Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2a6b9f16-415f-3025-92e0-16cd4a3ee872.roa
File:                     2a6b9f16-415f-3025-92e0-16cd4a3ee872.roa (raw, json)
Hash identifier:          G99p11pVuqTJodYr+Q/V06xAwLXTPBiDDbUsvY1+C5w=
Subject key identifier:   BE:D9:7A:44:AC:DA:81:0A:37:C8:A7:71:AA:D8:FE:32:6C:C7:B8:52
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584DD78B10B9D7B01F39B57C0680
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2a6b9f16-415f-3025-92e0-16cd4a3ee872.roa
Signing time:             Fri 15 May 2026 13:00:30 +0000
ROA not before:           Fri 15 May 2026 13:00:30 +0000
ROA not after:            Thu 13 Aug 2026 13:00:30 +0000
asID:                     23473
IP address blocks:        68.234.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d7:8b:10:b9:d7:b0:1f:39:b5:7c:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: May 15 13:00:30 2026 GMT
            Not After : Aug 13 13:00:30 2026 GMT
        Subject: CN=79522f58-cd39-4a4f-b409-e90a98e25f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3d:ae:44:86:20:7a:e0:23:7a:97:6e:e0:dd:
                    d4:41:78:ba:44:1a:26:2f:56:2d:d0:4a:26:b2:8a:
                    bd:7d:c0:ac:b2:dc:41:9f:d4:ca:7e:a4:8a:f0:6c:
                    c8:56:51:d8:b6:91:4e:ef:27:77:16:bd:85:3b:2b:
                    83:0e:f5:97:e8:c0:13:e8:61:6a:7d:9e:0c:9f:c0:
                    ef:19:ac:30:63:60:8a:ea:21:1c:ae:7d:c7:6c:a5:
                    c0:36:24:7a:a6:ce:13:b8:3c:f6:2c:0f:77:aa:61:
                    98:92:89:97:2c:2f:39:66:17:d7:1d:b2:5f:90:49:
                    dc:74:91:fe:8d:f2:87:24:0b:40:1e:6d:57:f5:a2:
                    28:cb:c3:9b:87:2d:58:ca:ea:39:fd:6e:c7:19:b4:
                    18:25:07:51:cb:8f:0d:86:af:99:f9:e1:64:9e:5d:
                    bd:68:2c:a6:a2:fe:ea:ee:df:22:e6:66:ff:cc:96:
                    05:4a:39:d9:c2:33:c0:98:df:40:76:b7:ad:11:8c:
                    0e:2c:33:72:1e:f0:d6:63:dc:71:5b:bc:46:fe:9a:
                    2a:1a:ed:49:73:50:ec:39:71:73:35:cb:f5:a5:40:
                    54:f3:b5:fc:08:15:a8:15:76:b9:ce:16:c5:e0:48:
                    55:b9:41:6d:70:e2:50:64:54:ba:b0:9f:78:8f:72:
                    3e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D9:7A:44:AC:DA:81:0A:37:C8:A7:71:AA:D8:FE:32:6C:C7:B8:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2a6b9f16-415f-3025-92e0-16cd4a3ee872.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:a0:21:72:89:c0:ec:97:51:c3:62:6b:01:e3:e6:a9:19:4f:
         0c:55:5e:c6:51:67:66:c7:97:3d:8d:b5:dd:4b:94:df:2b:eb:
         2d:e4:e2:ff:e4:4f:02:7c:0c:ea:65:0c:fe:0b:ff:16:63:bf:
         bb:8e:48:01:c6:a3:61:b9:38:e7:6e:1a:5c:53:06:a5:ee:ca:
         a4:21:2e:e6:d9:7a:61:0e:56:7a:34:52:87:4e:a0:a2:b2:cc:
         b7:c3:7e:b1:03:be:07:b6:4b:6e:b2:f7:3a:39:66:89:6a:88:
         5a:0f:60:d0:fa:69:37:8c:ba:0e:8d:85:c7:0b:12:1f:7c:ba:
         2d:37:87:86:b1:2a:3e:48:40:ca:7f:2e:19:54:b3:ca:79:01:
         a8:51:71:4b:70:85:f8:50:f6:b9:62:1b:20:ae:c8:b4:9d:4e:
         7e:df:df:2c:af:18:99:af:f7:95:5e:d0:a2:9a:20:31:32:02:
         79:9d:f4:3a:f5:90:56:3e:75:50:b2:7c:5f:d8:28:84:30:d4:
         2a:e9:ed:80:1e:c2:ff:d3:a1:9b:1e:6e:2c:1b:76:5c:e5:16:
         c1:5e:5d:62:90:d5:db:6e:29:14:b8:5c:15:7b:c1:60:73:3b:
         10:d3:b3:2d:53:ad:51:da:e1:64:ac:65:fa:5a:8e:44:09:33:
         c5:47:80:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:36:22 2026 by rpki-client