Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/efe2db6e-d66a-3780-a7ad-dc5d47f72556.roa
File:                     efe2db6e-d66a-3780-a7ad-dc5d47f72556.roa (raw, json)
Hash identifier:          rksfxM6d0uXr5cV2gBFRCe73zffVMPhky5ZxQcOmRzI=
Subject key identifier:   B2:4B:A1:20:40:9B:DF:9C:EB:14:26:D9:7B:19:C3:0D:99:F5:E3:6B
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584E253EF69E0F705D8C41621EF0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/efe2db6e-d66a-3780-a7ad-dc5d47f72556.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     23473
IP address blocks:        68.180.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3e:f6:9e:0f:70:5d:8c:41:62:1e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=e4d73228-b7e9-44be-ad7b-db76ba6a60af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2b:80:d8:ff:4d:97:ee:fb:98:17:8d:b4:9f:
                    9e:27:d3:db:d8:a6:c4:ee:e1:13:e2:63:a3:85:68:
                    2a:4a:e2:f4:4e:cf:bf:d6:8a:97:02:3e:e9:cc:d1:
                    1c:f3:17:16:d1:c9:a1:42:c1:e4:d1:5e:b4:c0:52:
                    f4:68:c0:8e:1f:3e:06:15:62:a9:e0:5c:71:11:df:
                    bc:83:09:b3:4c:46:6c:53:2d:a4:27:a5:a2:b0:80:
                    6f:31:d5:c7:ee:df:88:18:3f:c0:33:92:2f:9f:09:
                    ef:62:43:0e:e4:db:a8:5b:24:ce:23:15:56:cd:d0:
                    3e:de:7e:8a:e2:8f:da:6e:36:2b:85:6e:c8:24:76:
                    38:8d:2b:3c:f5:44:ae:c3:18:97:71:d6:77:50:48:
                    27:01:94:52:fc:c1:12:dd:ec:a0:c4:6f:7b:5c:31:
                    1d:9f:87:e4:9e:b8:1c:eb:d0:b0:af:45:aa:0f:4c:
                    5e:7c:f3:79:00:c0:52:47:2b:c0:55:70:d1:d2:e1:
                    63:a1:c2:67:2f:f0:77:c1:60:c2:97:c2:0b:50:dd:
                    41:0b:bd:cc:ae:3a:bc:64:7a:eb:54:ad:de:1d:4a:
                    13:5d:6a:c9:19:82:f5:7e:c0:81:29:c7:a5:b5:04:
                    a5:84:ef:c8:61:56:a7:76:b0:c6:4e:6a:7f:c3:e6:
                    77:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4B:A1:20:40:9B:DF:9C:EB:14:26:D9:7B:19:C3:0D:99:F5:E3:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/efe2db6e-d66a-3780-a7ad-dc5d47f72556.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.180.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:55:48:64:17:30:b1:24:70:e6:8d:de:fe:62:6c:72:33:b2:
         3d:e5:7d:15:4d:25:fd:38:56:84:0e:f6:18:66:1a:2f:64:89:
         93:c0:f9:9b:3c:b8:e7:d1:0e:f8:19:2b:33:08:0e:e2:30:01:
         71:07:77:e5:96:67:a5:2b:2f:b9:ff:44:f8:03:7e:05:70:00:
         84:33:01:c2:0c:2c:66:bb:23:fe:23:57:58:a2:f2:e6:d0:60:
         06:9f:03:de:b0:ed:87:59:53:eb:ee:ea:29:27:b9:a9:c4:bd:
         65:28:5a:e7:72:b6:1b:cc:7a:9d:d6:1f:72:48:d7:5d:39:57:
         8d:88:89:cf:94:a4:3c:42:e3:8e:a2:ed:8d:bc:13:ed:2e:38:
         d7:d4:f1:f8:58:fb:6b:2e:32:fb:e8:9f:a7:d9:96:e3:2b:16:
         d3:99:52:fa:b7:04:b6:18:9d:3c:f7:27:ce:4d:e1:62:15:9e:
         2a:de:d9:b0:0b:db:79:0b:57:87:a0:61:15:66:76:25:7c:ea:
         2e:b5:0b:5e:91:1d:47:42:ef:9e:e1:0c:73:44:d2:01:23:e2:
         a7:19:3e:7d:b8:9c:d0:13:25:3b:2b:be:8b:a3:84:ca:56:d4:
         54:66:57:b1:a4:d1:85:09:bd:76:f2:05:bf:93:3f:df:3e:b2:
         dd:db:4b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:06:08 2026 by rpki-client