Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/82fbdc3f-c87d-3405-8de1-8b7281435450.roa
File:                     82fbdc3f-c87d-3405-8de1-8b7281435450.roa (raw, json)
Hash identifier:          MeiofLwHLkXuxm0cEvRJbtBUjag1mVC4qO2VVkZYHmA=
Subject key identifier:   C3:6B:BF:60:97:9E:B8:1A:B1:5D:2E:E4:F1:21:91:03:6E:BB:96:B2
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B3748BA1FBE1E6E538E887BC0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/82fbdc3f-c87d-3405-8de1-8b7281435450.roa
Signing time:             Tue 16 Sep 2025 17:43:42 +0000
ROA not before:           Tue 16 Sep 2025 17:43:42 +0000
ROA not after:            Mon 15 Dec 2025 18:43:42 +0000
asID:                     23473
IP address blocks:        68.234.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:37:48:ba:1f:be:1e:6e:53:8e:88:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 16 17:43:42 2025 GMT
            Not After : Dec 15 18:43:42 2025 GMT
        Subject: CN=151dabb4-da61-4348-b4f5-865df2ff017d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5f:3f:b7:0d:34:bb:23:85:17:dd:3b:a1:64:
                    1c:85:9b:8c:38:52:fd:24:e0:e8:5d:1b:36:71:b9:
                    91:c0:5e:a5:f4:2b:4d:46:9e:b6:4d:84:d5:1e:f4:
                    d4:98:62:07:66:bc:e2:c0:4c:69:88:87:ea:48:6a:
                    ad:a2:26:9a:5c:f1:b1:af:46:ab:31:ff:42:87:65:
                    d0:b7:4e:d2:0f:0f:9c:84:a8:79:f1:99:7a:77:e3:
                    db:7d:c4:95:cc:c7:76:81:bb:9a:1a:f4:1a:4a:65:
                    4c:d7:61:cc:0e:2c:f9:d1:4b:63:8c:08:25:20:d2:
                    ee:27:f6:06:f2:2b:ad:cc:07:8a:08:d3:95:c1:b2:
                    d9:18:11:7a:3e:bb:e3:30:7d:f3:80:09:b3:e6:40:
                    a4:b7:63:e8:60:9a:92:09:b6:4e:ca:e8:61:6c:e2:
                    75:b3:66:47:79:3d:f6:40:8e:bb:4f:4b:1c:47:90:
                    44:02:3a:13:ab:e1:ed:a7:93:8b:b0:08:29:ed:7a:
                    7b:97:e4:aa:58:4f:03:ba:ef:a8:e6:b5:ee:5e:15:
                    b1:87:86:5f:74:a8:e5:a5:95:12:90:2a:4e:09:e0:
                    b7:db:39:2e:05:bb:26:f0:84:99:ec:19:cf:24:88:
                    d6:67:51:6b:26:a8:dc:e4:ae:73:3f:ee:56:85:0b:
                    7f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6B:BF:60:97:9E:B8:1A:B1:5D:2E:E4:F1:21:91:03:6E:BB:96:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/82fbdc3f-c87d-3405-8de1-8b7281435450.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:c6:62:d6:dc:43:97:ea:24:1b:10:8b:a2:b6:10:8e:01:e9:
         15:4a:b7:eb:bd:98:88:c6:da:2a:36:2d:96:f4:73:14:e0:47:
         38:df:d7:83:c8:62:ca:30:c2:2e:c7:4b:f2:c1:78:66:cb:ef:
         48:c8:3a:20:74:94:df:be:89:6e:b8:07:36:7f:e5:4f:f2:c7:
         44:0e:f8:de:a1:a2:b3:2b:8c:bd:f5:bc:e5:09:94:36:b5:a6:
         29:b6:d2:e8:1a:14:a4:d4:db:83:f5:d3:3a:2a:05:27:e5:12:
         de:77:5d:25:25:6e:72:93:c3:f5:f0:1d:4e:89:c3:42:6c:7e:
         ba:f0:62:5e:95:b8:40:f2:0c:79:4a:6d:a1:74:e6:af:5c:8b:
         e1:54:7a:25:eb:84:ee:9e:1e:cd:d6:32:80:9b:6e:60:f0:68:
         18:18:73:ac:61:6a:51:95:96:d9:3f:c3:24:69:58:85:b5:ef:
         46:be:ad:be:29:4e:9f:9d:ab:11:95:1d:11:d1:51:4a:21:bb:
         91:94:6e:5f:43:34:38:21:51:9c:57:02:4e:a4:94:0a:54:a5:
         0d:22:c4:bb:81:da:7e:36:2e:63:7e:2e:10:93:5e:37:cf:27:
         ee:4a:4b:06:e4:d6:c1:10:d4:e8:02:15:29:49:8b:41:bd:e0:
         a1:7d:55:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:49:25 2025 by rpki-client