Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2799286e-a51a-3044-bd67-9ee123f7108f.roa
File:                     2799286e-a51a-3044-bd67-9ee123f7108f.roa (raw, json)
Hash identifier:          p1uu2G8kzPotYxfX7Tk5t+CgcbHxUiBhQ7pDPsybRtI=
Subject key identifier:   0D:88:E6:C0:86:3C:01:E1:03:D5:DC:DC:41:75:07:BA:85:F5:6A:75
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584E86F4F3B2FA787AF894FBC700
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2799286e-a51a-3044-bd67-9ee123f7108f.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     8069
IP address blocks:        20.153.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:f3:b2:fa:78:7a:f8:94:fb:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=4f18bc3d-8dad-4be7-94ba-b56c5102c2b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f5:50:da:bb:2b:b4:59:ba:80:51:81:f1:ef:
                    b0:14:29:e5:7b:37:89:96:2f:08:ce:fe:82:50:3d:
                    39:f6:80:cf:24:ca:70:61:16:c4:85:d1:4b:56:fe:
                    35:a5:08:9e:77:35:71:3e:b9:8f:f7:ac:5b:35:47:
                    59:03:ac:48:4e:ad:fb:60:ec:cd:f0:fb:e8:f4:c4:
                    5c:a0:12:ba:8d:4b:ea:52:9d:8c:73:6e:5f:92:cc:
                    8f:54:3c:30:a4:1e:b0:e4:61:84:22:c3:e9:87:60:
                    ea:32:db:2f:da:11:85:7c:49:e2:74:b1:a9:18:9e:
                    e2:30:13:9c:a2:f2:62:b1:75:fd:f2:41:a5:4d:10:
                    d9:30:0b:2d:99:aa:69:fd:8d:a0:8c:16:bd:e9:1f:
                    0c:82:f4:02:eb:52:b3:9c:be:04:b2:77:2d:8c:39:
                    df:6a:7d:5c:ab:ad:ea:a1:28:e8:93:6c:0d:94:50:
                    7e:06:6b:86:2a:08:ec:7b:6f:9f:df:e1:27:f2:86:
                    ca:c5:76:9c:7d:f1:f1:42:60:21:06:30:a5:a0:f4:
                    88:1e:ea:06:a0:6c:5d:f7:e1:f4:e8:90:95:e9:24:
                    a0:25:66:c7:c9:95:6f:a2:09:a6:d2:8a:61:c5:e8:
                    89:a9:a1:ef:a3:8d:71:c8:43:95:ff:a8:c5:52:0e:
                    bc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:88:E6:C0:86:3C:01:E1:03:D5:DC:DC:41:75:07:BA:85:F5:6A:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2799286e-a51a-3044-bd67-9ee123f7108f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.153.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:3c:57:dc:b3:75:8a:15:20:b5:5c:ac:9f:a2:1c:dc:9c:1f:
         4a:09:ba:55:2a:f9:e3:af:96:73:db:43:1a:bc:3c:d2:f0:59:
         1b:d5:6a:b8:8b:ab:83:f2:a2:0c:6b:49:3b:5b:af:af:a0:96:
         aa:c2:15:a1:6b:01:f8:da:ac:11:a0:1f:1d:76:10:be:56:8b:
         6c:39:39:d8:92:52:f8:b7:f7:23:84:41:f6:c9:dd:98:4f:fc:
         14:ff:18:f9:99:d3:55:1a:67:ed:3c:16:0a:e5:aa:9f:ed:f4:
         1e:73:c8:b1:92:99:dc:27:5b:7d:ff:5e:ec:da:d5:19:e6:86:
         9a:17:45:60:40:5d:bb:6f:8a:f8:89:94:b2:2f:10:1e:7a:12:
         9d:fb:e7:d3:31:8a:d4:d2:e9:51:c1:d2:73:75:83:e4:ff:a6:
         f7:9b:4b:b3:b6:e1:7e:29:7c:6c:e4:b5:f9:5d:3f:66:8d:c4:
         68:4e:dc:c6:3f:b5:85:c3:3d:ae:c9:7c:0e:9e:cb:77:07:5a:
         fa:ec:0f:a1:b5:76:da:30:ce:21:f0:0b:35:06:42:da:f4:0c:
         ba:17:b6:c5:4f:83:bf:62:ba:62:cb:f6:21:b9:68:c4:c1:19:
         89:2f:39:b2:cc:b8:bc:3b:a2:2e:2f:da:a9:f1:02:9a:36:09:
         5a:81:b4:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9POy+nh6+JT7xwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk
NGYxOGJjM2QtOGRhZC00YmU3LTk0YmEtYjU2YzUxMDJjMmI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfVQ2rsrtFm6gFGB8e+wFCnlezeJli8Izv6C
UD059oDPJMpwYRbEhdFLVv41pQiedzVxPrmP96xbNUdZA6xITq37YOzN8Pvo9MRc
oBK6jUvqUp2Mc25fksyPVDwwpB6w5GGEIsPph2DqMtsv2hGFfEnidLGpGJ7iMBOc
ovJisXX98kGlTRDZMAstmapp/Y2gjBa96R8MgvQC61KznL4EsnctjDnfan1cq63q
oSjok2wNlFB+BmuGKgjse2+f3+En8obKxXacffHxQmAhBjCloPSIHuoGoGxd9+H0
6JCV6SSgJWbHyZVvogmm0ophxeiJqaHvo41xyEOV/6jFUg68kQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA2I5sCGPAHhA9Xc3EF1B7qF9Wp1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjc5OTI4NmUtYTUxYS0z
MDQ0LWJkNjctOWVlMTIzZjcxMDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJn7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHo8V9yzdYoVILVcrJ+iHNycH0oJulUq+eOvlnPbQxq8PNLwWRvVariL
q4PyogxrSTtbr6+glqrCFaFrAfjarBGgHx12EL5Wi2w5OdiSUvi39yOEQfbJ3ZhP
/BT/GPmZ01UaZ+08Fgrlqp/t9B5zyLGSmdwnW33/Xuza1RnmhpoXRWBAXbtviviJ
lLIvEB56Ep3759MxitTS6VHB0nN1g+T/pvebS7O24X4pfGzktfldP2aNxGhO3MY/
tYXDPa7JfA6ey3cHWvrsD6G1dtowziHwCzUGQtr0DLoXtsVPg79iumLL9iG5aMTB
GYkvObLMuLw7oi4v2qnxApo2CVqBtGA=
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:08:05 2026 by rpki-client