Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e38689a7-1a21-3e2e-81e8-5822126f2794.roa
File:                     e38689a7-1a21-3e2e-81e8-5822126f2794.roa (raw, json)
Hash identifier:          TCfUL8u9DI3oHVfbSaJ9x6O6u4ZDmLzw6PMgZxwEuwQ=
Subject key identifier:   5E:48:26:A6:D4:8B:D4:E0:71:58:E8:F5:5E:6D:DE:5A:D6:DF:F3:A2
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584CE62CCC8019E749C801F32C20
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e38689a7-1a21-3e2e-81e8-5822126f2794.roa
Signing time:             Wed 18 Feb 2026 02:00:31 +0000
ROA not before:           Wed 18 Feb 2026 02:00:31 +0000
ROA not after:            Tue 19 May 2026 01:00:31 +0000
asID:                     23473
IP address blocks:        68.180.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e6:2c:cc:80:19:e7:49:c8:01:f3:2c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Feb 18 02:00:31 2026 GMT
            Not After : May 19 01:00:31 2026 GMT
        Subject: CN=e0e950e7-5fcc-4b6c-80b8-93037841bee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b8:00:d2:95:e8:c5:d0:55:7d:be:2d:1d:0a:
                    b0:5b:3e:57:0f:b4:66:b0:f8:6e:3f:4f:38:90:f3:
                    7f:2d:79:b5:2a:f9:77:76:b0:94:fe:82:8b:26:53:
                    2d:d9:90:8f:28:bc:06:d5:dd:a2:da:5f:b7:c9:81:
                    3b:23:76:b7:79:2a:82:1c:65:f7:d4:51:ff:6c:f4:
                    ea:99:ea:fa:cc:11:c6:34:6e:01:a0:c4:4f:85:57:
                    1f:50:58:d1:5c:d9:1c:01:b4:58:89:c4:91:ff:88:
                    a7:08:fe:c6:09:a2:9f:5b:2c:6d:5c:c9:10:87:ac:
                    c1:b4:b5:65:cf:47:0e:83:54:06:22:8c:10:ef:9e:
                    fe:c1:73:9f:46:2e:21:af:50:d7:4d:02:05:63:b0:
                    1d:d9:96:15:44:64:88:f8:48:49:03:c5:57:e5:4f:
                    c0:ae:09:ae:54:73:65:08:3d:63:15:45:d6:3e:1b:
                    03:a1:6b:a0:c8:bd:54:45:f8:81:3d:0b:7a:14:7b:
                    ec:78:ef:ef:6f:1e:a7:d3:cf:d8:9b:59:37:83:3c:
                    ad:a9:07:a2:f7:44:8a:d5:a6:6c:8b:e7:76:f1:8a:
                    96:5c:46:35:99:9d:27:d7:6e:c9:6e:81:aa:29:20:
                    f8:b6:b1:0a:bd:5f:ce:48:2c:8b:b7:93:64:4b:e0:
                    75:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:48:26:A6:D4:8B:D4:E0:71:58:E8:F5:5E:6D:DE:5A:D6:DF:F3:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/e38689a7-1a21-3e2e-81e8-5822126f2794.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.180.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:10:17:bd:da:43:11:b9:3a:ef:c8:53:34:bc:cc:84:72:27:
         d8:8d:5b:f8:27:e3:fe:c1:4d:9c:23:e8:c7:4a:58:fb:55:6a:
         e5:90:bc:8d:49:d2:b7:ce:81:6b:e4:f2:0e:8f:b2:06:54:1f:
         11:9b:eb:4f:27:97:ad:9a:69:e0:63:b1:02:8f:28:75:db:af:
         50:13:49:7d:e6:a0:22:03:08:5a:a0:8a:21:d8:93:39:dd:98:
         7f:32:2b:86:29:e7:62:1f:8c:6f:4e:8c:22:35:07:63:e9:1d:
         a8:97:0f:87:59:22:71:a2:a8:cb:3d:4a:90:ad:6e:65:fe:b2:
         a4:fb:cc:24:78:90:75:68:c3:47:bd:7b:a9:45:fd:85:6d:ba:
         90:ff:b7:47:f9:72:f9:2f:43:34:60:c2:b6:22:85:38:e6:34:
         1b:7c:af:45:28:35:f0:7e:e3:b0:c1:fc:a0:b8:1b:43:1f:cb:
         6f:74:af:2e:2b:86:6b:6b:42:1c:aa:d0:b7:2d:77:0a:fc:4c:
         6f:0d:e1:74:8b:b4:02:ca:04:c0:8c:f9:c9:e0:2c:be:70:fe:
         c0:e8:2e:09:78:8a:02:34:e3:54:f7:57:a5:cb:b6:c9:49:3b:
         de:11:c1:1c:de:55:d4:2b:13:a6:e7:13:94:98:54:71:5f:77:
         20:4e:24:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:41:37 2026 by rpki-client