Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/067680dc-d273-3948-b377-c54a72ba040d.roa
File:                     067680dc-d273-3948-b377-c54a72ba040d.roa (raw, json)
Hash identifier:          zvltvpYa2SY19YsOyZwihrXN9RolJ5ZUjk0BgMSxbpI=
Subject key identifier:   93:DD:31:FB:17:EB:43:E5:A2:19:F2:69:4A:93:20:3B:AC:5C:48:DF
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F4974C7393635B7AFD19E9580
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/067680dc-d273-3948-b377-c54a72ba040d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     23473
IP address blocks:        104.145.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:c7:39:36:35:b7:af:d1:9e:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0d1cd0cf-a009-46e2-8fe8-38fc40a330e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a2:59:17:e5:ca:d3:48:a6:c7:d7:1a:2a:0c:
                    ed:8a:b2:09:83:d0:6f:b1:d7:79:52:23:17:78:5e:
                    f3:54:44:01:24:3c:76:3e:26:4e:c9:af:e7:96:85:
                    5f:9b:5e:ba:fe:47:fa:56:48:f7:da:a9:1c:5c:5a:
                    5b:09:09:8c:7d:07:c1:c5:89:2b:2b:47:0e:24:fc:
                    a9:5e:6b:44:a8:a5:96:80:ca:a8:ed:b8:a4:f6:f6:
                    68:68:1e:9c:55:3b:7c:33:dd:a6:d5:c8:cb:ed:6a:
                    ff:53:d9:8c:cd:d6:d2:8f:e3:36:dd:95:eb:9a:37:
                    c2:af:54:91:ef:0a:ec:9a:95:12:95:8c:43:7a:a1:
                    2c:39:95:9a:1c:9a:4c:15:93:ea:68:fb:20:37:68:
                    70:4e:21:da:c8:3e:d0:5d:02:b0:81:74:51:3b:29:
                    b4:ed:c1:16:c0:2a:15:4e:81:e8:b4:5f:31:2d:d5:
                    d4:9a:7a:3b:fc:9d:6b:f2:a1:01:a9:9e:18:61:c1:
                    7a:1a:8f:98:46:07:97:2a:01:0f:79:9a:c1:ad:7e:
                    fa:d2:c6:8e:4c:1b:0e:40:38:36:a9:dd:58:74:18:
                    6f:f2:4e:da:48:71:66:60:57:50:f2:05:33:33:6c:
                    ec:2c:8f:46:ce:05:c9:a0:a6:1a:09:de:0c:46:43:
                    4b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DD:31:FB:17:EB:43:E5:A2:19:F2:69:4A:93:20:3B:AC:5C:48:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/067680dc-d273-3948-b377-c54a72ba040d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:35:f8:d6:d4:58:ea:1d:16:7e:4d:33:59:0b:1b:13:fc:34:
         5b:ee:65:3e:93:75:59:ce:70:01:95:5c:44:21:ba:33:d7:b6:
         09:78:35:d8:a8:88:07:4f:b8:3d:eb:63:4a:d9:c4:bb:fa:b8:
         5b:fc:70:fd:5d:41:08:eb:0a:8a:6a:9f:0f:a4:d7:0e:07:f9:
         0a:aa:11:88:42:b5:0a:b8:a7:67:95:53:33:14:e7:fb:b9:38:
         e8:52:7b:05:77:36:f1:3a:64:81:55:9b:f7:a2:ad:ea:6b:75:
         e6:41:53:96:a3:f2:aa:37:5e:bc:64:a0:28:db:23:96:bd:89:
         23:a5:ce:81:b9:4a:a2:46:80:44:95:6b:60:28:6b:d7:df:f6:
         51:c0:a8:58:2f:c3:6c:14:6f:e5:f4:35:5b:41:0d:9a:6d:82:
         4c:7c:c8:05:68:ad:d0:ef:57:83:d7:24:9f:95:16:29:e3:80:
         8f:20:ef:22:b5:44:98:5d:0a:5d:ec:da:4d:2c:73:7d:32:50:
         6c:64:b0:f3:d5:b9:d2:e0:3e:5d:ec:37:11:ba:7b:34:a3:49:
         2b:b9:bc:0a:3b:bc:1b:38:65:fb:3b:6e:3e:38:08:9b:27:34:
         9f:80:07:d9:2b:66:dc:3e:05:d6:e7:01:03:90:32:13:1e:ee:
         e6:e3:f6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 06:47:33 2026 by rpki-client