Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/36510b2e-0d6d-3707-88da-2f64e516dbce.roa
File:                     36510b2e-0d6d-3707-88da-2f64e516dbce.roa (raw, json)
Hash identifier:          b5/13r+ehPeOCU+GQTxvsfhZzG1Q0DKt4dq1OP2ZIzU=
Subject key identifier:   F2:A5:4D:B2:E8:1C:02:B5:C8:F7:EF:8F:06:35:80:68:26:93:46:9E
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EA78865879F8ABF46F3BC30C0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/36510b2e-0d6d-3707-88da-2f64e516dbce.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     23473
IP address blocks:        68.234.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:65:87:9f:8a:bf:46:f3:bc:30:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c320698a-1e69-46c0-b5c5-a6d916719a38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5e:1c:ac:65:fe:7b:f7:a0:85:04:12:f1:73:
                    f6:bc:6c:bd:29:e2:22:ab:da:42:5f:6e:eb:54:3d:
                    c8:ec:c7:8f:9d:01:83:a9:bb:1c:f1:1f:41:57:67:
                    7a:59:e7:6f:0d:64:6d:1b:c1:3a:77:ac:ca:9b:9a:
                    67:9c:c5:bb:3c:e8:81:58:fd:8d:63:2c:6c:a9:92:
                    75:93:b3:f9:4f:94:93:d2:5f:42:66:bd:01:ec:da:
                    80:13:31:20:1b:19:8b:ab:f2:d1:9c:27:22:56:85:
                    f9:8c:b5:74:c9:0f:41:f4:56:36:0e:67:1e:ec:c9:
                    de:e2:a5:75:17:d9:7a:bb:62:07:0f:4e:59:80:88:
                    0a:b1:db:5e:9c:0c:a1:d3:7d:32:5b:bc:dd:2c:6e:
                    3b:d6:d9:08:f2:a1:da:0c:73:b4:bd:e9:ec:63:7e:
                    c9:ba:e9:84:7c:d8:54:7b:18:10:b2:c2:5d:e7:f5:
                    8c:37:3e:fd:fc:30:81:99:0d:4f:ce:a8:95:a1:c6:
                    d2:7f:6c:56:b3:38:f3:a9:b7:66:92:01:7b:a9:59:
                    2f:b3:11:87:e3:21:83:ef:5f:66:23:5f:0e:88:8f:
                    2c:2a:85:bf:f0:c2:46:bb:1f:c8:10:39:cc:45:b7:
                    ef:89:4f:6b:de:eb:f9:87:d3:42:ef:cf:b1:ae:a8:
                    85:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A5:4D:B2:E8:1C:02:B5:C8:F7:EF:8F:06:35:80:68:26:93:46:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/36510b2e-0d6d-3707-88da-2f64e516dbce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:a3:85:87:58:6e:e0:ef:aa:3e:37:92:36:0a:96:fd:f5:74:
         37:07:fa:e5:d3:04:a9:38:5c:cd:63:d1:99:77:22:36:c6:63:
         5e:18:58:6e:a1:fb:0e:b6:b1:94:ff:81:a5:b2:35:c8:19:6d:
         3a:a1:11:6c:82:6d:9c:20:1f:d5:10:76:69:99:8c:92:d6:c6:
         75:4c:e1:0e:2e:94:d1:b9:42:fe:96:3b:6c:a8:60:b0:98:69:
         42:35:51:42:dc:fc:c3:13:e5:d9:be:e9:00:05:ec:1a:48:01:
         fe:eb:82:0d:e6:09:71:22:6d:2f:b0:68:1a:0e:40:71:4c:3d:
         e9:3b:ac:8c:02:07:c7:8f:10:29:94:ef:95:b4:a9:c1:a8:85:
         d9:e0:71:f6:b7:72:32:9c:5f:8e:68:25:29:68:ee:65:19:67:
         eb:03:b9:df:92:63:8d:16:6d:90:b1:37:44:e3:2a:3c:b1:60:
         c3:53:31:61:51:10:b5:8d:a3:95:41:47:f4:43:1f:3a:6d:3a:
         9c:a8:83:97:37:bb:87:4a:f6:bd:74:64:4a:e0:98:c5:71:5c:
         e3:7f:ca:5c:3f:25:bf:e0:02:9b:7e:2d:b0:a7:16:d1:fe:2e:
         e2:2a:ab:3a:12:1d:61:42:a2:da:b1:21:79:25:8f:09:87:6c:
         df:86:92:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:44:51 2026 by rpki-client