Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f7d06b9d-c355-35e9-9b4f-6411a38b7520.roa
File:                     f7d06b9d-c355-35e9-9b4f-6411a38b7520.roa (raw, json)
Hash identifier:          k95DNlLiAABAMRdFfcwkXUYyXNjZDlrGZPRIYHRC1SE=
Subject key identifier:   35:E0:36:07:78:BC:91:B6:A3:59:D9:81:28:99:D5:77:F8:FD:66:50
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584CA75C6239A347825272E18EC0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f7d06b9d-c355-35e9-9b4f-6411a38b7520.roa
Signing time:             Mon 26 Jan 2026 14:00:41 +0000
ROA not before:           Mon 26 Jan 2026 14:00:41 +0000
ROA not after:            Sun 26 Apr 2026 13:00:41 +0000
asID:                     23473
IP address blocks:        68.234.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a7:5c:62:39:a3:47:82:52:72:e1:8e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jan 26 14:00:41 2026 GMT
            Not After : Apr 26 13:00:41 2026 GMT
        Subject: CN=80110a1c-30fa-45f2-a2a4-9ab27f8c490b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:81:3a:59:b2:37:7b:ae:7c:18:56:aa:5b:ee:
                    45:55:a1:e7:e0:39:bb:27:d8:1a:9f:d1:1d:2b:bb:
                    0e:5c:0f:20:5f:a4:63:09:8b:04:7e:2e:a9:78:bd:
                    fd:03:72:97:7a:95:19:c4:44:58:98:34:71:a5:42:
                    a7:b5:d1:32:0d:3f:f3:a9:4e:8d:cb:52:8d:87:a9:
                    75:a0:31:35:a2:55:9a:83:60:41:21:3f:f7:ba:2f:
                    47:af:79:03:22:e4:7a:17:9f:14:58:18:bc:6e:71:
                    78:24:49:b5:07:72:c8:b3:94:ae:61:a9:41:e9:8e:
                    79:d5:86:b2:64:28:4e:8a:99:72:28:e0:04:d6:0a:
                    6b:c6:8f:d8:55:03:1f:09:cd:64:9e:b5:eb:c1:5e:
                    ac:f9:7e:d4:24:87:b7:90:10:36:4b:bf:a3:e2:ca:
                    b4:99:7d:ba:c9:a2:b1:7b:e4:f7:c2:bb:ec:11:15:
                    7a:c2:3f:4b:db:6e:a9:f6:fc:3a:fb:4f:e9:8d:f3:
                    bf:5a:ee:a3:0e:14:46:e7:3d:1f:3d:99:35:32:a6:
                    a4:58:7e:74:4b:b7:71:63:92:1a:50:99:b1:6e:1a:
                    16:0c:d8:73:de:76:66:59:a5:0b:a4:55:11:3c:1b:
                    b6:8f:ec:4b:63:98:a1:6d:20:36:4e:19:7d:bd:2a:
                    d4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E0:36:07:78:BC:91:B6:A3:59:D9:81:28:99:D5:77:F8:FD:66:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f7d06b9d-c355-35e9-9b4f-6411a38b7520.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:27:86:e9:11:4a:72:94:ac:11:a6:fb:ae:7b:64:f0:f5:1e:
         98:cf:dd:c3:ef:4d:d3:ac:6e:4f:e7:af:bc:76:77:73:38:a2:
         08:4d:0d:67:0d:de:9f:69:3b:77:d9:1d:df:1d:03:dc:75:24:
         2c:97:85:bb:7f:f0:1e:c8:3d:1c:eb:ca:4a:72:43:6a:05:c0:
         34:7f:a3:3d:0b:8c:bd:99:94:47:68:04:0f:d9:0c:46:b4:be:
         a0:25:65:ef:21:11:16:ed:04:7d:1c:fc:4d:a6:fa:54:4f:ac:
         fd:18:f2:48:78:01:19:96:f8:d1:53:ec:46:f0:51:57:25:0b:
         fb:0d:0a:49:ee:bd:b3:8a:31:df:64:6b:61:27:a8:69:63:df:
         4e:80:bc:c9:71:f9:67:d7:37:88:eb:ee:2e:94:b1:40:a2:c8:
         35:36:8c:ef:38:07:1f:f3:e8:a1:9f:94:9e:29:03:6b:c1:ee:
         22:06:df:af:92:45:f3:c2:42:9e:74:9a:0a:17:14:44:e5:8f:
         91:5f:d8:3a:4d:a5:e4:9b:03:93:a0:02:65:a0:80:25:c0:3e:
         e5:a7:ee:cc:8f:6c:da:d6:43:59:2f:33:b7:08:08:8b:35:84:
         eb:af:a2:a1:78:a5:ea:85:77:20:e2:6a:d8:80:41:05:f5:ad:
         09:66:87:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:45:50 2026 by rpki-client