Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8708115-1a7f-3383-b06c-d76c27476028.roa
File:                     c8708115-1a7f-3383-b06c-d76c27476028.roa (raw, json)
Hash identifier:          oJoS+GngdM3UB69f0DjrTv0FDgT6dElOK9FOQbYdGqI=
Subject key identifier:   C4:25:53:21:79:2A:B3:5A:F3:73:36:CE:6F:1B:20:40:E7:50:10:94
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584EE4234F15D2FCF2C3E6EEA000
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8708115-1a7f-3383-b06c-d76c27476028.roa
Signing time:             Wed 19 Aug 2026 18:03:58 +0000
ROA not before:           Wed 19 Aug 2026 18:03:58 +0000
ROA not after:            Sat 23 Mar 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        20.47.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:4f:15:d2:fc:f2:c3:e6:ee:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Aug 19 18:03:58 2026 GMT
            Not After : Mar 23 04:00:00 2030 GMT
        Subject: CN=12e79680-622b-421d-96a0-c2f34a6b5280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d5:b7:15:b3:98:4d:ac:ab:f3:65:ac:0f:ad:
                    1a:2e:c0:9b:de:67:c1:99:44:78:48:8c:b9:a5:65:
                    1c:ae:5a:23:e7:5d:7d:e8:d6:37:d1:5e:86:c0:a0:
                    1b:64:1b:6c:6b:96:05:12:61:3d:7b:f6:2e:f2:5b:
                    a6:62:71:6e:fa:58:d1:53:96:80:7a:16:22:5a:77:
                    a5:2d:78:4f:ba:2f:d4:cd:40:d0:98:68:db:07:ce:
                    70:c5:be:8f:d4:d7:ec:a8:ba:f4:81:e0:49:9f:ae:
                    c0:6f:1b:14:e4:9f:ce:52:93:08:35:56:49:22:09:
                    ee:dd:7a:45:bd:11:3f:c6:dd:1a:08:fe:b9:9d:65:
                    f9:00:d0:e2:83:c9:0d:12:ef:cc:86:51:8b:26:9d:
                    ec:62:06:f5:ad:20:a2:62:cd:bf:2d:2b:75:ef:0f:
                    8e:c5:bd:ad:13:16:d2:c3:5b:3f:88:ef:2b:26:9a:
                    cc:a3:c5:2f:db:41:68:2f:8e:f6:ec:38:cf:1b:11:
                    6a:66:e9:72:5b:f5:60:2e:c1:0b:51:e3:5a:d4:1e:
                    bd:d6:30:9e:41:91:05:c1:4c:b2:c8:1a:4f:5a:11:
                    bc:89:10:73:8c:2b:75:e2:c7:a2:9d:4b:8e:57:8a:
                    25:e9:e1:78:ca:48:d6:13:f3:6e:ea:4d:94:e8:25:
                    0d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:25:53:21:79:2A:B3:5A:F3:73:36:CE:6F:1B:20:40:E7:50:10:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/c8708115-1a7f-3383-b06c-d76c27476028.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:ee:a2:d1:e6:0a:d6:be:b3:cc:bf:00:8a:49:51:73:69:97:
         1d:ed:60:15:4f:f2:4d:c7:5b:9a:25:5e:12:d8:47:6a:39:bd:
         f8:6a:ac:b4:7d:db:b0:a3:54:d3:6d:a3:39:24:42:29:f5:d8:
         26:1d:e9:03:48:00:7c:e9:a5:30:04:ea:7d:9c:11:b1:ce:2b:
         07:c3:99:29:54:13:b1:ce:19:ae:cb:a2:85:c3:05:e0:50:34:
         5a:42:ff:24:9d:08:e8:71:23:76:e0:c3:4d:45:6e:bd:a8:95:
         03:33:2a:8f:17:a8:35:96:5c:92:2b:c0:c1:ab:09:ae:2c:9b:
         05:b7:eb:68:94:cf:cb:58:8e:52:74:a1:a3:5c:ff:d4:05:3c:
         cb:ac:b4:29:c3:71:17:6d:2b:33:10:aa:24:8b:50:7a:33:bf:
         19:8b:e5:bb:05:09:74:65:13:9e:0a:2a:b4:4e:0d:c9:a8:a9:
         91:0b:1f:49:65:87:e9:97:cd:a0:be:54:44:41:01:71:fe:ee:
         49:2a:ad:7b:65:73:20:f6:77:9c:94:d5:1e:5e:be:c3:88:72:
         47:78:8e:29:5d:e5:b9:13:fe:1c:c3:2f:ac:67:5c:cf:0a:ef:
         bb:71:96:d3:a9:b0:19:4d:6f:c7:1d:5e:27:f0:22:f4:c5:82:
         ea:a2:f5:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI08V0vzyw+buoAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI2MDgxOTE4MDM1OFoXDTMwMDMyMzA0MDAwMFowLzEtMCsGA1UEAxMk
MTJlNzk2ODAtNjIyYi00MjFkLTk2YTAtYzJmMzRhNmI1MjgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNW3FbOYTayr82WsD60aLsCb3mfBmUR4SIy5
pWUcrloj51196NY30V6GwKAbZBtsa5YFEmE9e/Yu8lumYnFu+ljRU5aAehYiWnel
LXhPui/UzUDQmGjbB85wxb6P1NfsqLr0geBJn67AbxsU5J/OUpMINVZJIgnu3XpF
vRE/xt0aCP65nWX5ANDig8kNEu/MhlGLJp3sYgb1rSCiYs2/LSt17w+Oxb2tExbS
w1s/iO8rJprMo8Uv20FoL4727DjPGxFqZulyW/VgLsELUeNa1B691jCeQZEFwUyy
yBpPWhG8iRBzjCt14seinUuOV4ol6eF4ykjWE/Nu6k2U6CUNvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMQlUyF5KrNa83M2zm8bIEDnUBCUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYzg3MDgxMTUtMWE3Zi0z
MzgzLWIwNmMtZDc2YzI3NDc2MDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFC8aMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH/uotHmCta+s8y/AIpJUXNplx3tYBVP8k3HW5olXhLYR2o5vfhqrLR9
27CjVNNtozkkQin12CYd6QNIAHzppTAE6n2cEbHOKwfDmSlUE7HOGa7LooXDBeBQ
NFpC/ySdCOhxI3bgw01Fbr2olQMzKo8XqDWWXJIrwMGrCa4smwW362iUz8tYjlJ0
oaNc/9QFPMustCnDcRdtKzMQqiSLUHozvxmL5bsFCXRlE54KKrRODcmoqZELH0ll
h+mXzaC+VERBAXH+7kkqrXtlcyD2d5yU1R5evsOIckd4jild5bkT/hzDL6xnXM8K
77txltOpsBlNb8cdXifwIvTFguqi9SI=
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:15:16 2026 by rpki-client