Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4a2ece17-fdc9-3f84-9d5b-e2420424b67c.roa
File:                     4a2ece17-fdc9-3f84-9d5b-e2420424b67c.roa (raw, json)
Hash identifier:          b83LfakifGfTxRfJTS2UV/G6L4qMoLpADgnOW0hlYVI=
Subject key identifier:   DA:C9:0C:33:E7:22:61:D0:3F:BC:E6:78:AB:B3:71:7A:D0:E9:7D:C8
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F46A7F1FF394FAD97CE651406
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4a2ece17-fdc9-3f84-9d5b-e2420424b67c.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     23473
IP address blocks:        68.180.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:f1:ff:39:4f:ad:97:ce:65:14:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=cbdd29f0-4ca2-4388-aa2a-055406148e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7a:9b:8c:d3:37:39:40:5a:d5:6e:15:83:91:
                    af:1f:df:47:b3:cc:66:1c:67:94:aa:1f:a0:f7:c3:
                    12:11:c1:31:cd:a4:13:fb:d4:af:77:65:4c:ba:da:
                    4c:5b:ee:a3:c6:ee:81:07:e5:5f:3a:89:f5:7a:d7:
                    9b:7a:52:e3:77:3e:ee:1e:74:99:fb:fa:d0:02:cb:
                    20:9d:be:f7:05:53:9a:34:bb:58:66:50:3e:98:e9:
                    5c:dc:b7:37:29:36:96:3c:68:25:57:c3:51:21:2a:
                    ef:c1:f0:ed:a9:a4:af:85:26:1b:64:fd:b0:cf:d7:
                    c3:b2:39:e4:d5:7b:76:14:6c:8e:c6:6e:c7:76:7f:
                    dd:7a:5b:df:17:6b:00:58:0c:97:56:a0:e6:34:e6:
                    c4:66:cb:fc:cc:ed:fa:fc:1a:a8:42:ee:d1:bd:16:
                    8b:53:3e:5c:c0:00:c9:48:c5:39:9c:0d:d9:83:bd:
                    2d:60:4a:69:93:cd:35:ac:50:82:81:ff:4f:e4:20:
                    6e:87:99:c9:4e:39:2a:f9:a6:4e:82:8e:6f:68:e9:
                    85:75:0f:7f:83:02:28:52:66:16:bf:38:08:b7:04:
                    13:83:f7:a5:54:50:b9:14:d1:f3:01:27:2f:8f:a4:
                    d9:c6:a1:7b:c0:1d:5c:5f:23:be:97:90:84:dc:9f:
                    c0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C9:0C:33:E7:22:61:D0:3F:BC:E6:78:AB:B3:71:7A:D0:E9:7D:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4a2ece17-fdc9-3f84-9d5b-e2420424b67c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.180.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:d1:99:74:de:92:17:6b:55:da:9f:6a:f5:54:10:ac:e9:11:
         a7:92:58:8d:a5:dd:42:83:aa:fe:e5:de:18:0f:cb:b9:cf:bf:
         1b:99:c9:e3:a8:58:fd:f9:14:4a:18:37:74:0a:b3:9c:bf:e7:
         75:e2:66:8a:94:b7:6a:9a:1e:cd:5c:02:1c:b5:57:df:6a:7b:
         7a:85:14:d3:ed:2a:b0:22:17:28:01:3d:20:b8:b5:30:8c:56:
         61:54:37:18:35:f9:95:21:9e:08:f9:53:d7:61:f7:e5:15:9b:
         cb:46:32:f5:e0:6b:ae:73:e0:51:cf:31:bf:c7:cf:b2:7b:f1:
         a6:14:07:af:cd:65:3b:c8:1f:37:30:6c:7f:74:31:cc:9a:52:
         f8:de:69:6b:d3:3c:61:90:83:ab:7f:96:07:95:88:58:2a:6f:
         75:af:b6:b7:cd:ca:f6:a9:95:2f:07:52:ed:0c:70:45:fc:e1:
         57:b6:a9:d2:07:21:ab:c4:44:cf:bb:4b:61:ed:1a:61:18:e3:
         e8:bb:37:1f:e4:85:9e:b7:31:78:ea:b8:7e:52:3b:55:08:d4:
         7e:c4:70:13:12:ef:f3:50:3f:ef:9c:5a:47:a8:d9:71:e3:ad:
         59:40:c9:a6:4c:1d:b4:1b:67:18:52:b4:a4:96:8c:1e:53:e5:
         3a:86:29:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:40:11 2026 by rpki-client