Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2831dd85-8cd3-3885-9c6c-f6d563eca71e.roa
File:                     2831dd85-8cd3-3885-9c6c-f6d563eca71e.roa (raw, json)
Hash identifier:          18dq9ax/1OWXak+9oejgECaszArSNzY+ILhlFb673VU=
Subject key identifier:   9B:6A:03:2E:A9:6F:87:D0:E9:CF:3D:AD:43:24:E6:21:36:A0:9C:BA
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584CF4223ECF145C6FD27C73E600
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2831dd85-8cd3-3885-9c6c-f6d563eca71e.roa
Signing time:             Mon 23 Feb 2026 02:00:31 +0000
ROA not before:           Mon 23 Feb 2026 02:00:31 +0000
ROA not after:            Sun 24 May 2026 01:00:31 +0000
asID:                     23473
IP address blocks:        68.234.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f4:22:3e:cf:14:5c:6f:d2:7c:73:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Feb 23 02:00:31 2026 GMT
            Not After : May 24 01:00:31 2026 GMT
        Subject: CN=a46b3233-4cb1-4c2c-b119-0ad0a72006cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:49:23:f0:e2:e3:51:2e:c1:5b:b8:0c:30:30:
                    6a:e4:08:47:87:86:1b:60:ec:46:40:5b:87:74:62:
                    bb:ec:1a:83:48:5a:ed:87:c5:98:bd:b5:cb:83:d8:
                    b7:28:de:4e:26:0d:ea:4f:33:42:18:9a:ed:86:01:
                    83:d3:af:77:d8:48:d8:75:8e:9b:be:ea:ab:bb:4c:
                    26:23:2a:b0:dc:4d:50:09:6c:82:b5:b7:f0:0d:d9:
                    5e:8d:6f:e0:b8:00:ea:29:3b:23:ef:78:10:d0:4c:
                    24:76:e9:17:ca:ae:d6:ca:23:c4:40:e1:15:a7:4b:
                    6c:c8:5f:7a:8c:79:55:2c:48:c1:ee:a1:95:53:6f:
                    34:30:37:fc:e8:ef:2d:35:3b:dc:08:19:48:a1:f0:
                    ee:39:0e:47:95:5d:d3:e0:4d:95:b0:3b:fb:29:d6:
                    57:d7:cd:d8:16:ce:66:6f:aa:ac:dd:e2:0f:3d:ec:
                    0c:11:c9:63:f4:1a:61:a4:9b:2f:e2:fa:17:b9:79:
                    e5:b2:b9:a0:0c:17:07:f4:3e:67:58:61:49:31:53:
                    0b:75:6a:36:44:be:93:db:c6:27:7c:83:8d:69:8a:
                    cd:8b:9e:ce:c8:0f:c0:f3:48:17:d0:f5:45:a9:67:
                    dc:f9:7a:a4:12:6e:0e:77:b1:4c:dd:26:31:7a:95:
                    27:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6A:03:2E:A9:6F:87:D0:E9:CF:3D:AD:43:24:E6:21:36:A0:9C:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2831dd85-8cd3-3885-9c6c-f6d563eca71e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:30:be:38:85:e1:d9:a3:67:90:7e:8c:82:d2:8f:7f:85:0d:
         b8:96:7a:bd:73:93:95:64:06:ec:91:b2:b9:e2:3b:5f:bf:89:
         20:68:d6:f2:9c:fb:3d:ae:96:e8:a8:83:ab:d2:0e:92:87:75:
         91:df:3d:0b:ac:de:1a:7e:e8:86:4f:15:ac:f4:12:6d:49:15:
         27:d2:74:61:3e:e2:ca:e8:a2:2a:60:61:74:ef:b3:76:e2:78:
         6e:37:9c:c9:5d:ed:c6:ca:83:34:d2:1e:4e:4b:81:8e:55:08:
         57:3f:29:a1:13:c3:45:0b:06:67:3a:82:8c:11:38:40:fb:5f:
         d1:5d:51:0f:c7:2f:1d:bd:b7:fa:d1:da:9c:78:a2:5b:33:c3:
         99:a3:25:6a:d8:7e:59:72:68:16:81:40:79:d6:bf:19:8c:7d:
         81:92:1b:97:8b:66:17:15:8b:0b:8f:31:ab:33:a3:1f:1c:a5:
         34:17:a3:86:03:0b:9e:d9:41:55:ab:b8:f8:2b:e6:a8:3c:b6:
         56:e9:42:22:80:2f:cd:f8:52:40:44:9c:35:df:61:ec:3f:73:
         3b:2d:7e:aa:c4:92:9a:d5:21:91:ae:3c:4a:4f:3b:da:66:ac:
         0f:e5:3a:75:06:bb:6b:c4:42:a0:7e:21:33:cd:15:5e:1a:41:
         ad:9a:09:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:45:19 2026 by rpki-client