Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c5ebc18d-ecf3-3fb3-8d50-5ecf0a308ce4.roa
File:                     c5ebc18d-ecf3-3fb3-8d50-5ecf0a308ce4.roa (raw, json)
Hash identifier:          tp8nv9L9mroxTvjbsz49HoLqmI/+qKT9Pn+Wocn78QI=
Subject key identifier:   46:BE:80:E9:B0:C9:C4:37:C8:C2:0F:6B:82:45:A3:82:9E:29:E0:E1
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F498990AF40398EBBDD2B5ED0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c5ebc18d-ecf3-3fb3-8d50-5ecf0a308ce4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     23473
IP address blocks:        68.234.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:90:af:40:39:8e:bb:dd:2b:5e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f1cda2f1-34f0-46bc-97b4-fe60958cb51d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:29:66:3d:56:84:99:84:5e:33:d7:02:e3:de:
                    45:2d:f4:ea:ca:64:24:39:af:71:bb:61:39:ac:bd:
                    c3:63:3d:39:29:3f:38:22:59:32:e1:9e:d6:90:00:
                    ef:ae:70:1b:e7:05:55:1c:2c:5b:73:fb:cc:74:ed:
                    84:04:ad:8b:1a:18:3c:6e:16:8b:98:74:3e:2b:67:
                    da:9f:b4:16:f3:5a:3c:3a:a7:3f:c0:86:0b:c7:31:
                    f1:fd:e0:3f:0e:d2:21:7a:ad:4e:61:08:46:db:f7:
                    5f:4e:07:1b:89:91:6f:34:17:01:c8:d9:5d:1b:62:
                    4d:b1:d9:92:e1:ca:26:fd:e4:4e:8b:f0:68:57:17:
                    60:43:10:bc:41:dc:11:12:20:53:79:bb:a2:9e:7c:
                    d1:86:de:ea:a0:19:dd:c7:f9:2a:e2:3d:bf:1e:36:
                    8a:63:71:6c:ca:5b:fc:02:18:52:29:3e:99:58:14:
                    84:f2:92:60:31:72:4a:8c:d0:fb:8d:da:4c:2f:04:
                    6b:c1:cd:c8:6a:fa:60:4e:4e:ce:55:36:17:7d:01:
                    53:e6:c9:b8:1f:11:48:9e:8f:2d:76:07:e5:79:c7:
                    88:1f:fd:f2:0f:d5:58:8d:47:53:d8:33:bb:a1:6c:
                    bc:5b:20:75:33:82:83:7f:b4:84:2f:7c:89:db:90:
                    1e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:BE:80:E9:B0:C9:C4:37:C8:C2:0F:6B:82:45:A3:82:9E:29:E0:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c5ebc18d-ecf3-3fb3-8d50-5ecf0a308ce4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:e7:1f:d3:a0:c2:87:02:9d:ad:b6:f4:7b:06:be:e0:3e:0e:
         c5:7f:d3:25:27:26:06:a7:f1:14:f7:12:e4:7e:80:41:f6:76:
         90:03:f2:c3:7b:21:7e:ab:e3:41:31:4b:61:85:f0:bc:02:88:
         bb:df:59:5d:19:13:b1:99:e7:58:8a:71:05:92:dc:85:2d:49:
         3b:e7:d7:8a:65:4d:9a:f6:84:46:48:01:3f:5c:49:5b:9d:55:
         c7:77:78:aa:e2:a4:dc:d6:a4:86:b7:68:4f:67:30:9a:6f:fc:
         c3:79:05:b7:79:ce:6c:8c:c7:b2:f0:d7:1e:f8:be:3f:72:50:
         77:fe:be:97:0b:bb:e3:0a:72:63:53:ff:9c:c5:96:b0:be:9a:
         7e:b0:84:a1:cc:40:69:f7:01:25:02:8a:f7:5e:df:ee:8f:73:
         aa:7f:39:51:d1:46:f1:29:3a:b1:8b:09:91:7b:8e:b5:54:e0:
         8a:f6:c6:5d:3c:01:4b:d3:ff:08:72:0c:a3:3b:84:a7:c8:80:
         db:b5:ef:a6:10:bc:3b:03:ab:ab:dd:23:0e:16:8a:5c:67:3b:
         bd:91:4d:15:44:5b:9e:0e:be:f6:87:c9:69:ef:a1:47:39:8b:
         28:a0:86:6a:c6:6e:93:1a:19:8f:39:5b:2c:84:fd:e9:20:fa:
         3b:64:93:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:09:02 2026 by rpki-client