Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5521f31b-21dc-347f-84f0-722d8bf000bc.roa
File:                     5521f31b-21dc-347f-84f0-722d8bf000bc.roa (raw, json)
Hash identifier:          9o7z8c4PP0rBtNqHjWltiK74ZWmW8ZrxPEJHbH4s4XI=
Subject key identifier:   58:07:8F:80:55:75:FE:62:46:F0:34:42:BC:39:59:C7:AA:91:B8:04
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584CF6ECCBDDCBE58DB49E11E100
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5521f31b-21dc-347f-84f0-722d8bf000bc.roa
Signing time:             Tue 24 Feb 2026 02:00:31 +0000
ROA not before:           Tue 24 Feb 2026 02:00:31 +0000
ROA not after:            Mon 25 May 2026 01:00:31 +0000
asID:                     23473
IP address blocks:        68.234.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:ec:cb:dd:cb:e5:8d:b4:9e:11:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Feb 24 02:00:31 2026 GMT
            Not After : May 25 01:00:31 2026 GMT
        Subject: CN=a6a5d00e-19a3-406e-80de-64ca4730fec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bf:96:ad:8f:03:c3:41:12:64:a4:fe:67:75:
                    a0:7c:4a:40:0e:92:6f:df:44:21:d6:cf:03:e3:f2:
                    75:98:f4:12:cc:d4:2f:2b:e0:f8:df:60:ad:79:49:
                    88:44:89:dc:bd:60:33:41:6a:30:fd:41:ae:7f:d4:
                    dd:4b:2d:6c:68:1a:79:07:85:a9:29:1f:5f:58:c7:
                    12:7b:97:c9:94:11:5b:1b:2a:8d:2c:0c:2e:c9:3d:
                    7c:41:06:a0:1a:6d:9c:fa:6f:52:50:a8:9c:04:a9:
                    27:97:2e:bc:e1:b8:c7:a4:36:52:b5:67:f2:4a:14:
                    32:0c:f1:f4:c0:d1:e3:5c:82:df:f5:43:98:aa:ed:
                    40:2b:cd:18:5e:43:4d:e1:4f:0e:00:26:09:74:e4:
                    73:62:36:02:42:58:c8:73:3d:62:13:ba:da:10:38:
                    2e:20:fe:8e:28:95:23:02:96:a6:f9:0e:43:06:b2:
                    77:bb:04:72:d4:be:aa:28:ef:15:53:3b:ff:ff:0b:
                    58:d0:27:e6:5f:92:b5:c6:31:13:75:97:69:57:47:
                    94:47:86:01:5e:1b:a1:18:71:ca:47:c1:20:47:39:
                    ac:14:20:7a:b3:fe:05:16:62:ef:e5:88:99:4d:12:
                    67:0f:57:ae:43:b0:db:31:d4:ed:6d:52:24:f5:c7:
                    71:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:07:8F:80:55:75:FE:62:46:F0:34:42:BC:39:59:C7:AA:91:B8:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5521f31b-21dc-347f-84f0-722d8bf000bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:1d:0f:98:0a:1a:14:a0:5b:c2:c6:42:34:95:9f:88:f6:88:
         8f:fd:31:d1:81:13:bd:33:b7:b7:4e:a2:b1:e5:fb:86:33:04:
         7d:af:a2:74:50:26:e3:03:2b:a1:d8:21:40:a8:f2:4f:13:b0:
         aa:f6:8c:89:1e:90:7c:2a:ad:59:48:9e:4b:f6:47:95:69:a0:
         cc:62:0b:9f:3d:c8:2d:8a:4b:2a:64:b5:3b:39:f3:9b:f4:fe:
         1d:75:bb:bb:ae:eb:dc:f3:0e:7c:ee:89:7f:e7:0d:64:d1:4a:
         11:6c:56:8d:3d:52:16:fe:f8:22:3c:64:24:bb:29:44:7f:4a:
         72:c0:f3:3f:e9:7a:32:64:8e:30:94:f7:20:e2:4a:fc:76:4e:
         ae:ba:99:8c:5e:e0:79:99:c9:6c:e2:48:8d:50:9f:6a:94:f7:
         53:3e:e1:e0:31:28:bc:6e:95:9d:03:aa:9c:3c:e3:84:67:2a:
         13:8c:99:52:8c:82:92:88:4a:47:1b:55:5d:bc:05:be:63:20:
         65:03:a7:37:cc:c7:7a:3f:3f:07:82:ba:d3:a3:79:26:f5:72:
         6e:57:85:83:d4:88:2f:f1:56:28:34:3b:29:30:4f:bd:54:c8:
         f4:07:17:d1:e4:87:0f:15:97:d2:7a:28:c2:af:64:f6:04:e3:
         19:97:7c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:01:59 2026 by rpki-client