Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c68ea3b9-0840-39e1-b670-0696b78d9212.roa
File:                     c68ea3b9-0840-39e1-b670-0696b78d9212.roa (raw, json)
Hash identifier:          4CEMlfYRK0p2reOktu6z6WqeAgbjPfUr2NLc+bsgmIo=
Subject key identifier:   AC:2F:C9:84:78:27:1F:FA:89:E0:7E:29:80:D9:BC:98:C3:2E:3F:59
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F268D0361FBFD4718F2BBB700
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c68ea3b9-0840-39e1-b670-0696b78d9212.roa
Signing time:             Sat 12 Sep 2026 13:00:13 +0000
ROA not before:           Sat 12 Sep 2026 13:00:13 +0000
ROA not after:            Fri 11 Dec 2026 14:00:13 +0000
asID:                     23473
IP address blocks:        173.230.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:26:8d:03:61:fb:fd:47:18:f2:bb:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 12 13:00:13 2026 GMT
            Not After : Dec 11 14:00:13 2026 GMT
        Subject: CN=0b44264e-ca5e-4770-aa8c-241f2731847d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a8:6c:01:96:61:2d:d8:90:5b:31:f7:68:86:
                    9f:f2:3b:80:a2:2d:8f:1e:93:2e:82:a1:5d:bc:6f:
                    33:d3:d5:e8:36:45:9a:f5:37:3f:ac:79:7e:16:50:
                    21:df:29:30:68:be:54:68:50:c9:f0:91:3d:c0:63:
                    3b:c1:b4:e2:37:86:e5:04:1b:21:92:2e:b3:0e:cc:
                    21:57:d6:d7:1b:25:d7:da:7f:21:72:cb:69:67:b3:
                    f2:30:7e:3a:e8:78:d2:7a:c3:3f:72:f8:49:53:6d:
                    86:87:76:3e:d7:57:e0:3c:48:01:8e:2b:0f:ba:14:
                    7c:05:9f:88:ba:f2:d3:af:53:c1:ba:59:51:4d:ec:
                    9e:ec:82:07:4d:90:58:e7:80:d4:26:98:4c:4b:59:
                    c8:99:28:3c:ee:b7:56:c2:87:93:72:ec:0c:74:e9:
                    48:db:c5:2b:63:1d:4d:c0:73:01:cc:a7:62:40:ff:
                    5f:7c:46:52:82:e7:99:b7:f6:0c:79:a5:a9:de:58:
                    ad:ba:ff:69:f7:b0:2e:ce:25:a5:c0:1c:c7:1a:3e:
                    0a:61:c1:cd:6e:78:52:5f:06:75:0f:67:e8:e8:e1:
                    a6:f5:a7:87:51:6b:3a:17:dc:96:5c:0c:e9:13:db:
                    eb:36:0d:ac:3c:a5:c5:08:bb:2b:34:5b:19:17:f7:
                    ff:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:2F:C9:84:78:27:1F:FA:89:E0:7E:29:80:D9:BC:98:C3:2E:3F:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c68ea3b9-0840-39e1-b670-0696b78d9212.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.230.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:3e:d6:b8:9a:9a:9a:a1:ef:3d:0b:47:38:42:98:a2:14:a3:
         d1:0e:2b:e4:bc:7a:05:48:23:09:77:47:6b:07:35:b8:f1:5a:
         7d:7b:dc:6e:62:cf:4e:cc:4d:fc:cc:4c:ed:62:2c:8e:fd:fe:
         dc:16:66:8b:de:82:86:59:da:cf:37:76:19:54:34:c0:21:0e:
         5d:50:54:cb:a2:d9:50:1d:15:ce:df:fc:03:c1:52:47:64:33:
         11:a8:cc:34:6e:0d:6e:4d:bb:4d:e4:3c:99:d3:67:82:6d:f4:
         f8:04:34:02:b5:c2:4a:e5:5e:2b:8c:50:2c:4a:2d:35:12:38:
         96:30:25:a4:aa:c5:84:98:e0:8b:3c:4f:27:c4:db:b7:76:54:
         a7:20:70:91:5c:d5:1b:8c:a1:25:62:ff:f1:18:cb:ab:66:7b:
         c8:fd:e9:02:2b:a8:50:de:da:0e:00:ac:c7:37:a5:d0:6e:12:
         d0:cd:96:83:cb:bb:20:6e:10:39:c7:01:d5:ba:be:fb:fd:0e:
         19:89:a1:7d:08:bf:d1:51:ee:5a:71:b8:dd:ab:fa:99:de:b9:
         3c:4b:23:e8:a9:cb:7b:91:73:36:bf:cf:55:32:b7:69:ae:79:
         06:99:0d:26:e1:c3:ca:28:5a:22:45:9b:5f:1d:48:19:fa:dc:
         19:62:eb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:56:25 2026 by rpki-client