Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/499444ac-17b5-3b05-9ba5-761a9f4f3141.roa
File:                     499444ac-17b5-3b05-9ba5-761a9f4f3141.roa (raw, json)
Hash identifier:          CI1ooriezIuMp0ZL3/VYys9VRj2794qu8ACc9/eZf/I=
Subject key identifier:   4E:58:9D:29:6D:BF:74:0A:8F:53:07:46:CB:4B:45:DD:C6:2C:DC:96
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584CE36226C9BE1CCFB09171B300
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/499444ac-17b5-3b05-9ba5-761a9f4f3141.roa
Signing time:             Tue 17 Feb 2026 02:00:31 +0000
ROA not before:           Tue 17 Feb 2026 02:00:31 +0000
ROA not after:            Mon 18 May 2026 01:00:31 +0000
asID:                     23473
IP address blocks:        68.180.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e3:62:26:c9:be:1c:cf:b0:91:71:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Feb 17 02:00:31 2026 GMT
            Not After : May 18 01:00:31 2026 GMT
        Subject: CN=232be0f0-c872-47fc-b5b7-e84a9fdf9acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b3:bf:35:68:91:13:ae:68:ea:3c:c2:9a:65:
                    df:a5:dd:ae:4b:0e:8e:9e:41:f3:f0:cd:d7:71:06:
                    3f:65:70:60:24:a6:5c:1d:2d:24:02:0f:38:90:de:
                    7f:6a:52:a3:5b:ee:04:cb:46:73:8a:a4:4e:12:f0:
                    6c:a0:b9:8c:b2:81:51:3c:c5:1d:47:d8:36:98:55:
                    ae:fe:88:79:13:e4:61:11:13:b5:16:09:48:14:b5:
                    e6:fb:cb:8b:10:73:a4:f2:af:a0:65:93:a9:bb:f7:
                    51:e5:42:b1:77:ff:c2:64:73:97:64:e9:35:00:e2:
                    9e:18:ed:01:fb:e7:54:8f:7f:70:1b:63:1c:92:1b:
                    75:ac:f1:26:88:88:dc:75:4a:ed:01:82:05:3d:a4:
                    ba:25:5f:40:15:4b:dc:d5:2b:d1:2a:e2:e1:18:c4:
                    50:76:fd:ca:87:d3:53:48:32:2a:d8:2a:8c:c9:ff:
                    4d:8a:3d:f8:07:5c:0c:df:57:b7:d9:08:20:81:02:
                    3a:68:b8:a0:f1:29:b8:53:70:4b:5b:e6:e3:07:b0:
                    e1:74:f9:b9:97:da:1b:bd:49:95:f7:20:4b:93:0b:
                    0e:c4:ed:7a:2e:63:c4:9f:1f:11:05:55:b3:b9:aa:
                    80:95:e5:1e:f6:83:a6:3e:77:14:4d:eb:16:1d:ce:
                    ee:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:58:9D:29:6D:BF:74:0A:8F:53:07:46:CB:4B:45:DD:C6:2C:DC:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/499444ac-17b5-3b05-9ba5-761a9f4f3141.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.180.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:95:1e:57:dc:7e:be:4b:7d:78:20:2e:ab:6c:07:3a:39:a9:
         47:c0:c7:c7:dd:4e:8f:e8:ea:98:74:b8:35:cc:ef:c5:09:41:
         2b:d5:e8:fa:d7:52:b9:5d:da:c3:98:35:a3:1a:b8:05:98:bb:
         a5:88:4f:d1:69:c5:11:d8:03:7c:c5:86:7b:3a:e4:5c:85:e8:
         09:5b:d1:44:08:e9:1f:4f:fa:80:07:e8:86:8c:c2:04:58:fc:
         63:0d:67:d6:e9:98:55:a9:41:d9:ad:ed:fb:22:6e:ab:e8:29:
         74:da:25:22:3c:e3:f1:25:88:ce:7e:6d:9f:c0:8b:a0:07:c3:
         7f:64:c6:7a:d8:51:c3:e6:0b:af:0e:74:c3:16:b4:03:a1:1a:
         58:6b:b7:0d:c9:0e:2b:28:83:c2:b0:0d:16:dc:13:97:c2:0c:
         1e:19:7f:a3:96:08:c9:06:e7:08:8c:56:04:42:92:55:d7:ad:
         b4:72:2f:98:81:1b:62:91:1f:0d:00:82:1d:10:73:0e:05:74:
         9e:d5:02:39:ce:19:17:44:cf:50:75:51:59:0d:7b:e6:36:a9:
         08:ab:28:2e:39:c7:dd:3b:1a:bb:d3:f9:9e:30:31:72:23:6d:
         bf:34:c2:8f:7e:9c:72:36:ec:a4:61:f1:e8:0f:b6:3c:9a:b9:
         7a:cf:68:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:59 2026 by rpki-client