Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/bc562d28-813b-3c7d-8b62-2eb4943cea27.roa
File:                     bc562d28-813b-3c7d-8b62-2eb4943cea27.roa (raw, json)
Hash identifier:          bgT220/6f1Ly7a483tACmt7oNR2rotdxZ5wxkBkDpok=
Subject key identifier:   CB:21:17:10:45:45:8F:A0:AB:82:D0:9D:B8:F6:95:51:01:D9:70:01
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584CE8F7760278220579A9E73720
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/bc562d28-813b-3c7d-8b62-2eb4943cea27.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     23473
IP address blocks:        68.180.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:76:02:78:22:05:79:a9:e7:37:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=e4177acb-bd37-4429-ad90-80c7a671796e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3e:0b:be:2e:41:ce:8f:54:0b:eb:b0:13:38:
                    c8:5d:84:50:e0:58:f6:c6:a5:9d:a1:81:b5:fa:fe:
                    2a:3f:fe:e3:cc:33:a0:75:51:b2:e5:d6:a7:d6:36:
                    a3:ec:43:ac:2a:cd:ee:6e:08:14:71:cb:cb:2d:57:
                    75:56:32:f2:cd:3b:5c:b1:e7:7c:38:04:3c:93:e2:
                    9d:bf:50:c6:b9:81:8f:76:1a:55:ea:57:a1:7a:71:
                    d7:0b:06:2c:56:21:e1:ba:63:f8:7b:e9:fc:2b:00:
                    a3:19:67:90:47:bd:93:3a:fa:55:bf:92:74:1e:a9:
                    e3:2b:4f:66:07:fa:9c:65:77:6f:ac:92:19:21:02:
                    4d:73:c6:4d:e8:13:90:a2:e4:3b:11:d4:62:0d:37:
                    bc:d2:bb:31:25:50:1e:0a:a6:e4:8f:11:23:ee:0e:
                    44:d6:c3:93:36:9e:9f:1a:6f:12:df:d1:28:00:f9:
                    a4:bf:62:21:8a:f1:f5:54:6d:de:40:c1:52:df:65:
                    e4:34:2f:ac:64:a2:0b:df:ad:b5:c7:c0:a5:99:32:
                    15:0a:2a:11:8c:06:ff:99:db:17:47:c3:cd:25:97:
                    bc:57:28:fd:43:1a:15:ed:a3:52:f8:62:02:90:72:
                    0b:66:4d:40:3c:47:6a:5e:23:8b:99:2f:ca:d2:cd:
                    e4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:21:17:10:45:45:8F:A0:AB:82:D0:9D:B8:F6:95:51:01:D9:70:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/bc562d28-813b-3c7d-8b62-2eb4943cea27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.180.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:9e:89:9e:2e:d4:f6:65:9f:7f:f6:07:7a:3f:1e:f4:60:5e:
         7d:e6:bb:ca:08:be:d0:93:51:82:a6:d7:38:84:0f:43:03:28:
         65:46:e5:62:77:a8:31:7e:96:64:66:9e:97:fa:fc:d2:77:a8:
         d8:42:87:ee:d0:37:87:00:08:2b:b7:9f:83:bd:35:cd:33:46:
         6f:97:84:84:84:61:9b:f1:34:cc:1f:8a:77:27:56:b3:a9:60:
         45:d8:53:be:da:c0:1a:2c:66:71:03:a1:89:f3:12:4c:2e:ce:
         00:26:cf:5a:cb:79:0f:21:59:b6:83:f0:8a:3e:06:8c:fa:67:
         2b:07:f1:ec:a5:9e:5f:10:ad:9c:05:3b:16:34:21:30:a8:62:
         3c:18:72:96:b9:a0:07:f5:60:7a:13:a0:6e:75:65:b2:36:6f:
         81:2b:67:3d:62:ee:74:29:26:93:1f:b3:91:52:57:f0:d1:24:
         16:f1:10:98:5d:52:5f:11:6b:cc:4a:ef:5f:e4:fe:f7:99:d6:
         7d:48:8f:be:66:68:b3:a5:3f:51:a6:7e:fa:9a:99:fc:f4:18:
         8b:28:9a:e8:ed:47:b7:8f:28:c4:37:2e:3d:68:94:27:37:09:
         8f:6c:c8:cb:30:79:5a:1b:f7:c0:38:10:80:1e:ec:e8:0b:fb:
         0e:d2:fa:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzo93YCeCIFeannNyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI2MDIxOTAyMDAzMloXDTI2MDUyMDAxMDAzMlowLzEtMCsGA1UEAxMk
ZTQxNzdhY2ItYmQzNy00NDI5LWFkOTAtODBjN2E2NzE3OTZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuD4Lvi5Bzo9UC+uwEzjIXYRQ4Fj2xqWdoYG1
+v4qP/7jzDOgdVGy5dan1jaj7EOsKs3ubggUccvLLVd1VjLyzTtcsed8OAQ8k+Kd
v1DGuYGPdhpV6lehenHXCwYsViHhumP4e+n8KwCjGWeQR72TOvpVv5J0HqnjK09m
B/qcZXdvrJIZIQJNc8ZN6BOQouQ7EdRiDTe80rsxJVAeCqbkjxEj7g5E1sOTNp6f
Gm8S39EoAPmkv2IhivH1VG3eQMFS32XkNC+sZKIL3621x8ClmTIVCioRjAb/mdsX
R8PNJZe8Vyj9QxoV7aNS+GICkHILZk1APEdqXiOLmS/K0s3kMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMshFxBFRY+gq4LQnbj2lVEB2XABMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYmM1NjJkMjgtODEzYi0z
YzdkLThiNjItMmViNDk0M2NlYTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRLReMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHWeiZ4u1PZln3/2B3o/HvRgXn3mu8oIvtCTUYKm1ziED0MDKGVG5WJ3
qDF+lmRmnpf6/NJ3qNhCh+7QN4cACCu3n4O9Nc0zRm+XhISEYZvxNMwfincnVrOp
YEXYU77awBosZnEDoYnzEkwuzgAmz1rLeQ8hWbaD8Io+Boz6ZysH8eylnl8QrZwF
OxY0ITCoYjwYcpa5oAf1YHoToG51ZbI2b4ErZz1i7nQpJpMfs5FSV/DRJBbxEJhd
Ul8Ra8xK71/k/veZ1n1Ij75maLOlP1Gmfvqamfz0GIsomujtR7ePKMQ3Lj1olCc3
CY9syMsweVob98A4EIAe7OgL+w7S+h4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:48 2026 by rpki-client