Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f6b26e11-b4ad-39f9-891c-9f1a7c01ed39.roa
File:                     f6b26e11-b4ad-39f9-891c-9f1a7c01ed39.roa (raw, json)
Hash identifier:          8d/4X0qB8vORQ7L/U2yRZk1R3Y8M6tz5bLaXzFiboHI=
Subject key identifier:   06:28:B6:0D:64:05:4D:60:28:32:28:F3:B5:B7:2C:32:B0:3C:23:C5
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B344D673E769742560B311138
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f6b26e11-b4ad-39f9-891c-9f1a7c01ed39.roa
Signing time:             Mon 15 Sep 2025 16:05:42 +0000
ROA not before:           Mon 15 Sep 2025 16:05:42 +0000
ROA not after:            Sun 14 Dec 2025 17:05:42 +0000
asID:                     23473
IP address blocks:        68.234.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:34:4d:67:3e:76:97:42:56:0b:31:11:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 15 16:05:42 2025 GMT
            Not After : Dec 14 17:05:42 2025 GMT
        Subject: CN=8985dade-c1ac-4736-a43a-7a419dd4256e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:85:0e:24:f0:77:59:f8:8b:cc:5c:ae:4f:d9:
                    af:53:cd:9d:9e:32:7a:88:e2:95:57:af:5e:1e:43:
                    bd:a4:3c:3c:12:89:56:07:ee:0a:36:f8:14:08:fb:
                    9d:58:8d:11:c0:75:62:46:c6:15:17:cb:e4:00:7b:
                    c1:d2:28:34:f9:94:f9:64:ab:76:65:5a:cc:6b:34:
                    53:7d:59:2f:8c:12:e2:f9:06:4b:41:3a:d8:23:e5:
                    89:65:a2:a3:98:56:a1:df:29:9f:93:85:c1:04:ef:
                    02:27:03:06:2e:d9:ab:08:33:c5:d2:f9:63:8f:44:
                    d5:20:6f:01:42:e4:a2:89:22:ae:10:a5:8d:fe:74:
                    a6:6a:b2:7c:46:4a:ad:f7:df:5a:b5:77:14:49:66:
                    0f:46:2d:94:c9:34:e0:95:68:f4:4b:a1:30:a0:1f:
                    d8:67:ee:95:23:a3:0e:74:4a:b3:2d:b3:9d:9d:96:
                    5f:bf:a7:64:49:59:31:9a:3c:6d:94:5d:31:dc:0f:
                    ab:b0:49:e3:6b:12:06:65:ed:84:2c:3c:27:49:87:
                    ee:b2:e3:06:c2:82:b5:4d:57:0c:2c:97:b1:c2:c0:
                    0c:23:4d:b8:da:4a:18:82:4b:49:38:6a:07:45:e8:
                    6c:f8:4c:0f:6d:22:ad:bf:f6:84:48:98:5d:2c:40:
                    e9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:28:B6:0D:64:05:4D:60:28:32:28:F3:B5:B7:2C:32:B0:3C:23:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f6b26e11-b4ad-39f9-891c-9f1a7c01ed39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:a8:6b:42:92:b6:ea:58:ce:4c:34:bd:55:99:cc:82:d6:59:
         df:a6:3e:73:d4:57:11:c2:12:b1:e7:69:12:e7:5d:a5:1e:c0:
         cf:3b:62:57:25:9b:ad:95:86:3d:7b:3f:65:ce:7e:49:4d:e7:
         25:6a:46:e2:63:fe:97:23:a6:1c:8f:c3:ce:4b:48:e8:84:d1:
         1d:c4:e8:93:51:22:13:2d:08:88:b8:1a:bc:55:eb:fc:b3:91:
         1e:84:6e:7d:d4:9b:63:76:82:84:23:60:57:cf:2f:d6:78:d8:
         3f:12:2f:1d:36:e7:f3:7b:42:ca:8d:80:b1:76:c6:df:7d:09:
         fb:ab:96:b9:fb:2f:8d:ae:c6:91:24:77:17:e5:0b:32:17:2f:
         92:6e:58:d8:ba:5c:f3:4f:e4:35:ab:b0:b8:82:e8:07:f7:10:
         9a:16:d2:06:e4:1f:01:6b:6d:0c:6e:51:b4:ba:b5:af:dd:81:
         c9:17:da:13:11:25:d0:60:39:5a:9c:6a:b4:b2:c7:ec:5a:35:
         d2:d5:48:6a:93:f7:d3:96:63:12:ba:8b:5b:1d:60:c7:86:2b:
         78:f8:22:21:87:28:0c:1f:be:19:12:c4:ec:7d:e3:98:94:45:
         11:db:41:91:4b:5d:f9:12:7b:82:e8:b4:b9:cd:f8:97:99:f4:
         57:3f:ec:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs0TWc+dpdCVgsxETgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI1MDkxNTE2MDU0MloXDTI1MTIxNDE3MDU0MlowLzEtMCsGA1UEAxMk
ODk4NWRhZGUtYzFhYy00NzM2LWE0M2EtN2E0MTlkZDQyNTZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYUOJPB3WfiLzFyuT9mvU82dnjJ6iOKVV69e
HkO9pDw8EolWB+4KNvgUCPudWI0RwHViRsYVF8vkAHvB0ig0+ZT5ZKt2ZVrMazRT
fVkvjBLi+QZLQTrYI+WJZaKjmFah3ymfk4XBBO8CJwMGLtmrCDPF0vljj0TVIG8B
QuSiiSKuEKWN/nSmarJ8Rkqt999atXcUSWYPRi2UyTTglWj0S6EwoB/YZ+6VI6MO
dEqzLbOdnZZfv6dkSVkxmjxtlF0x3A+rsEnjaxIGZe2ELDwnSYfusuMGwoK1TVcM
LJexwsAMI0242koYgktJOGoHRehs+EwPbSKtv/aESJhdLEDpnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAYotg1kBU1gKDIo87W3LDKwPCPFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZjZiMjZlMTEtYjRhZC0z
OWY5LTg5MWMtOWYxYTdjMDFlZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROqqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACCoa0KStupYzkw0vVWZzILWWd+mPnPUVxHCErHnaRLnXaUewM87Ylcl
m62Vhj17P2XOfklN5yVqRuJj/pcjphyPw85LSOiE0R3E6JNRIhMtCIi4GrxV6/yz
kR6Ebn3Um2N2goQjYFfPL9Z42D8SLx025/N7QsqNgLF2xt99Cfurlrn7L42uxpEk
dxflCzIXL5JuWNi6XPNP5DWrsLiC6Af3EJoW0gbkHwFrbQxuUbS6ta/dgckX2hMR
JdBgOVqcarSyx+xaNdLVSGqT99OWYxK6i1sdYMeGK3j4IiGHKAwfvhkSxOx945iU
RRHbQZFLXfkSe4LotLnN+JeZ9Fc/7GE=
-----END CERTIFICATE-----
Generated at Fri Oct 10 03:58:29 2025 by rpki-client