Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8e769351-a4a9-3cc3-90c8-6121d56822f5.roa
File:                     8e769351-a4a9-3cc3-90c8-6121d56822f5.roa (raw, json)
Hash identifier:          Lwfj8E8AoocyoqLVLdVPY86YlbJEsRAPwhQhhJGXJHM=
Subject key identifier:   4D:54:25:26:14:71:9C:0F:19:EC:EC:28:CF:A1:8A:F0:BC:E2:55:4A
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584E4129E2DED368C25E8CA305C0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8e769351-a4a9-3cc3-90c8-6121d56822f5.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     8069
IP address blocks:        20.153.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:e2:de:d3:68:c2:5e:8c:a3:05:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=7c1a3be4-5a61-4b4b-9314-337099ce5f32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:00:bd:67:ec:9f:48:89:da:8c:40:a6:31:e4:
                    1e:0e:80:3d:e3:b9:e1:b3:78:d5:c0:fb:4e:b9:a6:
                    19:e9:dd:bb:36:2c:31:aa:bf:eb:2b:31:02:d8:a1:
                    e0:5e:9c:30:f3:33:ae:0f:d9:78:df:5f:4f:c5:ed:
                    27:8c:36:7f:ed:fb:86:bc:cc:ec:5f:64:ee:b4:fa:
                    ef:ea:73:71:b5:41:ba:00:ed:e8:fd:a1:de:4a:86:
                    79:23:7b:69:9c:6f:79:32:91:c3:94:03:32:8e:e2:
                    88:c8:a2:f7:c2:29:03:a8:32:a8:5b:38:ed:45:c9:
                    8f:eb:d9:25:c6:c4:2b:f7:38:ae:26:26:e0:c8:88:
                    e7:92:a8:5b:50:29:db:24:8c:59:83:3e:07:38:1e:
                    15:46:97:95:e9:9b:47:f3:82:66:49:eb:f9:3d:1e:
                    da:d3:95:00:1b:36:1d:b9:67:02:62:b8:e1:71:ce:
                    fe:db:dc:ea:05:bd:d5:5b:6f:12:f6:54:ea:83:17:
                    d1:f7:ff:96:9c:9a:3c:3f:e4:c1:02:86:ff:be:17:
                    1b:89:ae:f6:65:75:e2:2e:c4:8d:dc:c6:ae:05:8e:
                    5f:7c:53:9c:01:ab:af:26:2a:54:cb:07:ff:fb:bf:
                    47:6c:cc:e8:06:05:87:98:26:c4:8b:55:65:de:67:
                    e4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:54:25:26:14:71:9C:0F:19:EC:EC:28:CF:A1:8A:F0:BC:E2:55:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/8e769351-a4a9-3cc3-90c8-6121d56822f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.153.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:cf:5b:5d:27:57:97:87:7b:eb:eb:0e:ae:da:7c:ff:bd:ca:
         09:2d:76:a2:89:49:75:73:5a:d6:d2:d7:d7:89:a1:f8:9c:fc:
         78:46:d6:16:4d:65:cc:1e:9c:53:cc:16:29:31:b0:6c:2f:a8:
         2b:ec:3e:48:ff:23:53:3b:16:b8:a0:33:e1:ea:c6:3b:92:aa:
         fa:fb:f0:5c:d8:10:66:9b:76:ab:ca:19:41:1a:66:9e:d7:2e:
         9e:02:81:c7:7f:8e:f1:0d:1f:53:df:01:71:cd:93:8e:6b:ac:
         47:67:19:70:16:98:a9:0d:a9:0e:4b:b0:b2:e7:6c:78:48:7d:
         92:07:9c:96:96:51:64:db:97:d7:1e:44:ef:e8:e2:9a:bf:3b:
         31:ee:ab:db:9a:97:c6:77:05:52:eb:58:c6:5d:2c:c6:02:3d:
         0e:be:72:c6:a9:ab:ac:0e:1d:fc:b9:82:1b:9a:52:07:35:30:
         15:bb:d4:38:dc:d0:b6:98:3a:cb:27:70:bc:cb:05:c6:5c:d9:
         cf:aa:8d:81:e1:11:b8:72:f5:03:b0:e6:f9:1a:dc:90:2a:54:
         ac:56:b3:4f:fb:80:2b:41:ec:91:7f:64:8b:22:b0:34:bc:d2:
         c0:4b:5c:8d:e3:89:f6:5f:eb:b7:ef:b9:c5:6f:d0:67:c0:52:
         15:24:99:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:07:48 2026 by rpki-client