Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/6df1dc86-b03f-3e05-b6d6-d4ff19525236.roa
File:                     6df1dc86-b03f-3e05-b6d6-d4ff19525236.roa (raw, json)
Hash identifier:          j7uHjcRMrltt734WO/ohnDSsr6lGEzDubmGiE5hxO68=
Subject key identifier:   D0:E5:EB:A0:08:34:F2:BA:5D:8C:30:EC:77:19:C8:A7:44:A5:7E:25
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EA78721A05C46CC2EC55B22A0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/6df1dc86-b03f-3e05-b6d6-d4ff19525236.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     23473
IP address blocks:        68.180.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:21:a0:5c:46:cc:2e:c5:5b:22:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b3b5cd8d-a290-4fe0-bca7-b75e69c79219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c2:e1:3f:67:08:45:99:29:63:b4:45:5e:5c:
                    f5:16:47:1b:76:bf:b0:31:9d:21:8d:26:18:13:1f:
                    26:e5:05:fc:b8:9c:b7:8e:a2:8a:c6:c7:d2:8b:5a:
                    8c:66:1a:f2:e1:b0:b4:da:53:bf:d3:ce:6a:43:dc:
                    c6:6a:07:59:61:da:3e:de:96:b3:2d:9d:d3:6b:14:
                    f1:c5:38:25:63:a3:46:23:99:b2:99:8b:7d:82:99:
                    b3:b6:7d:6a:f3:99:97:48:01:f2:02:ee:bc:f6:e0:
                    6e:56:36:28:90:91:24:09:47:9d:19:0d:12:38:db:
                    79:39:13:f1:f9:da:ee:fd:83:71:b8:7b:37:78:ee:
                    c4:f5:da:84:4c:cd:95:ff:c7:bf:d9:1b:b7:14:4b:
                    44:d6:23:d4:33:d0:2d:3b:07:9a:5d:40:58:6d:a7:
                    23:82:b1:68:05:18:d7:43:c3:77:ee:4a:d2:62:53:
                    b3:c1:ee:8f:7f:09:cf:ba:ce:f6:5b:b0:99:bf:86:
                    d6:54:63:83:a8:a6:3d:38:a7:d7:c7:5c:97:7d:2d:
                    d5:38:f0:4d:ed:ec:26:7c:52:9f:8c:18:0c:64:73:
                    2c:e9:b0:0d:08:09:9f:37:d5:53:d2:09:04:dc:e5:
                    48:f8:23:4a:22:51:a3:99:93:f7:0f:ed:8f:fa:e8:
                    0f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E5:EB:A0:08:34:F2:BA:5D:8C:30:EC:77:19:C8:A7:44:A5:7E:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/6df1dc86-b03f-3e05-b6d6-d4ff19525236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.180.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:a4:5d:3a:4d:51:82:fc:ec:84:bd:98:8c:9a:90:85:0b:bb:
         bf:c4:29:86:e4:e5:86:e2:fc:3d:0f:90:fb:c2:8d:c0:50:57:
         15:23:72:b0:e7:b9:76:b9:c8:28:04:13:07:44:d3:e8:ba:49:
         04:f3:af:04:1c:d7:d8:0c:1a:39:74:37:4d:60:c4:8f:d8:27:
         b2:cc:57:46:23:4b:bc:02:46:66:69:27:bc:28:be:d0:4a:0f:
         23:92:90:c2:48:b8:02:cb:b3:3e:65:49:3b:0c:0f:5d:a9:ca:
         6d:82:b3:ef:0e:b4:af:cc:74:ac:4a:a2:09:69:ce:27:e9:17:
         bb:ef:46:58:62:65:c5:2d:61:53:76:ae:7e:d9:c9:a2:fb:ad:
         1e:a2:91:d4:28:2a:6a:43:ae:d2:b6:19:bc:00:2f:23:c3:26:
         18:13:21:66:6c:79:df:c7:c6:14:d5:34:57:0d:ea:50:21:ba:
         7d:3f:c2:71:12:06:c0:eb:d5:e8:88:15:b5:ef:c6:3d:2f:69:
         d1:10:e4:0a:cd:b8:60:5d:14:b2:af:67:5c:bd:2c:f4:b7:25:
         80:22:ae:1e:6b:fb:c5:92:49:61:77:d9:61:0d:03:e8:2a:af:
         87:e8:fd:3f:44:c9:1f:35:d3:62:75:36:22:2a:7a:d6:f5:a4:
         13:bc:59:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:02:08 2026 by rpki-client