Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b3df1b6b-6922-3515-bfea-7f12e6a434ef.roa
File:                     b3df1b6b-6922-3515-bfea-7f12e6a434ef.roa (raw, json)
Hash identifier:          603RUAXXpYyrGNpP/0SX1nYQ7oi60ik+w6pTtNVqzVI=
Subject key identifier:   DF:A1:31:87:D5:56:A6:11:63:3F:DC:1B:C2:2C:17:1A:A6:F2:18:9E
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584DE9B081C54535D171C308BD00
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b3df1b6b-6922-3515-bfea-7f12e6a434ef.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     23473
IP address blocks:        68.234.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:81:c5:45:35:d1:71:c3:08:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=62b63c18-7518-4fdc-a7e6-49140d0aa3e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9a:b4:b0:7b:4a:91:79:16:29:17:5c:e1:c3:
                    9c:52:bd:a5:3c:fd:97:fd:e0:2d:c5:b8:a4:b8:51:
                    3a:f9:7d:f6:c4:73:92:80:f8:b6:6a:c8:47:23:f9:
                    ec:0b:24:b2:4f:de:e4:b3:b6:7d:78:1e:d2:af:14:
                    b2:0c:a0:86:d4:5a:7d:18:cd:2b:78:f8:64:15:0d:
                    49:9c:16:61:ef:56:e9:61:52:38:0f:e7:0e:6f:e6:
                    72:4a:81:df:9e:14:1f:05:34:39:b2:3c:14:61:25:
                    f2:33:a5:b1:79:20:68:ff:c1:67:6b:ef:f3:72:43:
                    01:f4:4b:14:46:5a:8b:9a:c6:a7:ee:db:0b:e6:37:
                    07:80:e7:99:52:6f:da:5f:73:0c:17:8f:67:ed:2b:
                    41:6c:14:d6:be:08:46:2e:81:94:5c:d1:c8:d9:cb:
                    e1:de:d6:8a:92:ae:93:ad:37:39:95:17:3a:b1:75:
                    f2:c2:c5:ef:d9:8b:0a:a4:cb:8e:10:de:d1:0f:8c:
                    83:65:e4:63:1d:e4:60:43:b2:d3:96:75:bd:8b:4c:
                    96:34:28:c3:a2:cd:f3:33:45:3e:04:ae:4b:17:69:
                    e5:b9:69:a7:dd:5d:5e:99:ae:8f:a0:05:0a:11:a4:
                    53:08:01:a4:24:8e:14:f6:8a:73:70:bb:a5:eb:85:
                    c2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A1:31:87:D5:56:A6:11:63:3F:DC:1B:C2:2C:17:1A:A6:F2:18:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b3df1b6b-6922-3515-bfea-7f12e6a434ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:72:41:96:6e:f6:44:16:cf:bc:3f:22:73:14:52:03:b1:c9:
         47:71:79:d9:80:aa:aa:90:b8:95:69:35:30:32:b0:d1:b9:66:
         e3:e3:86:b9:a6:12:2a:99:b4:5b:0c:dd:b6:f0:a2:6e:e3:b8:
         4d:aa:32:93:56:d3:56:fb:9c:91:a3:f0:0e:9d:9a:83:5b:05:
         d3:a4:47:13:27:61:18:6d:40:d3:34:33:20:89:c6:ca:61:77:
         58:85:6f:82:ec:f3:07:85:d5:51:6f:12:da:58:5e:4d:a4:44:
         db:82:5c:2b:97:da:a0:5d:ef:d7:05:89:77:bd:63:5f:50:b9:
         62:e8:60:27:57:06:46:fa:9d:58:ac:0e:6e:d0:c3:1b:53:31:
         df:8c:01:b0:3b:e9:ed:18:a7:d0:15:d4:4a:67:11:be:2a:f9:
         f6:48:d4:21:e9:6a:cd:d7:da:f2:fe:f4:ca:25:6d:72:7d:87:
         f1:37:4a:6e:1f:8f:f2:49:7a:f3:dc:f3:09:99:b9:e7:20:5c:
         31:2c:69:25:ee:c5:b6:e1:7a:e1:6a:c2:22:57:88:fe:0b:da:
         2f:4f:c4:08:c0:dd:b1:5f:70:f7:82:2b:b0:89:1b:d7:69:df:
         9f:47:f1:4a:82:f1:27:b8:04:0f:f1:3d:7c:68:44:77:be:c2:
         c9:5f:0c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:05:02 2026 by rpki-client