Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/390d5fbe-f395-335c-af41-81140d796d67.roa
File:                     390d5fbe-f395-335c-af41-81140d796d67.roa (raw, json)
Hash identifier:          wkG56uKouHlrr0r07FFoKX2x6VhI+fhPS6+Gaj3PpBc=
Subject key identifier:   2D:6F:A4:9C:4A:B3:43:66:85:8A:4E:03:27:CA:C3:DA:CB:20:47:F1
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EA44522DC9C22AA7766838540
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/390d5fbe-f395-335c-af41-81140d796d67.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     23473
IP address blocks:        68.180.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:22:dc:9c:22:aa:77:66:83:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=b6b9a905-566d-4aaa-8220-e9d7690b637a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:77:5c:3e:f3:31:a5:13:4b:c8:7b:ae:de:db:
                    e3:21:81:4b:67:31:39:df:c2:a8:c3:68:4f:18:21:
                    39:da:cd:d3:5c:33:b0:fe:e5:b3:4d:13:db:ba:3a:
                    e2:ff:ce:a3:12:4d:b6:26:05:f3:ef:99:23:2b:48:
                    fa:b9:e2:69:c7:a9:c2:7e:13:9a:01:51:09:45:3c:
                    1f:b8:c1:66:0a:91:31:17:2d:24:4a:6d:3e:cf:e7:
                    28:ba:ad:6e:7a:3a:16:60:fe:69:63:57:ab:29:33:
                    8a:a3:cd:72:a5:45:f6:6a:71:80:93:7f:0e:6e:18:
                    86:dd:b8:2a:4c:1a:f1:44:27:78:c5:cd:ba:bf:f8:
                    2f:66:a4:30:7b:bd:04:f1:5e:bb:ad:e5:b0:73:c0:
                    24:0f:6c:b6:4c:1a:7f:6f:67:fc:df:6b:58:92:b7:
                    3a:c0:5e:c5:59:74:b0:07:5b:74:bb:01:86:1c:a3:
                    12:9c:7c:00:01:e5:24:d7:72:d6:70:b0:13:87:d0:
                    bd:cf:a5:61:33:a7:34:95:36:f4:e7:c0:1b:6e:71:
                    a9:1d:e4:87:1c:33:b1:82:8a:71:80:de:03:79:3e:
                    c3:76:05:bc:d8:03:9d:80:70:5e:62:a7:54:97:8d:
                    62:d6:2c:cc:f0:f1:d7:65:29:36:f9:df:23:42:71:
                    ec:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6F:A4:9C:4A:B3:43:66:85:8A:4E:03:27:CA:C3:DA:CB:20:47:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/390d5fbe-f395-335c-af41-81140d796d67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.180.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:b5:dc:4d:96:16:00:44:58:c0:bb:90:61:78:c3:a3:40:ca:
         38:33:75:bb:d4:ae:c8:f0:91:4b:3a:3d:d1:1d:a9:32:a5:1b:
         5d:01:c2:ca:95:1d:bf:5a:be:72:36:f8:34:95:95:39:1a:2d:
         f6:5c:84:48:95:66:35:78:ac:c4:71:3e:34:1d:af:60:38:23:
         38:50:3f:e2:c2:56:32:6e:22:50:85:49:5c:b0:08:e3:d7:f7:
         5c:e6:f3:85:35:c8:c5:fb:85:9d:f0:99:dd:ce:6c:c0:20:6c:
         02:36:24:cb:47:5b:11:78:10:31:77:74:f0:4d:7a:77:af:cf:
         ed:69:ae:90:69:c3:11:cd:59:86:6f:fa:5a:a5:d4:d5:ca:b7:
         f1:1f:ec:12:59:b9:6c:96:eb:a1:26:59:94:82:07:2d:cf:15:
         b4:33:2f:10:49:ed:7b:00:f4:c0:de:f3:0b:43:83:39:31:4c:
         f6:77:64:db:4a:20:89:c8:14:98:05:77:f9:97:22:22:89:51:
         23:c7:d8:79:fe:3d:3c:4e:1d:be:4f:62:72:40:98:ab:54:29:
         b8:39:64:e3:da:63:89:4e:a4:0d:bd:3c:54:d5:11:21:15:aa:
         6a:ed:f5:c2:53:5b:d7:45:1b:8c:5d:47:1d:97:d3:88:42:26:
         6a:87:fa:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:32:09 2026 by rpki-client