Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/fbe6e15a-68b8-38aa-8bdd-a4169dc04da4.roa
File:                     fbe6e15a-68b8-38aa-8bdd-a4169dc04da4.roa (raw, json)
Hash identifier:          DX2XqeBwtp7y6Nk8W9mgNg+PCjUZI90nnaX+mXHmW4U=
Subject key identifier:   67:4F:38:66:D1:A7:C5:94:B4:B4:3E:31:F9:93:CD:C5:95:F4:6E:39
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B2C3A6F1AB89116C6FB729640
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/fbe6e15a-68b8-38aa-8bdd-a4169dc04da4.roa
Signing time:             Fri 12 Sep 2025 18:41:00 +0000
ROA not before:           Fri 12 Sep 2025 18:41:00 +0000
ROA not after:            Thu 11 Dec 2025 19:41:00 +0000
asID:                     23473
IP address blocks:        68.180.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:3a:6f:1a:b8:91:16:c6:fb:72:96:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 12 18:41:00 2025 GMT
            Not After : Dec 11 19:41:00 2025 GMT
        Subject: CN=01ce94a5-1b41-444f-ac6e-aa6c583c9109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:dd:17:fd:df:1f:cd:e7:3e:53:bd:29:3e:da:
                    d1:26:41:24:f4:1d:3b:53:59:ee:c7:8a:e6:ce:1b:
                    27:d7:b9:00:4e:1e:9b:af:b2:ec:68:67:4b:45:3a:
                    ae:bd:05:49:62:f6:a0:16:55:bb:2d:1e:19:b7:6f:
                    57:57:89:76:a0:7e:40:53:57:2d:6f:df:29:8b:f8:
                    e5:df:b1:23:a7:10:b9:a7:81:aa:e5:31:31:ce:90:
                    02:e2:b8:db:ea:9d:4c:4f:ee:44:49:b5:fc:c5:ac:
                    f8:03:67:3a:24:c6:3b:96:aa:9e:16:81:de:f9:89:
                    54:6a:3e:df:27:9d:66:11:86:0b:cc:47:83:93:9f:
                    47:92:1b:9f:e8:e7:de:6a:93:16:e1:54:15:be:fd:
                    f8:87:04:1d:04:7d:45:13:7e:8e:53:54:6a:dc:20:
                    3c:fa:6e:fd:7e:67:fb:89:dd:cf:f7:b8:e6:c4:75:
                    5d:06:e6:e1:01:a3:fa:d3:65:bd:b1:bb:1d:9c:00:
                    83:a3:00:ef:59:37:d2:13:6a:fc:c9:ed:93:f9:72:
                    51:9b:a1:57:3e:94:35:a7:fe:0b:d5:d3:56:d5:ef:
                    53:13:39:f6:bd:15:2a:9e:25:56:65:ff:65:0b:6c:
                    48:c3:81:c5:55:22:1f:07:e1:1c:0d:bb:90:ce:c4:
                    41:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4F:38:66:D1:A7:C5:94:B4:B4:3E:31:F9:93:CD:C5:95:F4:6E:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/fbe6e15a-68b8-38aa-8bdd-a4169dc04da4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.180.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:24:3f:4d:ba:10:51:42:08:50:6c:bd:0c:ce:de:a9:3f:0c:
         04:6e:92:86:8b:03:50:c3:12:e1:bc:9f:64:31:30:ec:89:ac:
         30:03:29:39:32:72:f5:41:eb:da:63:93:d7:78:31:bd:65:86:
         cd:a0:f7:98:0b:76:98:81:31:8d:74:cd:2f:32:f6:21:27:19:
         2e:c0:88:65:9f:fd:16:b1:99:e8:a8:c9:38:6f:55:e8:1e:9f:
         3d:f9:71:20:c8:a5:26:b4:7c:a4:80:bd:8f:a4:aa:e0:76:e7:
         19:e7:08:c6:b0:03:7e:f9:30:46:8a:35:ed:24:ef:f1:ae:0b:
         aa:75:f6:36:02:ac:6e:6b:06:23:bd:ba:de:98:7b:a5:06:1d:
         f6:89:64:b5:cc:55:f8:05:c6:11:6f:e7:fc:06:22:48:e5:7a:
         29:7e:8d:b6:ff:13:82:54:94:d0:f9:8a:45:3a:f2:5c:82:81:
         2b:03:5a:64:02:43:e3:1a:0b:01:01:e6:cc:2c:13:31:1d:4f:
         4d:c5:3a:bc:00:4e:9a:60:84:5c:b1:e0:b4:46:a7:30:2b:15:
         d9:5f:c9:64:ec:6d:6c:71:91:85:33:cf:c8:16:85:6b:c4:8d:
         bc:2d:50:f0:c9:b4:9a:87:7a:df:59:0b:ce:9d:4c:0d:d7:39:
         0a:83:cb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:46:35 2025 by rpki-client