Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c947fc7d-b92d-38b4-802f-de66eef43cb4.roa
File:                     c947fc7d-b92d-38b4-802f-de66eef43cb4.roa (raw, json)
Hash identifier:          orPFCbcIakekcQIATR/tXz1QuLj96k8zQtVQ4T3LTlY=
Subject key identifier:   64:0D:23:F8:D2:66:FE:E9:9A:2F:42:30:CC:D3:A5:0D:04:A0:F9:5A
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F498C2B05B38D684032B4AC80
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c947fc7d-b92d-38b4-802f-de66eef43cb4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     23473
IP address blocks:        68.234.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8c:2b:05:b3:8d:68:40:32:b4:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2bbae265-1af1-4ce5-a9fe-ed2260b47115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7d:bf:3f:f1:bf:e4:33:7a:9b:a3:37:ae:af:
                    35:a7:d4:e2:fb:8c:ea:98:54:de:06:1c:db:b4:3a:
                    89:c1:58:ed:e4:da:c2:c8:89:1c:41:50:5a:74:c9:
                    f4:71:f4:40:05:0a:6f:99:61:97:63:bc:a2:f6:a4:
                    87:42:04:7c:8b:d5:05:25:77:b7:95:4c:90:c5:5c:
                    43:97:72:ff:ae:04:30:11:56:2a:ff:b3:80:1a:c5:
                    50:a3:f4:df:c4:4f:d3:a7:61:ad:78:27:68:0c:3f:
                    1f:a1:7f:25:bf:b6:f3:92:9f:80:14:60:3c:20:15:
                    8c:e7:bc:5f:08:cf:24:7c:78:df:ac:32:a9:9a:15:
                    39:5c:26:d5:64:4a:2d:7d:d6:e9:35:1c:c3:aa:20:
                    a8:0d:ff:cd:76:7e:5e:d1:c7:8e:62:ca:b4:7e:59:
                    66:ab:7a:aa:06:47:b8:ca:23:91:8a:fb:cc:dc:a9:
                    de:cd:32:3b:99:c6:c3:89:0f:0b:5b:ed:19:a3:00:
                    08:5c:cb:fd:ef:62:3e:02:64:77:3f:87:7a:0e:c9:
                    70:98:26:13:4b:d3:65:76:49:58:57:ba:ff:9b:6e:
                    49:a5:c7:22:16:2e:b7:f0:61:a2:fb:c0:79:49:74:
                    09:d8:ac:26:b9:8b:e8:80:17:d3:64:b8:5e:35:a3:
                    ea:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:0D:23:F8:D2:66:FE:E9:9A:2F:42:30:CC:D3:A5:0D:04:A0:F9:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c947fc7d-b92d-38b4-802f-de66eef43cb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:34:6f:0f:76:95:0e:4b:6c:7b:e7:02:1b:8d:7e:40:dd:19:
         78:78:62:8c:2d:aa:ed:63:45:c5:a8:7d:ce:dd:93:db:12:31:
         a2:ae:27:c0:b9:ba:24:97:82:cf:14:b9:6a:c7:9e:00:1d:56:
         35:66:1c:93:d5:60:83:3f:dc:31:d9:5d:30:59:cc:e4:ca:22:
         0f:77:75:3f:9b:23:a3:8f:79:66:da:f6:16:4d:f0:6b:01:41:
         0a:d0:75:72:10:dc:cc:de:65:98:89:52:f2:3b:f6:bd:06:ae:
         38:aa:0f:ab:9a:ef:e5:5c:fa:57:5a:98:59:b4:af:73:67:a5:
         f1:95:02:a1:b3:f8:22:4d:2d:55:3f:af:95:08:73:1f:7b:60:
         96:b9:6a:1b:0a:c9:92:be:7f:50:9b:c9:a2:04:9b:60:e0:d4:
         63:55:f2:7c:91:f4:5c:fd:ef:c5:44:04:0c:21:20:0b:a5:fd:
         0d:ad:60:88:54:3f:c0:d7:0e:95:57:89:bf:b9:6b:53:3c:ac:
         5a:c5:83:8c:58:38:ae:12:bd:51:67:88:b9:2d:3b:ac:64:bd:
         cb:90:47:6e:c1:dc:75:d2:a5:b2:75:d8:31:b1:db:ba:4a:51:
         d9:b4:60:0a:f6:85:4a:dc:97:5b:c1:e0:c8:32:a0:32:ca:6f:
         92:24:ed:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:41:19 2026 by rpki-client