Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d6c2c8ab-ebd8-3040-ae1f-1b19737efcff.roa
File:                     d6c2c8ab-ebd8-3040-ae1f-1b19737efcff.roa (raw, json)
Hash identifier:          +eS+vCiY2BdAH/oNR/PRAoz4YjOIHu4oDEhO8nGCQIY=
Subject key identifier:   B6:0D:80:EF:5A:1C:E0:8F:02:DC:4A:10:59:A6:DA:79:69:A6:07:A9
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584CE362057D33895D6710DA9F00
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d6c2c8ab-ebd8-3040-ae1f-1b19737efcff.roa
Signing time:             Tue 17 Feb 2026 02:00:31 +0000
ROA not before:           Tue 17 Feb 2026 02:00:31 +0000
ROA not after:            Mon 18 May 2026 01:00:31 +0000
asID:                     23473
IP address blocks:        68.180.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e3:62:05:7d:33:89:5d:67:10:da:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Feb 17 02:00:31 2026 GMT
            Not After : May 18 01:00:31 2026 GMT
        Subject: CN=71b00c46-7909-44eb-983e-cbd48ea1ae4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1f:89:65:8c:d6:29:c2:bb:3a:c2:4e:40:1b:
                    bd:1e:61:dd:e1:59:29:75:40:37:87:78:13:a9:a4:
                    ec:f1:43:96:9f:05:ef:37:3d:b8:55:89:87:de:15:
                    1f:d8:47:04:80:b4:e8:32:72:c4:cf:4a:27:c6:b4:
                    e5:83:97:b3:0c:26:50:c0:18:83:90:ae:93:f3:ed:
                    3b:da:52:69:3e:94:a4:16:89:ed:52:65:13:54:25:
                    33:a9:6f:03:aa:13:dd:6d:e3:60:46:bf:12:00:8c:
                    bd:21:d8:24:12:1e:d0:21:c4:fe:d1:4c:4c:c8:f0:
                    48:01:ba:e8:95:5b:fe:ac:09:ca:7e:d5:f6:c8:45:
                    ba:31:6e:0a:bb:0c:31:cd:36:b2:fa:62:1c:b3:93:
                    f2:f1:48:42:ad:3e:4b:6f:d7:c4:76:63:f6:4f:2e:
                    d1:2a:23:66:6b:69:30:99:f9:41:65:8d:66:a5:1a:
                    98:8f:d4:7c:0e:71:c8:b4:94:36:69:50:dd:5e:80:
                    fe:17:b7:3b:23:e2:28:23:d9:3a:4d:1a:8a:c9:28:
                    db:b8:0d:a6:21:54:2c:12:47:79:c0:f5:4b:91:76:
                    ce:1f:42:4e:93:da:12:14:da:4a:a9:ea:a4:99:ae:
                    8e:95:3c:94:bd:3e:d9:41:6e:56:9e:ea:99:6d:cc:
                    70:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:0D:80:EF:5A:1C:E0:8F:02:DC:4A:10:59:A6:DA:79:69:A6:07:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d6c2c8ab-ebd8-3040-ae1f-1b19737efcff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.180.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:58:9d:83:2e:68:fa:cf:d2:c9:84:bc:81:fe:00:ff:3e:6b:
         a2:bc:d5:1e:42:e1:3a:45:21:7e:c9:0e:c6:7c:75:b8:16:ad:
         58:4e:e4:e3:a5:54:4b:49:e9:f1:68:64:bc:11:c1:fc:fa:6c:
         c9:be:c1:7d:f7:a8:7d:98:13:be:f7:a1:d2:f3:cf:3a:eb:55:
         ca:65:01:ce:fa:7c:0c:72:92:a1:68:27:65:7e:74:70:51:41:
         06:63:d2:4b:be:1a:a1:25:c2:7f:a0:4c:78:7d:8d:e8:59:bb:
         5b:70:50:b0:4a:25:e3:d7:1e:d8:f0:30:a4:e5:aa:46:97:66:
         5a:60:a7:ba:bb:db:ed:3d:41:d1:07:ff:e7:76:31:05:31:fc:
         a9:cb:6e:68:e2:37:bd:b8:f7:98:81:ce:3e:1a:a6:ab:e4:ed:
         fb:24:5c:86:34:d7:54:8f:3a:d2:32:c6:f7:34:8a:43:5e:64:
         47:5d:2c:7d:a8:f2:3d:01:d4:53:21:b0:e0:f4:a6:4b:8d:4d:
         fa:47:84:dd:b1:f7:41:07:8b:20:c1:3b:c7:e1:0c:0d:00:da:
         06:60:7b:7d:a6:79:a1:c2:57:7d:0c:ca:6c:9f:80:54:62:16:
         b4:3e:19:d6:34:a7:4c:bc:ff:38:05:a5:31:80:80:1f:b4:58:
         ab:0b:e3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:58 2026 by rpki-client