Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5cfd208c-3447-33ac-a83b-5ebd857159a4.roa
File:                     5cfd208c-3447-33ac-a83b-5ebd857159a4.roa (raw, json)
Hash identifier:          HtX+cvHDtLybh/ZJoXTZw93bYqUi67iVVyXAEGWCXaY=
Subject key identifier:   99:DF:BB:85:1B:D7:02:DE:02:41:13:A1:21:E4:D8:4B:0A:02:DA:3B
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F63F8090A630D1027FEC3A680
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5cfd208c-3447-33ac-a83b-5ebd857159a4.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     23473
IP address blocks:        173.230.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:09:0a:63:0d:10:27:fe:c3:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=4dba8c26-3415-41cc-9fd0-bff84ce5c4eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:78:0a:a9:6e:39:4f:20:22:d0:7e:0f:3e:39:
                    98:cf:0b:8a:2f:b7:ef:c8:c4:c9:8c:bc:78:b6:94:
                    d1:75:1a:22:77:8c:fd:48:46:6a:df:d1:48:3f:89:
                    7e:aa:a6:09:92:b5:19:0a:96:b4:89:44:74:f8:b6:
                    a3:47:a5:8d:5a:15:98:8a:09:46:7a:c1:b8:13:a7:
                    0c:05:ca:29:46:92:49:6f:47:f8:f4:56:95:63:4a:
                    90:b6:d6:6a:bf:a7:82:13:20:0c:f4:96:34:ef:a2:
                    9d:83:e2:f6:fa:a3:93:8c:c7:66:57:bf:a0:a1:f9:
                    aa:99:84:dc:9d:7a:56:8c:ab:90:7f:29:86:fd:0f:
                    2d:f6:f0:2d:82:ff:3a:9a:a5:6b:9a:21:04:1e:9f:
                    a8:57:32:35:ba:63:2a:4a:bb:b4:2a:cb:2b:cf:f2:
                    a3:31:b9:c5:db:a2:d4:13:36:52:05:ee:22:fd:d8:
                    94:29:93:04:b9:8f:62:5b:95:e6:81:df:b9:69:05:
                    66:58:d4:16:02:4a:5c:a8:7a:9c:ce:ea:6a:8d:c8:
                    ed:25:e4:42:f0:d6:76:35:40:62:f9:0f:cf:4c:2b:
                    dc:62:cc:dd:dd:e8:61:f7:7d:e1:75:78:c5:b9:ab:
                    59:a5:b5:95:2d:02:d2:c7:fb:4f:ea:38:af:79:8d:
                    19:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:DF:BB:85:1B:D7:02:DE:02:41:13:A1:21:E4:D8:4B:0A:02:DA:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5cfd208c-3447-33ac-a83b-5ebd857159a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.230.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:1a:42:ef:b5:5d:bf:19:e1:20:ba:a9:66:bc:e5:7a:bf:64:
         dd:ee:0e:78:39:39:c4:65:1c:71:d4:e3:0b:f8:ce:a2:fd:2d:
         32:5d:7d:88:43:bb:b1:b8:9b:39:ce:67:82:96:43:68:04:76:
         56:b4:1a:e2:ec:e6:6d:c9:19:91:86:50:f9:ea:5b:15:b8:2e:
         48:3a:0a:73:54:79:bd:26:e9:83:db:91:79:f6:cd:cd:24:f2:
         cb:2a:e3:b5:3e:7b:84:3a:13:c0:ce:74:84:b5:4a:38:6a:bf:
         d6:9d:a0:ab:d8:8c:81:a7:a2:95:6a:b8:65:cc:8d:44:91:17:
         85:e5:a9:c2:06:d9:b0:e2:b6:23:a2:21:2c:4b:75:cd:40:4a:
         9c:8d:22:f1:17:da:f2:79:69:6e:fd:e0:90:6a:84:76:c5:12:
         47:06:af:7c:0a:ab:77:15:bd:8d:1f:09:3d:82:51:f1:48:0f:
         7d:2c:3c:66:c6:9c:82:be:63:99:55:47:5c:a7:75:5d:ee:95:
         9d:16:cb:a9:7d:3a:9b:8d:cb:b3:f3:13:76:2f:35:18:ef:70:
         03:15:f5:fb:49:6b:54:f2:46:b0:0d:08:e6:6d:32:29:76:17:
         d7:79:85:47:5a:17:f7:b2:c4:44:8f:9b:6a:77:2f:e1:c5:32:
         35:64:e2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:17:48 2026 by rpki-client