Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/00eea044-6ad7-3a0c-973b-d64ebd3acf7e.roa
File:                     00eea044-6ad7-3a0c-973b-d64ebd3acf7e.roa (raw, json)
Hash identifier:          MkuA4ZMdjbCBmD7r+L+JMhu0fun44Br9uKOFEs4VRhQ=
Subject key identifier:   C3:6A:BB:E0:54:92:5F:02:CA:8B:09:F4:82:A3:FD:93:B2:F7:90:90
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B49F89ED14B63CA429AAE76A0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/00eea044-6ad7-3a0c-973b-d64ebd3acf7e.roa
Signing time:             Tue 23 Sep 2025 10:22:39 +0000
ROA not before:           Tue 23 Sep 2025 10:22:39 +0000
ROA not after:            Mon 22 Dec 2025 11:22:39 +0000
asID:                     23473
IP address blocks:        68.234.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:49:f8:9e:d1:4b:63:ca:42:9a:ae:76:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 23 10:22:39 2025 GMT
            Not After : Dec 22 11:22:39 2025 GMT
        Subject: CN=966aaef4-cbd0-4c5e-bd05-7b030f7a3318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:64:6f:7b:bd:5a:a9:6e:48:b0:16:c1:8b:73:
                    d4:69:24:0d:13:e1:3d:69:3f:23:e7:fa:b9:25:b6:
                    a5:a3:a7:66:ce:e9:1e:b5:9b:5c:1b:bb:d0:a2:53:
                    44:26:d5:d6:2e:1e:1c:6f:bd:1c:81:6f:16:b9:18:
                    4b:14:ec:5f:03:f0:36:4f:b0:54:82:2a:02:c1:06:
                    0e:9a:ad:04:70:70:05:b6:25:24:27:fe:93:e4:57:
                    53:ac:b0:a6:42:8f:e0:80:d4:57:33:50:51:34:ff:
                    cd:12:4a:df:ad:12:1b:6a:c0:b0:1e:b0:e9:02:ba:
                    d9:01:8c:ae:9e:11:5c:7e:19:70:07:d7:2c:ab:ac:
                    bf:e3:45:31:6a:f5:38:ff:81:41:3f:ec:ce:46:ae:
                    86:56:53:19:62:91:c4:07:36:7e:b8:aa:5b:3d:a4:
                    fa:74:e7:d7:b8:32:0a:af:cf:28:c9:04:b8:d8:2e:
                    f2:e8:39:79:0e:a4:2f:94:2b:fc:42:99:7e:84:0e:
                    6e:7e:e8:f0:15:79:57:20:45:59:fd:5d:3b:4b:32:
                    59:b2:3c:09:8d:d1:ea:71:3c:6c:c8:07:56:d6:18:
                    3c:58:68:ae:4e:82:a2:3b:3f:a3:fe:50:8d:7d:6b:
                    77:3e:69:42:d8:88:69:91:23:8f:c2:fe:16:3f:c5:
                    18:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6A:BB:E0:54:92:5F:02:CA:8B:09:F4:82:A3:FD:93:B2:F7:90:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/00eea044-6ad7-3a0c-973b-d64ebd3acf7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:90:c8:c9:40:65:8c:15:2d:e2:78:08:89:a6:5d:91:f0:0e:
         34:11:90:e0:63:c2:7b:33:aa:30:08:10:8f:c8:3b:c5:3a:ce:
         f5:05:07:ba:fd:45:d3:d8:06:dd:b0:df:9c:6f:74:84:4b:c1:
         50:4c:a5:37:1a:50:ad:38:8f:a2:c0:ea:3b:6f:53:fa:fb:9e:
         64:d0:30:67:4d:5a:8d:1a:84:da:d1:74:d2:92:a7:4f:4c:20:
         cf:a0:69:c9:7a:26:b6:95:4d:c6:b0:51:ff:5a:c2:be:de:31:
         bc:23:99:d2:16:53:05:71:73:f2:3b:64:ad:c7:b3:22:ba:0d:
         83:b1:d3:eb:22:5e:98:1a:0a:a7:86:c6:24:3c:40:32:63:ac:
         8b:e5:bb:7e:96:95:5a:61:f1:e5:d0:40:e9:ac:7e:2e:c5:7b:
         f4:f6:d4:9f:26:2d:f7:0e:4b:a9:23:44:a9:2a:38:0f:7b:6a:
         eb:53:1f:9f:d0:73:12:e1:ab:f0:de:c1:67:4f:79:ce:55:c7:
         8a:90:c3:c1:79:c9:37:fa:35:9d:32:7d:af:2e:fc:00:56:8a:
         ee:c9:e1:a3:f4:7f:01:65:49:53:9d:ea:0b:eb:c8:ad:b9:9a:
         32:9d:39:ac:50:f8:de:69:f5:14:34:ce:d3:5e:76:90:b6:40:
         1d:5b:41:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtJ+J7RS2PKQpqudqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI1MDkyMzEwMjIzOVoXDTI1MTIyMjExMjIzOVowLzEtMCsGA1UEAxMk
OTY2YWFlZjQtY2JkMC00YzVlLWJkMDUtN2IwMzBmN2EzMzE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2Rve71aqW5IsBbBi3PUaSQNE+E9aT8j5/q5
Jbalo6dmzuketZtcG7vQolNEJtXWLh4cb70cgW8WuRhLFOxfA/A2T7BUgioCwQYO
mq0EcHAFtiUkJ/6T5FdTrLCmQo/ggNRXM1BRNP/NEkrfrRIbasCwHrDpArrZAYyu
nhFcfhlwB9csq6y/40UxavU4/4FBP+zORq6GVlMZYpHEBzZ+uKpbPaT6dOfXuDIK
r88oyQS42C7y6Dl5DqQvlCv8Qpl+hA5ufujwFXlXIEVZ/V07SzJZsjwJjdHqcTxs
yAdW1hg8WGiuToKiOz+j/lCNfWt3PmlC2IhpkSOPwv4WP8UY1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMNqu+BUkl8CyosJ9IKj/ZOy95CQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMDBlZWEwNDQtNmFkNy0z
YTBjLTk3M2ItZDY0ZWJkM2FjZjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROr7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGGQyMlAZYwVLeJ4CImmXZHwDjQRkOBjwnszqjAIEI/IO8U6zvUFB7r9
RdPYBt2w35xvdIRLwVBMpTcaUK04j6LA6jtvU/r7nmTQMGdNWo0ahNrRdNKSp09M
IM+gacl6JraVTcawUf9awr7eMbwjmdIWUwVxc/I7ZK3HsyK6DYOx0+siXpgaCqeG
xiQ8QDJjrIvlu36WlVph8eXQQOmsfi7Fe/T21J8mLfcOS6kjRKkqOA97autTH5/Q
cxLhq/DewWdPec5Vx4qQw8F5yTf6NZ0yfa8u/ABWiu7J4aP0fwFlSVOd6gvryK25
mjKdOaxQ+N5p9RQ0ztNedpC2QB1bQa4=
-----END CERTIFICATE-----
Generated at Fri Oct 10 03:58:34 2025 by rpki-client