Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/8e279ecb-cbb7-354e-aff4-458131ac9947.roa
File:                     8e279ecb-cbb7-354e-aff4-458131ac9947.roa (raw, json)
Hash identifier:          fZd0PQemrXc3KxMrHbGaIxYXV9jPs/3Uut9i2pqqIvg=
Subject key identifier:   7F:6B:3F:B4:88:1D:90:E6:E2:F1:96:67:90:C3:AF:89:1E:DC:20:B5
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584CF6ECCF6E1F9B0B24369ADAE0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/8e279ecb-cbb7-354e-aff4-458131ac9947.roa
Signing time:             Tue 24 Feb 2026 02:00:31 +0000
ROA not before:           Tue 24 Feb 2026 02:00:31 +0000
ROA not after:            Mon 25 May 2026 01:00:31 +0000
asID:                     23473
IP address blocks:        68.234.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:ec:cf:6e:1f:9b:0b:24:36:9a:da:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Feb 24 02:00:31 2026 GMT
            Not After : May 25 01:00:31 2026 GMT
        Subject: CN=2f60666c-00c9-4510-94df-0f4db6090a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:57:97:ea:b9:73:20:cb:34:8c:e2:0b:52:37:
                    70:db:a1:5b:3a:d0:2b:07:e2:03:4f:87:50:ea:da:
                    01:c1:ca:32:02:69:da:f3:eb:29:29:80:8c:ab:99:
                    ea:af:af:50:dc:cb:a0:57:69:24:b0:6a:7e:4c:2f:
                    56:38:80:18:45:40:bd:3c:74:5c:d6:15:03:a1:df:
                    a2:4a:a5:75:60:19:45:a2:37:75:da:b2:d6:87:9a:
                    1a:f3:63:a0:8e:c4:3f:28:b6:3c:3c:f9:8f:66:42:
                    e0:33:81:3e:ce:73:36:e9:4c:f9:10:ac:5c:90:81:
                    ef:85:8d:2b:86:74:04:fd:90:67:91:b3:c7:98:1e:
                    2f:87:63:19:0c:3a:04:50:40:b2:b4:96:08:6c:6b:
                    40:02:e6:83:97:d9:e0:b6:7e:6f:f9:b8:25:0e:7e:
                    5a:88:ea:87:c2:2b:80:45:97:cb:31:df:96:52:c1:
                    c9:f8:da:59:0f:6a:ee:4e:21:bf:a7:33:a1:b3:aa:
                    d0:96:66:e8:7a:fb:c1:b7:ee:35:0b:c9:56:45:0a:
                    39:f7:d9:84:5f:bf:e4:d2:7a:90:b4:6c:42:3c:bc:
                    3e:90:f3:5e:6c:05:2c:7d:7b:ce:9e:35:58:e2:16:
                    12:12:0f:9b:0f:5d:d2:4d:42:3e:aa:63:22:9e:b1:
                    cd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:6B:3F:B4:88:1D:90:E6:E2:F1:96:67:90:C3:AF:89:1E:DC:20:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/8e279ecb-cbb7-354e-aff4-458131ac9947.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:76:4f:8c:a6:16:aa:88:bf:15:0b:f6:45:28:7a:1f:a3:35:
         ca:7c:fa:fb:5c:8b:83:3b:64:4d:b0:2e:b5:c2:69:2e:de:7d:
         bb:66:74:31:60:35:27:eb:e7:57:6c:c6:32:6c:42:4e:99:ad:
         2d:19:0a:68:50:d8:3d:4c:31:90:0b:43:ad:e6:44:9d:8d:3e:
         27:1b:12:af:e2:5d:2b:44:63:76:07:fb:b6:6c:59:0a:be:f1:
         12:c9:c8:c1:08:a7:bf:48:d5:f1:2c:39:3f:7a:59:30:c6:85:
         b7:e9:62:fb:26:8a:34:ba:9b:b9:fe:aa:73:34:68:16:35:40:
         4a:b4:c9:42:11:56:d9:c6:41:e4:64:7f:ec:a1:8b:7e:b3:de:
         19:27:de:aa:d9:27:88:43:ee:bc:7c:b0:fb:8c:ec:e3:09:0f:
         ff:fd:40:16:74:11:b2:a0:1d:76:c6:da:e5:df:9a:67:69:03:
         c3:55:63:d0:20:4d:3b:34:c4:f0:3a:72:99:91:8f:bf:db:d0:
         08:54:23:66:d2:6a:4b:b2:ea:78:0b:7d:1d:ea:e0:5f:8a:56:
         a3:14:66:1f:2f:8c:09:f2:6c:3d:c3:b1:5b:d3:c4:07:27:48:
         9a:db:d3:f9:63:26:1b:6e:b1:0f:e8:a5:3b:43:d0:bc:7e:66:
         54:29:dc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:19 2026 by rpki-client