Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/802a3d67-b4cf-360a-9782-f041ac6fe51b.roa
File:                     802a3d67-b4cf-360a-9782-f041ac6fe51b.roa (raw, json)
Hash identifier:          oQwR6ZMB+xuy6T6N4zMqhb7QLYURkIv0HmW2HEBazGI=
Subject key identifier:   0F:85:93:C9:6F:6B:ED:ED:CF:8C:A0:C1:7C:00:94:49:44:66:4E:35
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B2C3B039C4906E8DCDACB9600
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/802a3d67-b4cf-360a-9782-f041ac6fe51b.roa
Signing time:             Fri 12 Sep 2025 18:42:10 +0000
ROA not before:           Fri 12 Sep 2025 18:42:10 +0000
ROA not after:            Thu 11 Dec 2025 19:42:10 +0000
asID:                     23473
IP address blocks:        68.180.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:3b:03:9c:49:06:e8:dc:da:cb:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 12 18:42:10 2025 GMT
            Not After : Dec 11 19:42:10 2025 GMT
        Subject: CN=4c364533-aa0c-4218-b097-f89e63f1989c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:92:1b:69:8e:f9:6e:d0:a3:6a:47:93:55:78:
                    d3:71:86:b0:23:7d:eb:31:60:d7:4d:4d:68:0a:6f:
                    ba:cb:cd:76:78:25:2d:d3:29:7f:d3:77:39:5d:c9:
                    80:b0:4d:9e:d9:bc:8c:3c:5a:bb:93:bc:18:23:86:
                    f1:30:32:50:6d:84:8a:0d:2b:69:da:5f:d9:37:c5:
                    82:0f:da:c2:87:7f:53:49:cf:12:c8:25:7d:3c:7c:
                    ae:9a:19:d7:cb:c2:df:77:31:0b:6a:ba:02:53:91:
                    06:d1:11:a2:48:ae:07:ab:6d:5e:7f:7c:db:5c:a1:
                    76:bf:55:c5:b4:0f:fa:00:d4:a4:7f:0a:15:12:30:
                    02:d7:13:67:33:bb:4a:4a:9b:74:a1:49:8b:99:07:
                    ee:f3:b7:f1:ca:97:42:a9:d9:d2:e4:ab:ac:83:ff:
                    45:30:e6:5f:8d:7c:fc:47:55:5c:ce:2c:54:fd:0b:
                    ce:24:fa:5b:93:4f:6b:1c:9b:f1:9d:2b:89:e6:ea:
                    cb:ff:e7:c8:15:30:ae:2e:44:8f:cb:54:f6:a2:4f:
                    b8:af:aa:5e:16:4b:41:55:b4:96:20:f4:a9:51:fb:
                    3e:3e:04:72:8a:57:96:c2:c5:c6:a1:e8:f5:0b:6f:
                    cd:d4:fe:00:8e:a5:8a:17:c4:52:69:5e:6b:13:e0:
                    3d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:85:93:C9:6F:6B:ED:ED:CF:8C:A0:C1:7C:00:94:49:44:66:4E:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/802a3d67-b4cf-360a-9782-f041ac6fe51b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.180.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:9f:51:c9:35:44:f5:12:16:19:c7:39:40:40:43:ab:6f:a0:
         14:30:58:84:78:d3:a7:bf:3f:7f:ac:69:da:a8:87:c3:28:64:
         c1:bc:f4:9c:03:23:93:d0:f8:ad:48:52:5c:b2:56:e3:7a:b3:
         35:9a:f3:8f:d9:7e:6b:22:5d:ef:45:4a:88:b8:ff:a2:af:18:
         a2:08:58:ed:3f:7d:87:fe:fc:54:89:fd:a6:ed:10:22:d4:09:
         53:87:51:a1:67:55:02:32:c3:5e:c5:1c:30:72:dd:72:93:dd:
         53:41:12:06:ce:a7:f3:18:a1:9e:72:32:b0:08:cb:33:02:a2:
         ab:4a:a8:32:ba:01:39:05:b4:00:82:28:c6:11:77:1d:57:55:
         ff:0d:db:88:a9:b1:bb:22:bf:2e:a8:c0:9a:87:13:34:33:5f:
         3a:de:66:98:70:98:a9:68:17:66:95:67:60:48:7d:66:2d:55:
         fa:9a:37:98:5e:c4:fd:f3:f7:ea:ec:32:f6:e7:a8:8c:05:3c:
         3a:9a:bf:06:15:38:29:e6:49:53:73:00:05:4a:8b:92:9b:b4:
         c5:32:37:65:c8:0e:aa:93:eb:2a:d3:ea:73:30:77:0d:23:54:
         71:df:16:21:02:9b:a2:9b:63:0a:60:8e:c7:26:e0:ba:9c:e3:
         b5:56:d1:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEssOwOcSQbo3NrLlgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI1MDkxMjE4NDIxMFoXDTI1MTIxMTE5NDIxMFowLzEtMCsGA1UEAxMk
NGMzNjQ1MzMtYWEwYy00MjE4LWIwOTctZjg5ZTYzZjE5ODljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pIbaY75btCjakeTVXjTcYawI33rMWDXTU1o
Cm+6y812eCUt0yl/03c5XcmAsE2e2byMPFq7k7wYI4bxMDJQbYSKDStp2l/ZN8WC
D9rCh39TSc8SyCV9PHyumhnXy8LfdzELaroCU5EG0RGiSK4Hq21ef3zbXKF2v1XF
tA/6ANSkfwoVEjAC1xNnM7tKSpt0oUmLmQfu87fxypdCqdnS5Kusg/9FMOZfjXz8
R1VczixU/QvOJPpbk09rHJvxnSuJ5urL/+fIFTCuLkSPy1T2ok+4r6peFktBVbSW
IPSpUfs+PgRyileWwsXGoej1C2/N1P4AjqWKF8RSaV5rE+A9IQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA+Fk8lva+3tz4ygwXwAlElEZk41MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvODAyYTNkNjctYjRjZi0z
NjBhLTk3ODItZjA0MWFjNmZlNTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARLR/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADifUck1RPUSFhnHOUBAQ6tvoBQwWIR406e/P3+sadqoh8MoZMG89JwD
I5PQ+K1IUlyyVuN6szWa84/ZfmsiXe9FSoi4/6KvGKIIWO0/fYf+/FSJ/abtECLU
CVOHUaFnVQIyw17FHDBy3XKT3VNBEgbOp/MYoZ5yMrAIyzMCoqtKqDK6ATkFtACC
KMYRdx1XVf8N24ipsbsivy6owJqHEzQzXzreZphwmKloF2aVZ2BIfWYtVfqaN5he
xP3z9+rsMvbnqIwFPDqavwYVOCnmSVNzAAVKi5KbtMUyN2XIDqqT6yrT6nMwdw0j
VHHfFiECm6KbYwpgjscm4Lqc47VW0dc=
-----END CERTIFICATE-----
Generated at Fri Oct 10 03:58:26 2025 by rpki-client