Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f6b26e11-b4ad-39f9-891c-9f1a7c01ed39.roa
File:                     f6b26e11-b4ad-39f9-891c-9f1a7c01ed39.roa (raw, json)
Hash identifier:          YT7y6EM0bKR6jb6kzzd8HtkpwJV2V6IWXMgOmKBrnDI=
Subject key identifier:   09:81:77:04:92:84:7D:1F:2A:83:74:BD:DC:4B:9A:A9:96:17:98:5C
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F498B444605034B13CC99A100
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f6b26e11-b4ad-39f9-891c-9f1a7c01ed39.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     23473
IP address blocks:        68.234.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:44:46:05:03:4b:13:cc:99:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3d3d546f-2388-4cde-9e92-9ec05c2da3a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fa:a8:64:2f:6b:03:87:a8:23:54:60:ff:6a:
                    3d:04:25:14:63:56:1e:9b:12:3b:6d:95:77:ff:37:
                    d0:27:2b:be:ac:c3:30:2d:60:2b:05:70:1a:29:c9:
                    d5:9d:7a:e2:d8:c6:18:00:7a:05:0b:91:83:05:29:
                    f4:91:69:31:ea:ce:59:f1:75:bb:ae:dc:1a:3c:d1:
                    85:43:01:7c:95:4c:3c:8e:28:93:fb:7b:34:fb:94:
                    c2:5e:99:3d:e2:aa:13:c3:aa:8e:f2:86:83:e4:a6:
                    ec:86:4d:8f:be:2a:cb:10:51:db:96:3e:c0:c4:62:
                    aa:33:d9:23:4d:75:a3:39:03:86:91:8d:0e:8c:a0:
                    4c:0f:67:fd:85:36:02:f8:a7:6d:44:ea:2d:10:f0:
                    f1:86:8b:ef:bb:88:c4:5a:64:ca:4c:f9:f0:98:6f:
                    67:21:bc:69:7c:fc:21:21:ec:f0:51:09:ba:b5:2d:
                    e0:d0:68:6c:08:35:28:1e:6a:e2:3d:68:a5:11:9f:
                    b7:62:27:12:4d:c4:85:19:f2:13:ed:43:52:ab:c1:
                    46:bb:a8:95:04:22:bf:61:13:50:6e:0f:10:e5:97:
                    62:21:aa:cd:e8:e4:dd:e0:d8:4b:42:6c:2a:01:a5:
                    b2:22:b0:a4:a8:d6:7c:e7:22:af:25:db:d6:76:50:
                    15:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:81:77:04:92:84:7D:1F:2A:83:74:BD:DC:4B:9A:A9:96:17:98:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f6b26e11-b4ad-39f9-891c-9f1a7c01ed39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:18:c1:d2:82:ab:9e:35:d8:f5:cc:c5:fb:2c:ba:6d:8e:93:
         6a:25:70:38:d7:e6:5b:51:1c:85:11:96:11:c7:c2:7b:fa:cd:
         1d:59:07:2c:e2:29:93:38:f5:6e:17:59:82:e5:f0:d6:23:3b:
         b5:c0:45:34:95:85:3f:48:14:e5:c5:f8:77:67:f3:89:ad:55:
         1f:78:7e:99:b8:52:79:8a:f1:c9:c6:3f:fd:fd:1e:1e:a0:cd:
         19:2f:e5:77:c9:d0:99:e9:ca:bf:a8:44:66:6e:c9:bf:86:82:
         d6:78:f4:63:72:70:e5:30:a4:85:dd:71:f2:27:e1:50:29:f2:
         7d:3e:fc:6e:55:6c:03:53:d0:bc:c2:24:a3:8c:52:a4:39:bc:
         bb:dc:df:74:7e:b1:e4:5e:b6:cb:40:0b:d1:c8:44:91:04:1a:
         f4:76:3e:eb:f2:b3:d4:37:1a:a1:52:a8:8e:ba:08:77:cf:ae:
         fe:f8:ed:3a:e0:b6:37:f8:a7:de:12:03:e1:80:f7:e7:67:f1:
         e9:26:7a:2d:78:d8:64:b7:4e:fb:78:28:7b:c8:0c:91:ec:c8:
         57:4d:86:90:f7:01:8e:ad:53:2b:82:65:c6:b5:83:e5:13:38:
         66:9f:39:ef:5e:c6:2d:d1:31:38:54:f3:6d:74:42:33:b1:50:
         31:bd:81:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:47:55 2026 by rpki-client