Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/fbe6e15a-68b8-38aa-8bdd-a4169dc04da4.roa
File:                     fbe6e15a-68b8-38aa-8bdd-a4169dc04da4.roa (raw, json)
Hash identifier:          mmsnp/toIR6XRWzP0nHBG7ra939c0ULhiXGLtoKavrA=
Subject key identifier:   DB:0C:75:6E:22:4A:54:83:32:1C:94:47:9F:82:1B:C3:64:5C:4B:71
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F4987FFA2BCFA35D70566AE80
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/fbe6e15a-68b8-38aa-8bdd-a4169dc04da4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     23473
IP address blocks:        68.180.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:ff:a2:bc:fa:35:d7:05:66:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=524a1e3f-8662-40c0-b8d9-817f1e3de5ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:57:f6:fc:3e:9f:d3:6d:2f:7e:04:6e:2d:74:
                    d5:62:95:97:fe:09:87:0d:82:62:87:e9:c4:bf:01:
                    65:9e:92:55:e9:74:d3:99:84:d4:2c:85:d1:45:63:
                    fb:ba:e0:0e:31:fd:dc:1b:46:09:d3:6b:b7:a3:6b:
                    ae:bd:9e:15:6a:03:aa:2b:87:61:d3:55:78:99:aa:
                    2a:89:c2:6f:88:21:05:57:dd:5f:c3:bc:42:fd:3b:
                    a7:b2:5e:e6:b7:73:3c:fe:87:8a:4b:df:bd:0a:bc:
                    da:4e:e1:47:52:39:2d:83:f1:20:30:6f:14:16:0a:
                    9e:85:b8:27:0d:0b:a6:d9:7e:81:d5:b7:bc:8b:8d:
                    9f:84:c5:1b:6c:f0:04:dd:79:15:fb:a6:cc:25:56:
                    10:8e:d7:ba:2b:35:75:9c:66:93:47:f4:6f:dc:b1:
                    24:ba:f2:54:62:38:84:63:c7:26:97:93:a2:bd:ea:
                    85:a3:6f:9a:f1:c6:2b:3f:10:8a:e8:0f:53:0a:06:
                    c5:43:53:a1:f0:4b:c0:b0:c9:e2:62:5a:d4:7e:b6:
                    33:7e:83:6a:c5:19:2b:44:f0:b7:03:ca:c0:83:7b:
                    ee:81:0a:67:b6:ac:21:5e:dc:23:05:26:56:9f:38:
                    81:6c:08:1a:cc:22:3d:61:01:f5:35:73:90:53:ae:
                    f8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:0C:75:6E:22:4A:54:83:32:1C:94:47:9F:82:1B:C3:64:5C:4B:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/fbe6e15a-68b8-38aa-8bdd-a4169dc04da4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.180.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:2a:ae:92:53:15:18:c7:94:4d:76:a5:88:11:75:7f:a4:fd:
         7c:16:17:c1:ee:a5:f8:ed:00:9a:d1:aa:83:55:0e:64:55:1c:
         3e:ae:96:d9:a6:36:30:df:35:3e:46:2b:ac:ff:4b:57:6a:fa:
         be:b1:7a:5e:b9:55:4c:9f:e8:86:65:10:6e:cb:bb:62:81:80:
         c8:73:ad:b0:01:f9:d3:07:10:9e:f8:3d:3c:8d:2b:13:e9:ee:
         1d:48:21:dd:ce:b3:ed:e9:b3:0c:24:5b:90:5b:a3:85:5b:63:
         8f:0a:de:f1:4f:9d:84:33:4c:03:2e:fd:bc:ad:98:7d:09:19:
         17:38:30:cf:d8:d1:c1:26:ee:23:04:d9:0a:5a:8a:5f:0f:26:
         2f:b9:5b:26:f4:39:81:bc:53:17:74:5e:0a:35:94:6c:c4:87:
         42:fe:fd:52:2d:37:cc:d2:24:6f:de:2d:31:7d:d3:b8:47:23:
         45:98:03:b5:5d:09:34:ae:49:cb:f2:2f:f7:d9:f4:3d:f3:fc:
         7e:ed:43:d6:43:8f:5d:27:28:bd:12:fb:34:3a:9c:51:d2:bb:
         28:fe:1a:38:91:d0:76:c3:8b:06:5f:be:eb:e3:ef:8e:79:ef:
         de:4a:e3:cf:fa:bf:4b:f6:14:08:f4:f5:9e:2a:af:b6:d7:dc:
         b3:91:89:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:19:49 2026 by rpki-client