Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5cca7324-ad9e-3dea-8793-efa3b9bf53d4.roa
File:                     5cca7324-ad9e-3dea-8793-efa3b9bf53d4.roa (raw, json)
Hash identifier:          yJzX7i7Oa8PzKSfsnvXfnM2YilSNTC49fSsvj9yJmjM=
Subject key identifier:   C6:DA:55:ED:02:C8:9C:35:E6:C0:95:70:72:5B:1E:21:FF:01:99:98
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584CEBC23C7BB02D425376CC1690
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5cca7324-ad9e-3dea-8793-efa3b9bf53d4.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     23473
IP address blocks:        68.234.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:3c:7b:b0:2d:42:53:76:cc:16:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=2edb72ef-93a4-432b-bcad-c2ff8e0e5163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d5:4b:03:c1:97:90:42:14:b6:df:ce:40:9f:
                    d5:6e:30:74:14:96:34:a0:b8:c7:7b:97:89:f0:19:
                    84:ec:54:53:1c:e2:d0:0a:80:b2:8b:7f:e8:38:28:
                    46:04:c5:84:80:25:0e:12:77:24:a3:50:0a:5b:bb:
                    00:82:e7:ea:69:01:30:0c:84:63:e1:10:1b:bc:83:
                    85:88:2b:7b:fa:6e:57:23:87:38:20:d6:e6:e9:76:
                    c9:dd:d2:8c:45:a2:94:5b:8a:75:68:15:00:6f:91:
                    ed:ad:1b:7e:65:23:8a:86:de:40:97:75:34:bf:38:
                    4c:9c:b0:6c:8a:3c:6d:6f:ed:fb:26:34:79:f8:4d:
                    89:71:ac:04:63:d7:eb:ee:ee:30:d0:eb:aa:30:57:
                    8b:6e:79:52:45:4d:df:83:10:32:88:ae:2b:41:c1:
                    ec:66:f0:4c:f1:21:c9:e8:cd:a4:b0:da:f8:40:a1:
                    47:4a:22:d3:cc:64:d8:a1:d6:5e:d0:2e:71:b4:2b:
                    99:98:a7:d3:37:03:86:67:c8:a1:a4:62:62:52:86:
                    c7:52:25:e4:9d:96:58:da:c0:fc:92:cf:15:71:b0:
                    28:cb:0b:5d:92:d1:66:da:9f:63:71:69:1b:3b:b9:
                    1e:28:75:e0:c4:e7:e1:ee:7b:7b:b8:0f:89:c3:62:
                    74:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DA:55:ED:02:C8:9C:35:E6:C0:95:70:72:5B:1E:21:FF:01:99:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5cca7324-ad9e-3dea-8793-efa3b9bf53d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:cd:ca:d5:5f:c9:01:47:61:ea:ec:10:97:55:71:99:35:09:
         d9:63:c7:20:8f:e2:ae:9b:bf:6f:e3:81:0d:95:c8:aa:c5:79:
         5d:6e:fe:5f:a7:47:0a:5b:0b:08:33:21:36:1b:74:40:8f:39:
         b3:ab:a7:86:33:08:40:8f:e8:85:32:c1:74:b0:6f:eb:13:ce:
         b7:6c:c7:8f:e6:51:59:f2:46:85:82:e1:83:3c:36:bc:9f:66:
         6b:b3:4a:39:8b:7c:c3:2e:5e:24:3c:4f:22:c0:66:e7:1d:37:
         c5:da:42:bf:1f:a0:a1:ff:58:79:c5:0b:82:c1:41:ab:c2:31:
         45:a9:0b:e0:fa:87:0e:85:fe:af:9b:3c:99:49:93:37:e5:d9:
         90:56:85:a0:09:c9:a7:e3:1a:29:72:34:6a:d5:c1:dc:be:7e:
         67:6b:46:00:5b:48:dc:f3:32:38:a5:e2:d8:59:6d:68:51:4b:
         24:b5:51:52:8c:b9:3e:dd:2f:78:86:81:18:35:91:08:b9:95:
         41:83:a6:fd:31:d6:56:1f:7f:75:4f:c8:45:47:ad:e0:60:b8:
         be:e6:e7:b8:7e:28:f3:f3:50:3e:5f:46:ff:18:1e:f5:e2:a4:
         5b:a3:0e:0f:ba:9d:45:ca:25:13:81:d8:c1:07:a7:6f:94:38:
         d7:89:45:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzrwjx7sC1CU3bMFpAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI2MDIyMDAyMDAzMloXDTI2MDUyMTAxMDAzMlowLzEtMCsGA1UEAxMk
MmVkYjcyZWYtOTNhNC00MzJiLWJjYWQtYzJmZjhlMGU1MTYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNVLA8GXkEIUtt/OQJ/VbjB0FJY0oLjHe5eJ
8BmE7FRTHOLQCoCyi3/oOChGBMWEgCUOEncko1AKW7sAgufqaQEwDIRj4RAbvIOF
iCt7+m5XI4c4INbm6XbJ3dKMRaKUW4p1aBUAb5HtrRt+ZSOKht5Al3U0vzhMnLBs
ijxtb+37JjR5+E2JcawEY9fr7u4w0OuqMFeLbnlSRU3fgxAyiK4rQcHsZvBM8SHJ
6M2ksNr4QKFHSiLTzGTYodZe0C5xtCuZmKfTNwOGZ8ihpGJiUobHUiXknZZY2sD8
ks8VcbAoywtdktFm2p9jcWkbO7keKHXgxOfh7nt7uA+Jw2J06wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMbaVe0CyJw15sCVcHJbHiH/AZmYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNWNjYTczMjQtYWQ5ZS0z
ZGVhLTg3OTMtZWZhM2I5YmY1M2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROqFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAErNytVfyQFHYersEJdVcZk1CdljxyCP4q6bv2/jgQ2VyKrFeV1u/l+n
RwpbCwgzITYbdECPObOrp4YzCECP6IUywXSwb+sTzrdsx4/mUVnyRoWC4YM8Nryf
ZmuzSjmLfMMuXiQ8TyLAZucdN8XaQr8foKH/WHnFC4LBQavCMUWpC+D6hw6F/q+b
PJlJkzfl2ZBWhaAJyafjGilyNGrVwdy+fmdrRgBbSNzzMjil4thZbWhRSyS1UVKM
uT7dL3iGgRg1kQi5lUGDpv0x1lYff3VPyEVHreBguL7m57h+KPPzUD5fRv8YHvXi
pFujDg+6nUXKJROB2MEHp2+UONeJRVI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:33:50 2026 by rpki-client