Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/9c23a28d-939d-344b-9816-02b592813f56.roa
File:                     9c23a28d-939d-344b-9816-02b592813f56.roa (raw, json)
Hash identifier:          SUeWw/fv0NnlrbtFiKNqtLLCgDCzw/yQVYBZZX0tGOw=
Subject key identifier:   60:58:F0:E9:F5:2D:2D:AD:62:48:74:6D:9A:5A:A3:66:7B:11:72:43
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584DC4005FA63CF2965E310BEC30
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/9c23a28d-939d-344b-9816-02b592813f56.roa
Signing time:             Fri 08 May 2026 13:00:30 +0000
ROA not before:           Fri 08 May 2026 13:00:30 +0000
ROA not after:            Thu 06 Aug 2026 13:00:30 +0000
asID:                     23473
IP address blocks:        68.180.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:00:5f:a6:3c:f2:96:5e:31:0b:ec:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: May  8 13:00:30 2026 GMT
            Not After : Aug  6 13:00:30 2026 GMT
        Subject: CN=cb4f3748-e5c0-49b3-b380-17acab9ac349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2c:5d:f4:18:b1:98:a5:8e:15:a2:37:ca:6f:
                    a6:b2:90:81:6f:f4:35:17:2a:da:a5:f6:88:20:f3:
                    78:c4:6b:59:49:f8:60:e6:4b:a5:09:a1:39:f7:28:
                    d2:e1:f3:71:9c:db:78:73:fc:89:62:3d:78:50:45:
                    4c:d0:69:c7:d0:65:ac:56:a0:b0:a3:08:d2:fd:71:
                    f2:e0:00:38:a1:90:fe:b5:6e:a0:2e:68:aa:7f:e5:
                    2a:d6:77:ad:02:dd:ea:78:de:aa:7e:e5:9d:d6:07:
                    93:d3:a3:3a:d8:9f:ec:6d:83:e4:2c:f5:2d:03:1d:
                    ed:06:05:a6:0e:4c:15:3c:70:e6:ed:e0:ea:24:05:
                    7c:15:ea:c4:9e:27:2a:3e:52:25:7d:8a:3c:c7:21:
                    b6:a8:e0:73:d8:07:50:e0:74:3a:4a:ab:08:e6:d3:
                    f1:5d:b8:1a:f3:f1:75:e5:93:1b:0c:e6:50:d2:53:
                    bf:f9:62:12:ba:ea:f0:6c:bb:c1:ce:81:ab:15:88:
                    da:f2:a0:5b:8c:0b:8f:88:fb:07:1d:f3:c0:db:51:
                    60:e5:2e:0e:73:01:4a:6d:da:d5:8a:80:f0:8f:3b:
                    c8:5d:86:c3:3c:83:fb:ec:0b:27:18:78:4f:5c:9a:
                    69:f0:99:11:7c:0f:04:d8:1b:a6:91:02:78:27:b0:
                    1f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:58:F0:E9:F5:2D:2D:AD:62:48:74:6D:9A:5A:A3:66:7B:11:72:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/9c23a28d-939d-344b-9816-02b592813f56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.180.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:f7:af:91:dc:9f:89:97:6a:44:64:65:ce:c0:57:09:55:88:
         69:6c:2d:b4:72:76:3a:4c:3b:11:a5:96:74:f5:ba:00:48:bd:
         fe:09:84:07:80:87:f9:60:f5:7c:25:53:e5:36:dd:43:90:a6:
         8a:72:e8:6d:9f:b9:1b:16:61:9b:db:54:70:5e:dd:94:7a:79:
         e3:0f:aa:48:e3:b3:fb:bf:5a:ca:d1:ca:9b:e4:4f:50:fd:64:
         0c:49:89:d1:2d:13:2d:c4:e5:a4:14:f7:5b:af:b1:e9:d1:4a:
         ef:6c:c2:d6:ea:1e:96:06:d6:2b:98:2c:54:46:c3:68:fc:f3:
         0c:91:8a:90:e6:2f:bb:d8:f0:b9:c1:ac:c6:f7:53:9f:de:d3:
         be:2b:ae:fe:30:9e:cd:97:4b:d0:02:2f:8a:bf:f8:81:01:7f:
         8b:72:3f:d4:54:f0:66:e5:eb:c3:04:4c:07:8c:57:74:bc:db:
         85:81:0c:55:9c:df:5f:5d:28:2d:f6:75:27:17:eb:67:3d:90:
         a3:4e:ec:22:28:42:21:75:58:0e:de:bb:2e:7f:df:8c:39:e5:
         65:15:b2:e7:06:86:a8:8c:2c:4e:d3:61:68:cf:79:4d:25:ec:
         63:87:f1:ef:db:50:a2:3e:d4:5b:33:ef:51:94:ed:af:d6:c6:
         c1:94:53:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:38:46 2026 by rpki-client