Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c652187c-caa4-3b20-ab53-cfd0c3d7240a.roa
File:                     c652187c-caa4-3b20-ab53-cfd0c3d7240a.roa (raw, json)
Hash identifier:          kXURaKM7+6pTKP11p1sIMt2/IvYNsItj0nCasHTwNG0=
Subject key identifier:   EE:9C:7C:3D:B4:72:1E:0A:15:6A:73:77:E6:3B:96:82:7C:7F:AC:7D
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584EE423525938AC9FBF5E806E00
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c652187c-caa4-3b20-ab53-cfd0c3d7240a.roa
Signing time:             Wed 19 Aug 2026 18:03:59 +0000
ROA not before:           Wed 19 Aug 2026 18:03:59 +0000
ROA not after:            Tue 19 Mar 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        13.107.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:52:59:38:ac:9f:bf:5e:80:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Aug 19 18:03:59 2026 GMT
            Not After : Mar 19 04:00:00 2030 GMT
        Subject: CN=c6623a33-e455-4494-abdf-3c665ee75723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f4:aa:68:5c:9d:3a:fa:db:e8:7b:bb:63:5b:
                    db:1f:d6:38:45:54:48:ea:84:3c:43:41:fe:cb:61:
                    7c:f9:d2:89:cd:99:b6:3b:97:89:9b:d4:05:ac:19:
                    90:d3:c1:fb:36:d8:15:23:32:d3:90:4a:7a:a2:21:
                    91:12:f1:83:2e:de:7b:da:c6:cc:f8:18:ea:24:d6:
                    56:a1:4f:ce:65:20:35:5e:ae:4d:2c:de:02:5b:41:
                    51:1a:30:77:04:4f:38:c5:32:f4:6e:5c:7d:a5:b0:
                    12:09:27:13:d0:fe:e5:ed:d5:45:94:36:8e:6d:b7:
                    35:14:96:5f:a6:b5:13:09:f2:74:c8:05:3a:93:7f:
                    e2:a4:97:a3:45:d4:76:2a:cf:02:c1:9a:73:bf:f9:
                    20:e4:ff:7e:a3:30:d6:81:31:01:cf:c2:55:b9:b1:
                    14:52:b3:6e:00:98:4e:e2:8a:be:c1:c3:5a:87:bb:
                    45:4e:8c:4a:cf:fd:fc:ae:1f:2a:1c:67:61:84:e2:
                    3c:36:69:32:69:06:ef:c1:ac:40:ee:cc:6e:78:ae:
                    0c:10:db:84:64:6d:95:a2:90:03:b8:16:d9:06:39:
                    de:2e:c9:20:e2:33:53:b1:9a:c3:49:d1:88:f8:f1:
                    26:cf:6c:12:4f:03:55:fe:e5:4b:27:88:c0:28:ea:
                    41:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9C:7C:3D:B4:72:1E:0A:15:6A:73:77:E6:3B:96:82:7C:7F:AC:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c652187c-caa4-3b20-ab53-cfd0c3d7240a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.107.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:62:53:de:0f:6d:55:9a:37:09:3e:1d:eb:19:45:8b:af:52:
         1d:82:1a:d0:32:b7:80:d3:50:cf:c3:37:68:7c:c8:a5:d0:f2:
         dc:ff:0d:aa:ef:51:3a:09:ea:12:c8:88:07:29:67:f0:86:be:
         47:23:03:6e:83:07:fb:a3:f2:fd:a7:11:f7:04:7b:94:ae:ae:
         2c:6a:41:fb:7a:6f:b6:cc:0d:52:d9:98:1d:54:a1:44:38:b3:
         74:3f:73:dc:26:64:da:33:e2:a1:5d:94:19:7b:d1:e9:58:fd:
         3d:6b:6d:07:fd:3f:c1:e3:21:7e:b6:bd:65:36:8e:a0:5b:38:
         31:f2:15:51:0f:df:97:24:2e:6c:16:9a:e8:96:2a:8b:d0:94:
         2c:2a:15:ad:56:3f:6b:ff:ee:b2:be:6b:f1:fb:ed:d0:00:10:
         46:65:40:7c:d1:89:76:60:a8:4d:2f:14:3a:4c:50:4d:6f:a1:
         7c:e0:64:60:d9:4c:b5:c4:9b:cf:f4:f1:e4:78:ab:f8:c2:38:
         ab:d7:0c:af:48:f1:b7:ba:f1:61:a1:ec:dc:01:fd:41:c9:23:
         25:b4:0c:30:04:2c:c2:8f:5f:e3:bd:ff:76:99:ac:d4:ed:81:
         4c:00:e6:b9:d0:ce:82:a4:c1:cf:9a:03:25:c6:69:4b:3a:ef:
         24:34:96:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:23:52 2026 by rpki-client