Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d0c868c-622f-3528-9fd1-29db14f7e967.roa
File:                     7d0c868c-622f-3528-9fd1-29db14f7e967.roa (raw, json)
Hash identifier:          rE3VxYiFXOO9e27T6jIjQyiV33S9HYp15CxvrG+9ids=
Subject key identifier:   99:26:62:50:F0:4D:C9:B8:C0:03:F0:D1:3E:99:F1:6D:7F:BB:88:C0
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584EE7BC9B03F76849D6B9809380
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d0c868c-622f-3528-9fd1-29db14f7e967.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     8069
IP address blocks:        20.153.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:9b:03:f7:68:49:d6:b9:80:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=79bdf6b4-7960-4100-822e-c995fa06d98f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c2:e6:3e:ab:4a:82:33:ae:70:9a:4c:71:62:
                    68:f3:da:f8:e3:af:5d:bd:68:02:a7:c7:95:26:0a:
                    c7:29:1a:84:89:a8:9f:07:f8:ac:e6:2a:15:28:60:
                    82:7e:e2:7f:5d:ed:dc:8a:7b:67:50:59:c3:d1:45:
                    87:eb:fe:8b:b5:5f:46:4c:27:03:0e:03:58:31:be:
                    d9:52:8e:11:96:34:14:88:dc:54:a1:e3:06:ef:be:
                    7f:55:ca:48:1a:d4:ea:80:1f:7b:f2:d0:9d:56:74:
                    e9:e4:b8:a7:3a:a1:ef:f5:c7:cd:c6:e6:99:5e:59:
                    c8:fc:10:ec:1e:cb:91:35:3e:91:bd:ca:e2:73:25:
                    dd:4f:01:d2:2b:02:b5:7b:ff:4e:22:38:63:23:f0:
                    bd:e1:e2:4d:31:f2:4d:21:5b:fc:b8:99:f2:1c:21:
                    ff:4b:f1:4b:66:2e:a2:63:9b:82:4d:c4:dc:bd:0a:
                    15:c4:19:ae:9a:13:48:5e:ef:73:4f:ef:ef:0b:45:
                    27:f1:8b:52:83:6b:ce:0a:fc:6a:1d:d3:b8:a8:d1:
                    3f:47:eb:5e:6a:1b:d2:68:ca:c6:b0:09:b3:78:79:
                    15:81:74:c9:f2:84:2c:b8:07:5b:43:f9:32:86:7d:
                    23:fd:a6:aa:c4:4b:97:4e:d6:4a:17:00:6a:07:9a:
                    1e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:26:62:50:F0:4D:C9:B8:C0:03:F0:D1:3E:99:F1:6D:7F:BB:88:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7d0c868c-622f-3528-9fd1-29db14f7e967.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.153.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:7f:3e:c6:36:8f:bd:ed:fa:1c:48:3c:68:46:37:19:f7:c5:
         7f:1a:ba:e4:65:f8:ce:03:2d:b3:67:7c:14:17:82:5d:87:de:
         42:85:6d:d4:54:23:b3:bf:6f:13:e4:84:18:e5:41:3e:52:2c:
         90:da:fb:fc:91:ab:13:1b:03:00:96:d2:11:ae:76:89:bb:98:
         d1:87:04:ec:1e:e9:e7:87:4c:45:59:15:90:07:ab:bf:00:53:
         8d:76:b4:ed:18:1b:6b:70:a5:f4:07:34:6d:32:e8:61:db:d7:
         49:30:e6:87:91:88:49:1e:97:ce:8c:38:10:1e:c4:b9:aa:5b:
         10:05:30:25:95:f2:09:e8:18:39:31:60:5f:b4:df:bc:9c:48:
         0f:40:85:bf:a1:1f:15:d6:63:6d:a8:e2:4d:46:d2:e2:da:6c:
         8b:12:64:2f:e6:59:1b:02:41:1c:d5:52:45:00:17:36:f5:11:
         c1:1b:24:19:9a:d5:d8:e9:aa:34:42:85:13:18:9e:0a:64:24:
         e3:35:fa:07:0f:23:ee:28:68:61:59:0d:e0:b1:af:90:09:19:
         21:0c:68:bc:81:14:fa:b2:a4:e8:1e:87:97:28:ef:5d:08:aa:
         59:ba:79:39:37:13:8c:3f:e1:9a:96:8a:48:66:d8:dd:b0:fd:
         b9:54:fc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:28:55 2026 by rpki-client