Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b6d6eaed-e94f-3370-a18d-e71b1418b89f.roa
File:                     b6d6eaed-e94f-3370-a18d-e71b1418b89f.roa (raw, json)
Hash identifier:          it7/ShNAFvz3MOjBM/0luDVodgv7gMvWftxFkMrfpeo=
Subject key identifier:   D7:00:74:38:3C:2E:57:DF:3B:BA:4D:ED:84:6C:E6:33:A7:15:43:D0
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F497347647BB3615DDB22F020
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b6d6eaed-e94f-3370-a18d-e71b1418b89f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     23473
IP address blocks:        68.234.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:47:64:7b:b3:61:5d:db:22:f0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=da00dee3-2819-4bba-bfb5-cfa50d1604f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:23:89:c3:ed:85:28:dd:72:08:59:9e:61:94:
                    8a:33:d5:16:c9:1c:31:a1:7c:e8:19:bd:10:e8:cc:
                    a9:a3:e2:5a:ea:35:d6:ce:bf:6a:2c:6f:1d:6c:90:
                    78:89:ed:da:eb:31:2c:c1:ed:d0:d3:0b:b9:7e:b3:
                    09:5b:b7:30:f5:38:aa:26:ce:81:1f:fb:df:bd:80:
                    ce:80:f1:80:23:a2:1c:c2:08:67:45:64:02:64:ca:
                    c7:c3:c2:36:63:b7:39:95:0a:65:95:0b:87:df:9d:
                    b4:f2:bc:a6:16:dc:72:c9:7b:41:8d:dd:68:9f:d7:
                    b5:bb:33:34:4b:30:f6:37:e0:dd:d7:27:8f:f8:f8:
                    c1:30:3c:39:1e:21:9f:71:fc:89:bc:31:4f:28:0c:
                    b2:81:ac:5c:68:c2:ff:da:e8:7d:bc:e9:77:e1:b8:
                    6d:e2:e9:12:35:bb:fb:a6:c0:dd:d8:36:db:eb:df:
                    53:3d:25:4d:92:48:60:dc:de:c1:51:37:dc:88:a0:
                    49:82:06:6e:3c:66:47:cc:9a:4e:99:8d:e6:6a:4e:
                    db:ad:fd:be:6c:11:43:63:e3:88:46:46:a3:ee:be:
                    c7:5b:ae:25:e7:5e:6c:d7:da:d3:2f:38:54:23:7a:
                    59:15:42:00:b9:8c:25:d0:5a:2b:8c:17:c5:b7:64:
                    b3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:00:74:38:3C:2E:57:DF:3B:BA:4D:ED:84:6C:E6:33:A7:15:43:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b6d6eaed-e94f-3370-a18d-e71b1418b89f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:0e:5f:5c:73:2b:dc:0e:58:4b:d1:50:a0:26:d7:1b:39:25:
         a4:bf:07:70:7c:52:31:37:23:0b:ac:1e:89:4b:8b:25:85:a2:
         69:3a:c6:54:0f:39:0e:5a:49:b6:0b:7f:27:51:34:42:35:73:
         59:15:fd:0b:3f:3a:a8:25:7d:d1:6b:1e:ad:88:83:eb:69:08:
         33:22:3c:6e:81:82:62:2e:3c:34:23:c0:aa:7b:d7:59:d3:15:
         4d:56:96:25:eb:8f:7d:93:03:0e:43:55:fa:cb:ec:84:f4:99:
         57:05:4f:c1:35:f2:5c:05:ab:e0:d0:3e:ae:20:df:4f:08:b5:
         ab:6d:37:ef:26:10:8e:28:c8:7f:0c:24:49:5d:f7:25:51:64:
         20:3b:fe:88:b8:48:98:db:ab:3e:bf:50:e8:60:7c:76:56:a3:
         b4:bb:4d:74:ee:8b:0e:f3:c7:90:f9:86:68:05:be:55:3c:c2:
         b5:6a:64:d0:0f:18:32:92:57:4c:48:02:50:ec:9c:40:f8:49:
         5c:73:1f:f0:44:b1:3d:2a:5b:e8:98:ab:f0:82:ca:e9:4e:ca:
         4a:a6:cb:b2:39:bd:a3:92:3e:50:4c:ac:5e:70:68:8e:0a:9a:
         fb:a3:cf:5d:b3:7e:de:df:a0:e7:9b:e2:d1:b9:db:33:11:be:
         55:8f:a2:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc0dke7NhXdsi8CAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZGEwMGRlZTMtMjgxOS00YmJhLWJmYjUtY2ZhNTBkMTYwNGY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyOJw+2FKN1yCFmeYZSKM9UWyRwxoXzoGb0Q
6Mypo+Ja6jXWzr9qLG8dbJB4ie3a6zEswe3Q0wu5frMJW7cw9TiqJs6BH/vfvYDO
gPGAI6IcwghnRWQCZMrHw8I2Y7c5lQpllQuH35208rymFtxyyXtBjd1on9e1uzM0
SzD2N+Dd1yeP+PjBMDw5HiGfcfyJvDFPKAyygaxcaML/2uh9vOl34bht4ukSNbv7
psDd2Dbb699TPSVNkkhg3N7BUTfciKBJggZuPGZHzJpOmY3mak7brf2+bBFDY+OI
Rkaj7r7HW64l515s19rTLzhUI3pZFUIAuYwl0ForjBfFt2SzRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNcAdDg8LlffO7pN7YRs5jOnFUPQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYjZkNmVhZWQtZTk0Zi0z
MzcwLWExOGQtZTcxYjE0MThiODlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROqVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADEOX1xzK9wOWEvRUKAm1xs5JaS/B3B8UjE3IwusHolLiyWFomk6xlQP
OQ5aSbYLfydRNEI1c1kV/Qs/OqglfdFrHq2Ig+tpCDMiPG6BgmIuPDQjwKp711nT
FU1WliXrj32TAw5DVfrL7IT0mVcFT8E18lwFq+DQPq4g308ItattN+8mEI4oyH8M
JEld9yVRZCA7/oi4SJjbqz6/UOhgfHZWo7S7TXTuiw7zx5D5hmgFvlU8wrVqZNAP
GDKSV0xIAlDsnED4SVxzH/BEsT0qW+iYq/CCyulOykqmy7I5vaOSPlBMrF5waI4K
mvujz12zft7foOeb4tG52zMRvlWPouA=
-----END CERTIFICATE-----
Generated at Fri Sep 25 10:54:13 2026 by rpki-client