Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e1926728-0c22-3a0c-8af8-b50ef5bf7740.roa
File:                     e1926728-0c22-3a0c-8af8-b50ef5bf7740.roa (raw, json)
Hash identifier:          bhgbTLHmEWZs94gpIqc7F+Cd+5UJdz4BVNjpGEGOExA=
Subject key identifier:   24:A5:13:67:F5:FC:7B:C5:9D:12:61:4A:3F:8F:88:A0:CC:6A:F3:7D
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EA44524F547A8F5F6B8395480
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e1926728-0c22-3a0c-8af8-b50ef5bf7740.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     23473
IP address blocks:        68.180.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:24:f5:47:a8:f5:f6:b8:39:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=8d4bd3f6-7b81-449d-b498-7abcb1c0b643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5b:18:bb:de:5b:52:45:63:8e:1b:f2:85:de:
                    98:55:55:d0:92:9c:02:0a:3d:7c:6a:14:f1:bd:ef:
                    b9:16:05:16:83:d6:37:89:b4:f3:43:28:56:35:b6:
                    b5:47:40:08:49:3d:2a:49:a1:de:cb:aa:ac:a5:97:
                    1e:2f:a5:33:c5:e9:1a:70:8e:f6:28:04:2d:5d:8f:
                    1b:8b:dd:31:b4:18:5d:dc:56:0e:86:d3:ca:46:4f:
                    0f:d8:c7:ad:51:19:85:48:37:2b:47:71:0e:cb:cf:
                    a0:4e:23:d6:bd:60:34:9c:d7:c2:16:06:9b:59:27:
                    a3:3d:05:62:4d:d1:ac:06:2c:50:44:14:0b:53:8d:
                    d0:a5:8f:0b:ef:1f:db:53:6f:62:24:a4:f9:03:34:
                    5b:61:c6:8e:19:83:8e:9a:a7:c1:10:d4:85:81:44:
                    47:dc:22:d8:bb:fa:0b:4e:39:9b:47:0f:fb:5b:57:
                    c2:8f:9c:9b:41:a2:8d:35:46:54:03:e1:ca:65:d9:
                    5e:9d:e5:57:9f:b2:a2:a6:ef:3d:3e:87:d3:14:e5:
                    99:a2:8e:67:73:64:8c:61:48:e5:8e:1e:ba:a5:f6:
                    de:47:c5:d9:32:b1:b8:62:9a:35:98:57:73:95:80:
                    33:ea:8d:68:de:86:8a:35:42:54:4f:16:c0:40:80:
                    28:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A5:13:67:F5:FC:7B:C5:9D:12:61:4A:3F:8F:88:A0:CC:6A:F3:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e1926728-0c22-3a0c-8af8-b50ef5bf7740.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.180.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:6f:36:11:f5:a5:5f:b0:2c:ba:71:88:6e:43:80:78:bb:54:
         f9:98:c8:59:5a:06:95:08:37:3e:71:39:dc:ac:02:66:8f:f9:
         df:64:82:cb:4f:1d:0f:c1:49:52:98:d3:97:ec:82:15:92:cf:
         0b:ab:b0:90:67:4d:f1:f1:d0:e9:d7:1f:a0:12:98:34:3d:e7:
         0c:6d:7a:cc:de:33:39:c1:d6:ea:3e:bf:f7:69:c4:d9:85:71:
         26:e6:f1:55:37:82:00:32:b3:83:ce:53:fd:49:b8:f7:d9:e5:
         47:e7:6e:6c:67:27:b7:d7:5d:b2:9e:9a:1e:ba:a7:42:1d:3c:
         27:d8:8b:88:7b:87:c9:90:79:5a:d2:3a:7b:c5:59:61:35:43:
         ba:bc:1c:d3:29:04:65:77:85:df:25:7f:1a:c5:50:ee:f4:32:
         95:0c:94:46:0b:05:91:53:be:85:61:5b:45:b8:2b:f3:8f:da:
         e6:6f:be:45:97:e2:1d:f4:82:e6:0f:4d:8f:a2:48:a3:e4:fe:
         98:03:5b:3b:94:e7:07:83:ed:0e:95:3b:84:d1:e9:9c:94:49:
         fe:21:ee:05:dd:0b:96:a6:2c:4c:cb:68:dc:99:53:26:65:7c:
         9c:da:df:e8:48:07:dc:67:6f:49:8d:e1:7f:3a:bf:2d:a1:0e:
         22:f3:3e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:08:23 2026 by rpki-client