Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/daed286e-75bf-331e-84a7-47f548fc28ab.roa
File:                     daed286e-75bf-331e-84a7-47f548fc28ab.roa (raw, json)
Hash identifier:          hGAayhnLgi9Nm+9V8LiBDGjX23Yo7/zUKNms2Q7fka4=
Subject key identifier:   F0:97:70:8E:FD:50:CA:65:FB:17:F1:5E:A8:07:13:DF:F0:33:E6:52
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584E5E7A048899BBAB61AB202CC0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/daed286e-75bf-331e-84a7-47f548fc28ab.roa
Signing time:             Thu 02 Jul 2026 21:00:12 +0000
ROA not before:           Thu 02 Jul 2026 21:00:12 +0000
ROA not after:            Wed 30 Sep 2026 21:00:12 +0000
asID:                     23473
IP address blocks:        68.234.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:7a:04:88:99:bb:ab:61:ab:20:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jul  2 21:00:12 2026 GMT
            Not After : Sep 30 21:00:12 2026 GMT
        Subject: CN=a4e687bf-4ad7-43f6-88b1-33b6566a0a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:98:4f:b9:75:07:ce:c4:62:81:b1:8e:f3:95:
                    e8:12:b1:2b:db:5e:54:60:d8:f9:6d:70:5f:a8:a2:
                    60:a9:24:12:56:9d:c7:a2:ee:fb:28:d9:21:d1:d3:
                    ed:c2:a1:fb:05:e6:55:a1:56:e4:a5:15:21:11:e6:
                    47:71:77:b3:c3:7d:d2:31:b2:22:ea:15:f6:24:12:
                    0d:e7:26:ac:ac:58:7b:b7:6f:72:b2:80:9a:dd:08:
                    b4:ea:a1:da:21:22:a0:09:2e:5e:df:4b:d1:fa:5c:
                    7d:44:e1:c3:72:4d:91:e8:4f:40:98:d8:bf:96:ea:
                    9f:5c:cd:3a:d0:c3:22:3b:9b:2f:25:5b:9d:48:c1:
                    53:b3:81:dc:e7:75:3b:39:0d:50:7b:eb:b7:43:fd:
                    f6:a9:8c:bb:da:bb:18:56:e5:ab:59:d9:6e:2e:07:
                    a2:1a:f5:18:dd:83:bb:90:63:6b:f1:4b:5e:ca:80:
                    99:18:12:50:1a:fd:bf:4f:30:d6:b9:22:99:b1:66:
                    8f:d3:04:71:3a:ae:97:84:e7:4f:52:8a:40:e5:5b:
                    c4:f5:41:17:d9:bc:38:a7:71:15:f9:67:b6:8f:d1:
                    0a:3a:12:19:ec:2d:58:44:a7:dc:79:4d:c8:70:49:
                    e1:a7:f3:f9:ef:21:32:a5:d4:3b:db:c9:87:d6:37:
                    a5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:97:70:8E:FD:50:CA:65:FB:17:F1:5E:A8:07:13:DF:F0:33:E6:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/daed286e-75bf-331e-84a7-47f548fc28ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:28:c5:ca:a8:3c:f3:be:6c:45:7c:a7:fc:1d:85:2d:be:af:
         19:f5:6e:41:67:15:1b:80:0e:dd:2b:d9:df:1a:71:25:ed:40:
         f3:18:3d:87:b8:7a:a2:3b:01:21:ab:13:02:21:56:a5:2a:fa:
         7d:22:59:2c:15:13:ca:76:93:48:f5:b9:e2:e6:80:da:08:fc:
         11:ba:ef:da:e9:f5:02:26:6f:36:43:0f:51:87:dd:01:59:f5:
         0f:03:d3:2d:64:d3:0b:68:82:a4:f4:e2:61:94:42:0a:f3:b3:
         5c:18:ab:c1:fd:80:00:cf:60:63:77:1e:80:61:35:05:3e:16:
         ae:7c:e3:58:ba:8d:ed:fd:f6:59:06:22:1c:fc:44:01:09:88:
         51:44:12:8f:69:36:b8:e7:19:bd:e9:e3:8a:73:92:74:0f:2a:
         9c:6b:66:86:c8:26:8f:04:6e:e1:4b:52:8d:80:63:2f:4d:9c:
         42:cf:d2:36:ff:d6:37:88:e2:a0:7f:0e:6e:84:e1:ab:f8:59:
         d4:00:34:b6:a8:d9:54:f1:cd:63:67:d9:a4:be:29:a6:5b:13:
         59:7d:44:1d:c5:6d:78:7b:85:53:1d:68:97:6c:7f:6e:90:cb:
         4a:41:88:6f:6c:30:b3:7e:05:80:08:6c:48:f6:81:b5:81:fb:
         66:21:b0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:08:14 2026 by rpki-client