Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5530ffa9-fecc-3cb0-9006-ebea001a7e48.roa
File:                     5530ffa9-fecc-3cb0-9006-ebea001a7e48.roa (raw, json)
Hash identifier:          zJ1mCEWOhrD//W0NDFWr4Xt/iXmStVsY5AkcuhQ1KIw=
Subject key identifier:   53:5F:41:61:B0:CC:B6:E1:1B:9C:27:5B:64:2E:E4:9B:F2:C8:23:B2
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EA786DE3C8FA051C2BA2F52C0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5530ffa9-fecc-3cb0-9006-ebea001a7e48.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     23473
IP address blocks:        68.180.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:de:3c:8f:a0:51:c2:ba:2f:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e0aedf76-cbe1-445e-ada2-d3c8ad1e4b7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:42:ef:4f:b5:d1:ca:5c:10:59:3a:4d:db:90:
                    14:cf:91:8f:6a:de:92:85:16:13:dc:8f:b8:31:a3:
                    63:83:68:ef:d7:c4:a2:f7:37:e0:fe:e0:4a:14:2f:
                    28:e2:e0:11:06:dd:1a:17:83:56:25:f8:a5:87:ec:
                    f1:22:38:f8:21:72:fe:19:7b:a1:cf:6d:8a:c8:d8:
                    f8:e9:bd:58:2d:2a:ef:f8:c6:57:c7:3f:aa:72:0f:
                    61:72:d3:34:f4:2d:37:28:c2:d0:5c:95:01:03:51:
                    e8:30:e2:6b:f8:b0:0a:57:08:33:df:f7:03:65:bd:
                    72:e4:bb:bb:2e:15:cf:4c:27:7a:b1:49:c3:a2:98:
                    41:22:3a:d0:97:33:92:5e:05:7a:a3:24:71:fe:b2:
                    88:a7:e6:67:a1:8d:26:ce:c5:9b:63:16:76:37:e9:
                    01:8d:de:75:29:73:74:8e:3c:f7:b2:3b:d7:8d:a9:
                    1b:86:82:31:15:94:13:63:0d:cc:2d:02:40:6e:ac:
                    ce:c8:4f:60:f7:fc:97:75:e3:be:5a:d3:f3:1f:2c:
                    4c:4b:2e:88:91:f3:8d:b4:e5:de:d1:5b:fc:86:72:
                    86:70:a0:42:6f:bf:78:88:2d:3f:2a:f9:63:e3:05:
                    a0:13:86:bb:fd:43:d3:a7:90:27:2c:2e:69:b6:68:
                    01:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:5F:41:61:B0:CC:B6:E1:1B:9C:27:5B:64:2E:E4:9B:F2:C8:23:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5530ffa9-fecc-3cb0-9006-ebea001a7e48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.180.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:f5:ee:82:63:c7:76:2b:f3:1e:bf:ae:ad:14:02:32:5a:5a:
         c6:83:ac:6f:47:74:55:34:67:fb:69:6d:68:9e:3b:87:eb:5c:
         a7:6f:44:9b:59:e0:74:e6:81:bc:cb:a5:e4:59:45:65:1e:c8:
         c0:68:0e:01:97:70:db:61:c0:5c:69:46:11:82:31:e6:c9:07:
         97:c9:d3:8e:c3:32:3f:9a:2c:40:52:87:65:53:e6:4f:ec:34:
         cf:2a:60:d0:2a:e4:ed:48:97:d8:d1:2f:dd:b2:a7:36:01:ae:
         c6:cb:45:59:4c:93:3c:09:a1:b2:b3:ae:c5:3f:7d:5f:b4:c5:
         ef:33:5d:8e:da:ef:1f:cc:45:72:86:f2:9c:c9:18:b4:0a:46:
         21:fc:01:8e:f5:ed:18:ac:a3:78:d5:8f:54:68:20:82:20:c0:
         9c:e7:13:1a:81:61:27:9f:1b:19:d3:37:de:49:cd:b3:c7:26:
         f4:4a:17:9d:51:ab:b9:16:bb:35:ce:67:5f:0d:55:55:22:94:
         9f:89:fd:ac:5b:34:91:5f:88:c5:5f:78:89:3b:ce:48:4a:ef:
         86:7f:6a:97:e1:2b:d9:0e:a9:2f:a2:97:51:ce:78:24:75:a7:
         5e:48:64:71:64:48:3a:91:99:57:1f:98:4f:40:70:be:fb:53:
         79:6f:3c:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nht48j6BRwrovUsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZTBhZWRmNzYtY2JlMS00NDVlLWFkYTItZDNjOGFkMWU0YjdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0LvT7XRylwQWTpN25AUz5GPat6ShRYT3I+4
MaNjg2jv18Si9zfg/uBKFC8o4uARBt0aF4NWJfilh+zxIjj4IXL+GXuhz22KyNj4
6b1YLSrv+MZXxz+qcg9hctM09C03KMLQXJUBA1HoMOJr+LAKVwgz3/cDZb1y5Lu7
LhXPTCd6sUnDophBIjrQlzOSXgV6oyRx/rKIp+ZnoY0mzsWbYxZ2N+kBjd51KXN0
jjz3sjvXjakbhoIxFZQTYw3MLQJAbqzOyE9g9/yXdeO+WtPzHyxMSy6IkfONtOXe
0Vv8hnKGcKBCb794iC0/Kvlj4wWgE4a7/UPTp5AnLC5ptmgBGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFNfQWGwzLbhG5wnW2Qu5JvyyCOyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNTUzMGZmYTktZmVjYy0z
Y2IwLTkwMDYtZWJlYTAwMWE3ZTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARLRPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF317oJjx3Yr8x6/rq0UAjJaWsaDrG9HdFU0Z/tpbWieO4frXKdvRJtZ
4HTmgbzLpeRZRWUeyMBoDgGXcNthwFxpRhGCMebJB5fJ047DMj+aLEBSh2VT5k/s
NM8qYNAq5O1Il9jRL92ypzYBrsbLRVlMkzwJobKzrsU/fV+0xe8zXY7a7x/MRXKG
8pzJGLQKRiH8AY717Riso3jVj1RoIIIgwJznExqBYSefGxnTN95JzbPHJvRKF51R
q7kWuzXOZ18NVVUilJ+J/axbNJFfiMVfeIk7zkhK74Z/apfhK9kOqS+il1HOeCR1
p15IZHFkSDqRmVcfmE9AcL77U3lvPMU=
-----END CERTIFICATE-----
Generated at Wed Jul 29 14:14:30 2026 by rpki-client