Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a1429073-e37f-3672-a925-af2055d5bcea.roa
File:                     a1429073-e37f-3672-a925-af2055d5bcea.roa (raw, json)
Hash identifier:          e1d+Bpt/8ILrCY6oT3ylrVT+sKLykp0Gj06JxkKvmfk=
Subject key identifier:   A1:D9:FE:54:DC:94:DB:25:9C:69:F8:CB:3A:CB:93:AD:09:20:11:41
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584CF6ECD10B31D4FF879A9DC598
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a1429073-e37f-3672-a925-af2055d5bcea.roa
Signing time:             Tue 24 Feb 2026 02:00:31 +0000
ROA not before:           Tue 24 Feb 2026 02:00:31 +0000
ROA not after:            Mon 25 May 2026 01:00:31 +0000
asID:                     23473
IP address blocks:        68.234.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:ec:d1:0b:31:d4:ff:87:9a:9d:c5:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Feb 24 02:00:31 2026 GMT
            Not After : May 25 01:00:31 2026 GMT
        Subject: CN=19cd2f5c-6ecc-430b-a861-5c89a29818b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f3:e4:51:28:d3:3b:55:af:ce:fd:1b:e0:38:
                    aa:a4:2a:13:33:a7:ac:9a:cc:e0:06:7a:f7:a4:f2:
                    ed:05:54:8f:c5:38:c6:b1:f9:ef:3b:51:42:14:f9:
                    3c:8d:6f:1b:00:c4:63:ce:23:a7:37:d7:5f:b2:93:
                    af:26:a8:5c:fe:69:31:c9:34:b7:8a:cf:0b:5b:81:
                    0c:97:20:48:3d:a2:47:ab:8f:a5:50:4a:4a:59:b6:
                    f6:b8:78:33:fd:b9:61:e7:98:d7:a7:8b:1e:aa:d5:
                    1e:64:eb:17:14:b8:99:13:c9:9d:b5:34:e1:84:aa:
                    10:89:8c:5e:38:75:a4:76:2b:e2:81:ad:5b:75:db:
                    72:22:5e:d0:ed:6e:c0:88:b5:e3:f2:f5:ea:73:f4:
                    32:aa:90:27:4d:82:ae:f0:14:52:c0:1a:f3:b2:94:
                    11:6a:d6:fb:f9:19:b1:a8:13:29:6c:c3:1c:69:c6:
                    a0:60:34:d3:df:fb:9e:e5:ee:b7:a4:c3:c5:af:29:
                    5f:59:23:d8:72:a0:c3:ac:99:4e:cb:e9:75:5d:fa:
                    59:36:00:24:bf:b4:ba:25:de:89:01:3a:30:8b:3d:
                    fc:58:1d:de:79:0c:df:e8:17:c2:84:cc:35:ef:ae:
                    24:9d:e1:55:c1:17:6e:81:09:76:af:78:1d:61:49:
                    a7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D9:FE:54:DC:94:DB:25:9C:69:F8:CB:3A:CB:93:AD:09:20:11:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a1429073-e37f-3672-a925-af2055d5bcea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:ea:c3:56:df:65:50:49:6b:6e:d6:3a:12:4b:14:25:b0:56:
         cc:60:fb:ee:a7:f3:d6:33:03:0d:d8:87:73:ec:95:90:9b:e3:
         9d:88:96:af:74:92:90:60:37:c0:d4:0f:95:c1:3f:44:78:3c:
         0c:dd:5f:f7:cc:ae:e2:a3:c6:e4:8a:21:15:1d:85:db:76:d2:
         04:20:e2:59:4a:c9:fd:d0:0d:e0:5b:40:a8:33:c6:73:45:fc:
         1f:84:eb:6f:d9:cb:f3:8e:23:56:ba:1b:09:69:1b:7b:91:18:
         71:47:85:5e:30:c1:d9:33:24:22:e9:38:ca:b1:b8:c2:23:18:
         08:2c:73:5b:eb:49:44:18:97:b7:16:00:ee:7f:33:e8:51:c9:
         02:07:61:11:a2:f4:fc:75:a0:97:1b:8b:35:56:3c:5f:d7:f6:
         88:29:95:8a:c4:c5:a3:c3:5c:dd:78:29:cb:4c:1f:ab:eb:d1:
         a1:fd:01:29:4a:14:93:76:93:02:49:f0:b3:ec:56:50:06:f4:
         54:1b:5a:32:df:37:05:a5:e8:f6:a1:e7:8c:33:76:b1:7e:64:
         6d:fb:1f:b5:45:d9:90:12:41:3b:2e:b8:87:3d:6a:81:34:76:
         b1:43:ac:f8:af:65:21:f6:ba:ca:20:f7:0b:4f:d2:fd:32:ba:
         af:da:7b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:28 2026 by rpki-client