:59:ec:76:6f:95:04:14:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: May 15 13:00:30 2026 GMT
            Not After : Aug 13 13:00:30 2026 GMT
        Subject: CN=659c9028-1030-44d1-a8a4-3edc6ec0f92e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7a:f0:e4:ba:d2:62:e7:e7:93:e4:53:f5:48:
                    fc:2d:51:19:86:aa:ec:0d:56:5b:1a:26:a6:47:af:
                    d0:13:ff:3f:3f:fa:5c:38:75:cc:ce:1d:55:32:8d:
                    bc:45:6f:9f:04:c1:82:ab:1d:8e:66:16:3a:75:20:
                    be:0b:3e:d2:f6:bd:83:eb:61:be:ad:de:a5:d3:df:
                    a6:05:44:5b:5a:54:65:ed:65:ed:68:0a:9d:b8:3e:
                    45:3a:21:0c:c9:d0:05:27:0d:12:d4:03:8e:44:5f:
                    17:4f:b4:eb:56:28:a9:f8:fd:5b:be:50:c6:a3:43:
                    e8:dd:29:6b:db:f5:1b:71:b8:65:f5:50:bc:29:a2:
                    dd:65:63:f9:61:d2:db:00:12:09:b1:20:41:63:bf:
                    3e:f9:4f:fb:5b:d4:59:65:54:16:ca:76:35:91:c8:
                    85:72:52:a9:65:68:4c:7a:85:39:37:a2:ee:c7:6d:
                    f7:95:f8:c3:5a:ec:ba:7a:e1:34:9e:1c:eb:92:66:
                    c7:db:c2:c1:7d:b5:8f:d2:db:2a:c1:dd:94:5d:6d:
                    ca:04:6f:09:48:a5:14:7f:48:7e:37:f9:7e:fc:ce:
                    9e:9d:3d:ef:29:6b:84:05:59:3c:cb:ce:03:0b:52:
                    32:6c:07:db:0f:9c:f5:5c:cb:da:16:1a:f1:1a:ea:
                    d1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DB:C7:B2:42:C1:61:A4:F1:35:92:E7:EE:4A:29:C0:95:D5:58:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/23080761-1bfd-33ab-8c74-3598247bab4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:bf:e6:33:c6:b0:6b:11:74:f7:41:ba:5c:0c:3c:f9:f6:32:
         82:87:dd:c4:f4:91:dd:0e:3a:b4:12:d5:b8:6c:7b:7c:07:56:
         20:2e:4d:a9:75:6b:65:14:1b:08:cf:d6:f9:d2:57:7d:8d:aa:
         c7:d0:d2:9f:2a:91:94:8a:32:be:8d:11:a4:ba:d9:04:1b:59:
         35:93:f5:4d:70:d0:45:69:9c:e6:f1:a9:3a:0f:1a:31:e4:fe:
         bb:ee:65:bc:ea:45:91:b1:a7:a9:44:e3:96:40:27:4f:93:91:
         7e:35:70:cf:a8:5b:4d:81:27:40:63:a7:ae:ce:1e:8b:41:92:
         66:99:37:91:50:0e:8d:6e:b0:e0:6d:60:39:48:f0:75:35:5c:
         0c:f7:e1:07:bc:d6:cb:47:15:fa:bb:0b:fd:42:fa:ab:67:c3:
         26:29:96:87:7d:52:fe:20:d9:1b:2a:70:fe:38:34:57:59:bd:
         5b:82:37:7a:e7:1a:6d:1e:e3:18:de:2e:89:a4:68:9b:0a:7f:
         5c:d6:0c:1a:0c:b9:80:40:87:79:17:17:a2:e2:8e:39:a9:a5:
         5f:68:7b:46:23:0b:98:9f:50:b8:60:23:d8:e2:f0:1c:ca:50:
         e2:91:36:86:4a:e5:df:38:cf:f7:37:ba:fa:13:98:41:89:6e:
         8f:0d:7a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:09:32 2026 by rpki-client