Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/9c23a28d-939d-344b-9816-02b592813f56.roa
File:                     9c23a28d-939d-344b-9816-02b592813f56.roa (raw, json)
Hash identifier:          FL/NUjzarf0a54cKTtRHUQtE/L1cXW3o0ovnVF1xZqc=
Subject key identifier:   BA:D6:F8:53:3B:AC:9F:85:84:39:95:10:9A:2B:A6:B0:C3:F4:45:38
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B23FE75A26F896904391DD780
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/9c23a28d-939d-344b-9816-02b592813f56.roa
Signing time:             Tue 09 Sep 2025 19:53:42 +0000
ROA not before:           Tue 09 Sep 2025 19:53:42 +0000
ROA not after:            Mon 08 Dec 2025 20:53:42 +0000
asID:                     23473
IP address blocks:        68.180.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:fe:75:a2:6f:89:69:04:39:1d:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep  9 19:53:42 2025 GMT
            Not After : Dec  8 20:53:42 2025 GMT
        Subject: CN=9d055390-5779-4d3c-a80d-0a4ff0c77cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5e:b6:b6:10:6a:c8:c3:47:6e:4e:70:c8:de:
                    85:fc:d4:d8:f9:d5:58:92:d5:7b:30:13:2c:f2:51:
                    5d:4f:c4:b5:a9:c9:cc:a4:c1:48:2f:8d:a0:a9:bd:
                    e1:9d:b5:2c:c8:9d:8c:ba:22:0a:2c:af:00:f3:1e:
                    45:f4:33:03:33:07:ef:5e:24:fe:83:b0:b1:ed:fc:
                    2c:d3:f8:98:bd:86:c4:0e:a7:55:d3:0e:5a:5c:59:
                    74:fa:43:e4:57:ec:db:4f:aa:72:7e:ab:b9:c3:2f:
                    1b:9e:b7:93:07:cb:a8:d4:95:65:d0:70:ed:39:0c:
                    73:fb:fc:ba:ba:a6:b7:9a:22:30:a1:d0:fa:dd:96:
                    35:80:e0:ab:07:31:68:99:43:8c:04:47:a7:02:11:
                    9b:a7:c7:5b:2f:7c:1c:67:99:13:3b:f5:24:22:5f:
                    5b:18:cd:28:f3:a9:ba:1c:65:a0:e5:91:3a:ae:c8:
                    e5:db:64:85:25:4e:9b:58:74:fc:68:95:50:5d:f2:
                    a3:a4:0b:c3:7a:50:ab:da:8e:5e:47:58:9e:05:3b:
                    3e:94:31:8a:f7:13:98:ca:e8:e5:32:34:eb:79:bd:
                    6a:72:51:7f:f1:d4:11:d6:94:ba:66:a4:7a:5a:38:
                    a9:b6:08:93:9e:f0:23:3c:5a:b8:80:06:a1:8b:c4:
                    bd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D6:F8:53:3B:AC:9F:85:84:39:95:10:9A:2B:A6:B0:C3:F4:45:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/9c23a28d-939d-344b-9816-02b592813f56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.180.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:79:52:5f:1e:5f:7c:f4:19:be:c0:14:52:13:9a:f3:15:4f:
         ed:03:3a:92:ee:0a:c8:ca:a8:1c:ec:8e:fb:8e:8b:ea:e8:94:
         e2:5e:14:68:60:5d:1b:26:20:62:1b:2d:fb:30:45:55:4c:2e:
         55:54:37:43:1f:e5:1b:ee:c7:d4:17:8c:f3:40:97:bc:52:44:
         fe:58:de:23:c3:47:6c:ea:c0:c5:10:39:1e:31:74:88:3c:7c:
         22:4c:c6:bc:62:d0:90:a9:42:ad:4a:55:09:22:10:d4:d0:08:
         dd:b5:99:5d:c8:27:eb:e7:92:94:63:66:5e:b2:2a:66:45:a1:
         46:df:05:10:52:95:30:87:e0:c8:f4:55:ca:ce:3f:c7:f5:09:
         46:14:79:d1:8d:23:40:9f:26:8f:0d:7b:63:3a:da:ba:70:12:
         75:20:3f:e5:80:0a:3c:bd:5b:95:fa:4b:60:9e:16:bd:d1:f6:
         90:9c:d0:22:d1:62:a7:44:25:dc:59:31:19:6b:7c:e4:cc:c3:
         0f:2b:b8:17:4e:65:4a:ac:27:68:ed:de:19:f3:3c:a1:78:66:
         47:ac:98:07:06:68:95:65:e3:9c:0f:fe:10:8b:e7:98:de:d7:
         c8:c4:dc:91:40:94:97:e7:f6:8b:f7:e8:b3:e2:c3:0d:d5:c4:
         81:2a:ef:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:46:39 2025 by rpki-client