Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/bfcc1912-81ba-3eb6-b4fa-e0ea99bbe805.roa
File:                     bfcc1912-81ba-3eb6-b4fa-e0ea99bbe805.roa (raw, json)
Hash identifier:          hvb7yzd5/elOveMvAXMlJFVwXbESnDEqN08E7QMk96k=
Subject key identifier:   FF:81:40:DC:06:C1:45:6A:E8:83:47:D7:DF:3B:5B:BF:6C:83:D3:FA
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EA44523D5F9D6AF76CAFF40A0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/bfcc1912-81ba-3eb6-b4fa-e0ea99bbe805.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     23473
IP address blocks:        68.180.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:23:d5:f9:d6:af:76:ca:ff:40:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=4190e5da-fb4f-4f0f-9e5b-f738a6f846b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:33:c5:5f:ae:13:3d:b0:43:fd:ee:c9:a5:80:
                    b1:23:f9:0e:26:a8:1d:15:3b:f8:bc:78:6e:01:c1:
                    fa:da:61:64:67:ad:84:80:82:7f:f0:6b:9c:11:26:
                    79:30:48:c0:33:2d:5f:59:18:3e:82:82:92:72:ec:
                    2f:d2:32:e2:27:0b:3b:be:b5:46:76:95:b6:0a:32:
                    f1:2b:94:73:51:df:44:6e:3a:94:f2:b0:fc:23:39:
                    ad:5f:47:33:d3:87:7b:78:7d:a5:49:6c:9c:f1:39:
                    45:6e:73:15:ba:d5:17:c9:be:8b:23:6d:a2:24:d5:
                    fc:dd:62:65:1b:b0:fb:41:d0:e5:3b:ed:e4:c7:aa:
                    6e:d4:89:6a:ca:b7:aa:31:2b:41:46:0d:34:bd:18:
                    8f:81:53:c2:e0:cf:fa:e3:08:90:a4:86:1c:30:51:
                    f5:7c:da:9d:d1:19:f7:7a:a1:56:57:06:03:69:0f:
                    a2:c4:fc:4a:44:9c:ae:cc:a9:8c:c3:c4:0a:98:f4:
                    e6:d4:2e:f1:b5:e5:e9:0b:73:b6:95:0d:bd:96:e7:
                    d7:98:98:5d:12:57:28:05:8c:ee:fa:b3:fb:be:0a:
                    78:60:60:83:2c:31:0d:2e:63:ee:c9:9c:bf:9d:5b:
                    88:79:5a:61:1b:cd:32:be:3f:45:b4:86:54:b9:5b:
                    14:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:81:40:DC:06:C1:45:6A:E8:83:47:D7:DF:3B:5B:BF:6C:83:D3:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/bfcc1912-81ba-3eb6-b4fa-e0ea99bbe805.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.180.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:98:2a:c5:5f:25:da:d2:53:48:10:4c:85:81:a4:58:e6:c3:
         e1:30:23:2f:fb:7f:7c:50:8c:4a:ea:d5:2f:49:bd:e8:21:f3:
         ac:4f:60:bf:b4:02:b6:07:f9:af:f8:e1:e0:77:30:15:8d:5e:
         25:69:59:0d:a3:0d:f4:15:5a:3b:7d:e8:af:87:10:23:5b:74:
         3b:96:86:a2:f1:92:4b:1f:cf:85:ec:4a:24:48:66:c9:a4:e6:
         90:a8:53:b9:66:3b:e2:67:7f:f7:3c:06:6b:5f:f1:91:56:e1:
         85:1f:ec:45:89:84:10:7b:7f:63:e4:bd:98:5e:7d:33:78:97:
         29:ec:0e:13:e7:21:a5:96:52:1d:af:12:f5:15:98:22:3e:32:
         a1:0e:c8:74:ad:e7:2f:1b:76:8c:84:e1:e9:e6:bd:d4:35:11:
         68:a9:aa:95:46:7b:52:49:50:df:71:80:c0:f9:4b:ed:82:99:
         6e:ea:e2:65:21:fe:6e:f7:e3:b6:d8:e2:36:ae:92:51:8a:bc:
         9f:6a:76:e1:a6:72:3a:de:76:33:f4:d5:2d:31:89:0a:4a:dd:
         1e:d7:c7:aa:06:06:be:a7:f4:d3:7b:7e:ab:b2:03:db:b6:9a:
         02:b1:ea:bd:3d:75:4c:d9:4c:ed:63:7f:af:be:81:0f:27:0a:
         72:82:df:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:38:48 2026 by rpki-client