Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4e7f0966-47c3-35ed-b998-c1c9049c4b62.roa
File:                     4e7f0966-47c3-35ed-b998-c1c9049c4b62.roa (raw, json)
Hash identifier:          sxcrw0ltZOWtQ8yIGPjckPbepspdT7A62DjNoA/ZNRM=
Subject key identifier:   7C:55:36:A9:8F:50:09:1E:1F:A6:7E:DC:C3:4E:F3:F0:65:5C:54:3C
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584DD4C083498FD1EDD0442F0240
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4e7f0966-47c3-35ed-b998-c1c9049c4b62.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     23473
IP address blocks:        68.234.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:83:49:8f:d1:ed:d0:44:2f:02:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=3d4933dd-69b3-42a8-a60e-18e43709b280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cc:c7:c2:c6:cb:fe:4d:51:dd:94:35:ef:e4:
                    7b:b5:a0:9e:4d:0b:61:51:eb:3b:3d:3a:67:f4:1f:
                    0a:74:5d:9f:c3:27:8a:6c:e5:d0:27:e2:59:ba:57:
                    28:0d:1e:a1:7a:35:2c:63:4c:0a:45:6b:77:74:15:
                    bb:55:db:a5:f5:48:af:c9:3b:23:e8:10:8d:e4:a1:
                    6b:ad:b9:a8:17:8f:c8:b8:f0:42:47:df:23:d4:80:
                    20:f1:09:16:2c:ad:02:99:bb:2e:a6:42:b3:35:84:
                    2d:84:06:b2:7c:df:87:a4:f9:27:63:cb:89:84:e0:
                    51:cd:3a:10:10:da:30:8d:4b:8e:b8:5d:d9:7c:32:
                    e4:5b:7b:9d:c6:f2:58:09:97:46:9d:cc:a1:58:09:
                    5d:91:48:42:b9:97:b1:7c:a1:6e:69:bf:69:84:91:
                    24:43:9d:6f:0a:a9:60:68:dd:03:a2:d0:45:71:e4:
                    20:74:ec:cb:29:8d:29:3e:25:5c:66:a4:4f:8c:2a:
                    54:d1:8d:ce:57:49:05:b7:68:c5:4e:16:b0:66:9d:
                    4e:96:f3:42:02:1e:96:88:2e:11:66:ea:db:17:e8:
                    36:6c:bc:85:bd:ac:ca:61:45:45:fa:a7:1c:cb:41:
                    41:1f:62:3d:dc:46:80:9e:66:ed:b0:0c:c9:f7:98:
                    e5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:55:36:A9:8F:50:09:1E:1F:A6:7E:DC:C3:4E:F3:F0:65:5C:54:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4e7f0966-47c3-35ed-b998-c1c9049c4b62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:a7:fd:64:0a:03:eb:84:f8:9f:81:4c:4b:c2:df:b0:46:b1:
         8d:d9:07:a4:45:c4:f1:24:e8:37:1c:ba:2f:14:98:18:55:7d:
         49:77:e5:59:2b:62:36:69:e5:02:5c:e1:e1:28:8a:1c:18:7f:
         45:07:59:53:f9:a2:cd:1e:f4:ea:52:18:6d:d9:e3:84:d4:8b:
         56:32:1c:4f:12:a0:44:7a:96:89:f8:3f:ad:3d:04:22:41:0d:
         9f:1d:57:2f:2c:a9:8a:28:fc:5f:84:5d:04:71:62:b9:34:fd:
         e5:0f:72:a4:10:30:d0:08:f5:45:c5:1b:d0:11:f2:be:b0:5f:
         d2:40:fb:e2:79:a3:77:b8:f0:fb:2d:93:8d:14:14:ee:56:64:
         53:d4:74:46:85:42:06:b9:67:1b:d3:2e:ba:ca:75:f5:5d:83:
         db:8a:f3:2e:1f:29:8d:d9:ac:fa:1a:2d:5c:4d:91:83:a6:e2:
         7e:b6:d9:cb:95:56:78:6a:30:74:cf:b4:15:ce:3e:80:6f:eb:
         b6:a0:6e:81:da:89:39:99:78:f3:9a:d4:ae:73:3a:69:25:e2:
         3f:a4:d2:08:53:46:6e:0f:c3:93:d0:30:1e:f4:43:9f:43:e7:
         b9:ef:fc:69:46:78:95:11:c4:c1:58:45:27:7d:c5:92:33:c1:
         31:f4:4b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:43:57 2026 by rpki-client