Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0b18669b-c974-3d8e-a07c-eb38b258b2c5.roa
File:                     0b18669b-c974-3d8e-a07c-eb38b258b2c5.roa (raw, json)
Hash identifier:          EuCNtMROJQKNjmQulYkFtZgVkTodK+tNifAFf4EDxM0=
Subject key identifier:   F3:03:61:B2:8B:55:E7:E5:A7:6F:F5:E8:28:97:CB:0A:5E:8A:E6:1A
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584EE4234E3A40E3C88F101F1F30
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0b18669b-c974-3d8e-a07c-eb38b258b2c5.roa
Signing time:             Wed 19 Aug 2026 18:03:57 +0000
ROA not before:           Wed 19 Aug 2026 18:03:57 +0000
ROA not after:            Wed 17 Apr 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        20.47.78.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:4e:3a:40:e3:c8:8f:10:1f:1f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Aug 19 18:03:57 2026 GMT
            Not After : Apr 17 04:00:00 2030 GMT
        Subject: CN=378f5a5b-eaf3-482b-927e-c42d37196cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:69:52:46:24:5b:ef:72:bc:8c:b9:57:92:e9:
                    63:e2:1a:dc:1a:ca:05:95:1d:c3:67:2e:36:a1:7a:
                    0c:a1:12:ff:f6:80:a5:6d:66:18:b5:13:0b:4f:68:
                    73:7d:98:9d:00:9b:ea:ed:9c:d5:70:0f:a6:d3:b1:
                    1f:1f:76:9f:42:32:9e:cb:88:ed:b8:ca:9b:6d:82:
                    9d:d0:39:d0:42:8d:cf:60:1e:0e:43:2a:7b:ae:98:
                    c1:5f:52:f9:76:cd:21:4c:4f:0e:62:00:18:e0:f3:
                    3b:b5:50:ef:fc:15:75:bc:66:3f:ee:6c:8a:55:d9:
                    c2:94:89:3e:e2:d1:ba:29:43:82:b0:68:cc:bf:14:
                    69:20:b7:a1:aa:32:35:fa:d9:ad:41:93:47:e7:2d:
                    85:bb:1b:13:7d:d0:bb:41:98:8d:83:18:b5:39:86:
                    cc:14:21:05:c0:9d:bd:66:45:d2:28:66:52:e1:26:
                    88:98:7e:fb:6f:19:36:49:49:df:70:f0:f7:75:bd:
                    a8:d8:d6:a7:b1:23:41:9a:db:6f:1f:66:2a:ea:01:
                    19:d9:35:cc:da:e5:c9:68:35:b2:a8:f7:b9:75:0d:
                    78:cf:a8:43:d1:51:70:eb:9b:4c:ba:77:40:69:4a:
                    70:b3:b0:9b:51:65:13:af:5d:96:95:bd:69:0f:71:
                    dd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:03:61:B2:8B:55:E7:E5:A7:6F:F5:E8:28:97:CB:0A:5E:8A:E6:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/0b18669b-c974-3d8e-a07c-eb38b258b2c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:a3:18:0c:e9:ae:b0:54:73:f8:31:6f:22:97:3a:e5:fb:e8:
         1a:a6:4c:58:25:cf:4d:f6:0b:31:e3:77:e4:b0:8d:45:73:cb:
         72:56:32:fa:6c:e9:5b:67:d8:f2:8c:7b:0f:ce:67:5c:8d:04:
         b2:fe:15:5e:7f:b3:4e:2a:28:f6:30:b1:b5:88:95:9a:ed:d5:
         5f:51:d7:78:93:6b:e4:84:0f:e4:ec:d7:95:48:b5:ec:c4:d7:
         b9:50:c9:c5:12:58:12:c8:23:10:69:78:c6:51:34:f1:9f:05:
         7b:b6:5a:e8:d9:8a:90:6e:89:92:9b:38:61:32:6a:2e:28:72:
         1d:5b:ef:8e:bc:5a:db:8a:ad:7b:6a:d3:0f:17:88:6f:44:b6:
         e3:0e:9e:8b:0a:16:d7:18:ee:dd:89:d7:77:17:7b:bc:c5:50:
         22:d4:ad:fc:0d:a3:9e:e8:98:09:ba:de:aa:13:88:2c:65:a6:
         04:11:ed:de:3e:90:ec:5a:28:e2:03:e8:96:77:7b:56:45:ee:
         71:09:92:aa:64:d5:03:12:1a:b7:f0:24:f4:df:a0:ac:9e:f5:
         46:00:b4:aa:cf:82:ba:c9:59:92:f4:3f:91:21:0a:71:8a:87:
         e8:c3:23:eb:5f:cd:7a:d4:7f:7c:0a:0f:32:cc:44:09:2d:50:
         c0:4e:c5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:33:01 2026 by rpki-client