Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/42078dd4-4c91-3f21-ac7f-38c511264b2a.roa
File:                     42078dd4-4c91-3f21-ac7f-38c511264b2a.roa (raw, json)
Hash identifier:          CwugCXdsQXrmFcG1ptDIkkw29/CgfmHTTC4bvaCfatM=
Subject key identifier:   BE:F8:A9:B4:34:BB:0B:9A:F4:A8:D3:D6:E0:58:B5:AD:C5:49:63:35
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584DE84B5D64E4D4984790E289F4
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/42078dd4-4c91-3f21-ac7f-38c511264b2a.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     23473
IP address blocks:        68.180.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:5d:64:e4:d4:98:47:90:e2:89:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=c82fd355-cc4e-4b8c-910d-451f13bb5313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:26:91:a8:4d:20:69:94:4c:16:41:5c:9e:49:
                    ac:38:9a:d4:91:64:01:fa:61:6e:30:74:bc:bc:91:
                    9b:df:56:4e:21:5c:55:ce:2e:f0:4a:79:f6:57:dd:
                    51:db:47:11:75:5e:3b:c7:b7:ea:04:38:53:b8:34:
                    d9:4b:21:e2:77:db:4b:55:3f:52:01:2f:1e:db:06:
                    d5:89:32:83:01:bf:51:84:6f:4e:b8:fe:02:e7:46:
                    5b:96:d1:3b:7b:88:e5:b4:af:49:0a:19:a1:11:12:
                    3b:55:0c:a4:ec:5b:68:d9:da:7b:fb:da:ca:62:14:
                    69:74:02:b2:01:0e:90:9e:af:80:44:a8:83:1a:d5:
                    28:34:67:a6:8d:57:34:19:3b:43:67:ec:38:4c:ff:
                    4a:23:59:c1:b5:2a:97:6b:e4:d5:a1:4e:9e:31:01:
                    3d:cf:37:d7:bd:99:2c:06:f3:d6:39:0b:3b:1d:a2:
                    48:f7:8a:27:b8:29:00:6f:8e:fc:f8:03:7a:77:b8:
                    95:9a:a1:af:b6:a4:d7:a2:e1:f6:fe:49:9b:17:99:
                    6f:1e:ee:78:aa:11:5d:42:80:61:83:bc:71:63:86:
                    5b:34:27:4b:59:38:f0:a2:00:2a:57:3c:d5:dc:62:
                    2e:93:98:09:ce:dd:f0:68:54:ce:7b:c7:72:60:e3:
                    70:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F8:A9:B4:34:BB:0B:9A:F4:A8:D3:D6:E0:58:B5:AD:C5:49:63:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/42078dd4-4c91-3f21-ac7f-38c511264b2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.180.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:29:ed:11:4a:65:fc:da:80:5a:3c:a2:a2:a7:77:39:7d:3c:
         09:77:b2:08:92:0f:d4:73:46:02:bc:bc:20:44:a8:a8:b8:84:
         bb:8d:ab:ad:11:d3:d3:0e:05:5a:1e:40:5d:41:06:a1:af:6c:
         c1:15:44:fe:13:8b:7b:c8:b6:1d:9e:f4:e1:11:38:0a:22:a9:
         f1:7c:6c:4d:ca:7a:69:dd:34:b8:a8:b9:fc:c9:39:ec:cf:39:
         72:97:2d:12:43:c4:cd:6a:f8:17:b2:64:9c:39:6e:63:9c:3d:
         f5:5c:7b:c3:43:f7:40:72:89:13:37:3c:95:0f:eb:ec:f4:ee:
         8a:63:25:6f:84:94:1f:96:b3:f8:73:0f:8b:3d:df:73:69:8d:
         02:c8:68:b5:e2:fc:b5:3e:a5:bd:ff:cb:0d:7d:3c:96:62:cb:
         bb:5f:65:61:51:ce:82:7f:ce:c0:71:32:ca:11:43:2b:7b:e9:
         1f:fc:3e:4f:55:f5:d5:08:78:e3:30:6c:d1:f6:11:40:96:37:
         39:bb:06:9b:20:6a:dd:87:28:21:0c:a5:d1:3b:f5:ad:d7:d7:
         f1:64:d8:dc:33:1c:1c:ca:e0:80:98:e5:91:1b:c7:30:02:94:
         75:50:1d:5d:c4:12:3f:66:5c:a0:0b:f0:fe:6f:0a:5c:ec:08:
         9c:42:38:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:47:09 2026 by rpki-client