Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/43d8c0d4-87d7-3cd8-add5-ffa769c7b77a.roa
File:                     43d8c0d4-87d7-3cd8-add5-ffa769c7b77a.roa (raw, json)
Hash identifier:          EQzXmxxiLi/swiBFo8XygWby+k4PdKUCAKh3X0tkTd0=
Subject key identifier:   3E:EA:AD:5F:1B:82:95:B6:BE:92:64:FA:BA:44:54:C6:64:65:A0:18
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B3744E64FF81C86D37F364180
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/43d8c0d4-87d7-3cd8-add5-ffa769c7b77a.roa
Signing time:             Tue 16 Sep 2025 17:35:59 +0000
ROA not before:           Tue 16 Sep 2025 17:35:59 +0000
ROA not after:            Mon 15 Dec 2025 18:35:59 +0000
asID:                     23473
IP address blocks:        68.234.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:37:44:e6:4f:f8:1c:86:d3:7f:36:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 16 17:35:59 2025 GMT
            Not After : Dec 15 18:35:59 2025 GMT
        Subject: CN=02973eda-a67c-4356-8cd9-72e2a6e9dfee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bf:f4:b8:ba:5c:3d:4f:30:32:f5:cd:a0:d9:
                    9f:31:d7:ed:16:4d:e9:e0:08:52:dc:ce:e4:7b:47:
                    5d:65:47:d9:44:7d:0c:fe:10:48:59:71:1b:02:a4:
                    e4:cd:23:cb:2b:f7:9b:62:f1:6a:b7:d1:e9:0f:c1:
                    d0:e5:ec:d2:91:b9:56:0d:15:51:73:c0:fc:97:7d:
                    90:34:93:9b:cb:7b:33:1b:71:48:87:74:44:ec:61:
                    84:f2:5e:97:a4:8e:6b:30:a0:7c:6a:a2:6d:45:1a:
                    a8:ac:d4:3f:95:10:81:ba:56:e4:59:cd:06:9f:e9:
                    75:31:eb:86:3f:11:67:b4:ab:37:5b:90:0d:a7:a5:
                    fc:55:0f:9b:8a:b4:56:8e:82:9f:4b:a2:78:91:cf:
                    99:6b:83:46:3e:85:af:d1:bc:de:3b:b5:28:3c:94:
                    c4:da:d6:18:18:bd:bb:a2:b0:c2:41:69:a6:20:11:
                    ae:45:dc:a4:b8:19:4d:0a:94:26:1c:b2:85:74:c4:
                    68:d2:df:fa:d4:6b:a9:f7:80:b5:45:3c:63:89:d4:
                    81:ac:73:da:90:e9:c6:cb:dd:6b:0c:81:a2:8c:a7:
                    44:20:7c:7e:28:e1:57:e2:46:69:5f:08:7e:2a:44:
                    7f:ff:9f:66:99:cd:3d:f1:e7:a3:08:39:2e:0e:2d:
                    c5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:EA:AD:5F:1B:82:95:B6:BE:92:64:FA:BA:44:54:C6:64:65:A0:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/43d8c0d4-87d7-3cd8-add5-ffa769c7b77a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:93:91:cf:8b:f6:8a:17:ed:b2:1a:c6:c1:e4:a0:46:31:ab:
         24:df:a6:9f:b8:f7:71:dc:13:f1:bd:5f:d8:6f:c4:6f:48:72:
         02:92:f0:96:b1:60:8f:b1:14:4f:41:db:63:e0:74:fd:dc:64:
         4f:2b:bc:ad:bb:44:c2:49:08:a5:8c:c1:eb:89:d5:96:1c:72:
         c4:0c:c0:eb:7d:9b:04:ec:e2:8b:0f:0c:40:62:54:6c:7f:88:
         f3:a2:8f:89:47:87:eb:7a:c7:dd:18:3e:ef:89:0c:2d:24:8b:
         08:5c:fb:4a:11:7d:5d:55:74:79:30:34:c2:dd:e8:22:88:b8:
         a0:07:3b:7c:eb:93:32:16:46:a4:5e:30:88:cb:e4:1a:12:a6:
         db:b2:19:b0:dc:1e:09:1b:9c:5f:52:db:61:4b:b8:18:70:1f:
         33:ff:05:ac:ec:ac:88:2a:d3:5a:bb:53:d3:96:c4:61:5f:be:
         87:0b:bf:b0:36:ec:13:68:03:0b:17:3c:78:7e:33:d8:79:0b:
         94:0d:70:eb:c9:4b:8b:dd:14:41:1d:1b:54:50:40:92:46:10:
         af:b1:78:4a:ec:2e:32:bf:f9:d9:7b:ab:27:51:f7:51:e9:27:
         25:0a:e1:4d:94:5f:2b:3c:a1:01:b2:28:76:d1:a6:1b:9a:3d:
         06:59:a5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:58:31 2025 by rpki-client