Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/843ca865-f467-30c0-b98f-20784a86066e.roa
File:                     843ca865-f467-30c0-b98f-20784a86066e.roa (raw, json)
Hash identifier:          fucRwWXEGrOJa4oeskr7pwjCls8YzJKHJgpl6XvKiHM=
Subject key identifier:   26:92:54:51:28:D0:1B:AC:77:E4:07:27:D3:85:C2:E1:08:B5:D9:D8
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584DC995AFE78E47FFFCC0D3CFC0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/843ca865-f467-30c0-b98f-20784a86066e.roa
Signing time:             Sun 10 May 2026 13:00:31 +0000
ROA not before:           Sun 10 May 2026 13:00:31 +0000
ROA not after:            Sat 08 Aug 2026 13:00:31 +0000
asID:                     23473
IP address blocks:        68.180.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c9:95:af:e7:8e:47:ff:fc:c0:d3:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: May 10 13:00:31 2026 GMT
            Not After : Aug  8 13:00:31 2026 GMT
        Subject: CN=c65f7110-3dc9-441e-ac5c-7ad941532648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6c:f7:2a:a8:35:6c:a3:4c:62:ee:33:35:81:
                    2f:53:2f:1a:f5:2b:50:ef:bf:ba:9c:a4:8d:27:df:
                    b8:88:b9:ea:50:1a:8a:b0:be:96:c8:fd:32:06:08:
                    be:98:a9:c5:8d:63:aa:7f:71:fa:6a:08:59:9a:e7:
                    4c:49:d0:0d:71:da:cb:5a:a8:5c:de:28:99:ac:81:
                    d1:85:86:85:52:69:95:5a:51:c0:e1:15:c6:0d:b6:
                    38:49:11:e6:80:4d:a8:3d:84:3e:ac:b8:ad:27:a9:
                    6d:65:c7:72:21:35:16:bf:04:ff:9d:5f:ff:e6:83:
                    91:07:5a:14:cf:a9:96:75:a9:1a:01:04:88:ac:b0:
                    fb:38:2f:db:f2:63:2c:5e:ce:27:7b:55:0e:a4:5a:
                    25:b7:7b:7c:b0:d7:eb:99:a0:fd:b3:70:86:e8:e0:
                    0c:50:dd:90:56:e6:01:15:97:8a:ab:e4:fa:de:a2:
                    ca:cd:35:2d:79:06:b8:d7:fd:ac:ff:df:e7:44:c2:
                    ec:ef:32:87:cb:f9:57:de:6a:29:dd:b5:b0:bb:9c:
                    a7:1a:32:ea:b3:1a:10:5f:97:29:e3:94:2b:4d:eb:
                    a6:a9:53:ed:dd:ff:6d:1e:30:e9:45:6b:8c:12:cc:
                    be:2c:f9:a2:2d:76:10:da:94:3e:6f:9a:77:1b:71:
                    82:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:92:54:51:28:D0:1B:AC:77:E4:07:27:D3:85:C2:E1:08:B5:D9:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/843ca865-f467-30c0-b98f-20784a86066e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.180.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:cf:04:2d:f2:9e:a4:e7:74:f7:55:ba:78:95:20:35:3d:a9:
         9f:59:76:77:f0:3d:b3:33:ed:af:8b:24:92:44:e8:ee:f5:c0:
         c7:be:9c:41:f6:dd:fd:d5:23:a5:34:52:2c:5c:59:f9:34:ba:
         5f:69:c6:9b:13:8d:e5:4b:e2:dc:ed:bf:9b:c0:18:35:77:ad:
         93:85:3c:3b:fb:69:01:6f:68:2e:d3:c6:59:ae:0e:db:d4:33:
         f0:ca:95:4a:4d:c5:62:3b:09:95:10:86:06:4b:63:a4:bb:f7:
         62:86:5a:2a:81:de:10:dd:af:fe:ca:c6:9b:a9:01:da:b7:cf:
         22:90:9f:96:dd:e3:0c:e5:80:04:10:56:4c:79:9b:93:a4:1f:
         0b:43:dd:d5:54:87:a9:72:c3:26:07:1e:0d:40:85:eb:3e:93:
         6b:df:9f:67:ca:df:48:62:f3:e6:92:b8:4f:b6:4c:2b:4f:7e:
         de:65:2f:b0:aa:ae:0b:4d:9b:a7:4e:67:87:a7:56:9a:16:0c:
         b4:89:10:06:ea:9c:cd:e6:0a:fe:5c:c6:1a:43:3e:94:fb:08:
         da:f7:09:5b:b9:e7:cf:d7:0d:b7:73:0d:ba:6a:7d:44:87:70:
         05:a7:44:bc:0a:55:d0:92:0a:77:c9:8d:6f:c2:19:80:b1:7a:
         90:b7:44:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:25:33 2026 by rpki-client