Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d8bb990d-52eb-3c01-8871-7bfe44c7edae.roa
File:                     d8bb990d-52eb-3c01-8871-7bfe44c7edae.roa (raw, json)
Hash identifier:          /24iIquNJvXddOB8nHBZ70lZsAPlIMEuzTQtDyE0G2g=
Subject key identifier:   25:0E:99:C7:6A:A2:6B:B1:FE:DA:54:F0:FA:5E:06:47:61:21:2D:16
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584EE42352E59D0C9B7A2539AC00
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d8bb990d-52eb-3c01-8871-7bfe44c7edae.roa
Signing time:             Wed 19 Aug 2026 18:03:59 +0000
ROA not before:           Wed 19 Aug 2026 18:03:59 +0000
ROA not after:            Sat 16 Mar 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        204.14.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:52:e5:9d:0c:9b:7a:25:39:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Aug 19 18:03:59 2026 GMT
            Not After : Mar 16 04:00:00 2030 GMT
        Subject: CN=d1f8f941-9093-45d1-ac1b-1d888442cfca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2c:66:e6:7b:ad:b9:4f:c3:e7:59:af:5c:ed:
                    99:c1:79:38:f3:82:af:ec:c8:a3:90:5b:a8:ac:7b:
                    ad:e4:82:e7:05:38:c8:c5:f3:71:91:8f:1c:5b:fc:
                    19:6f:52:39:08:85:5c:92:69:cb:62:56:53:b0:a8:
                    d8:67:67:5c:ce:66:dc:3e:75:73:07:46:40:7e:66:
                    a2:a9:c2:02:c5:80:d0:16:ec:4c:0a:fb:44:7e:35:
                    86:ad:9f:50:a9:8f:1d:9a:cb:d4:13:d7:a6:9a:87:
                    0b:41:97:64:e5:98:ec:94:ac:8e:d1:e4:a7:30:d7:
                    26:c4:9a:6c:03:03:0a:f3:82:ed:0b:b3:5c:a0:f1:
                    f4:21:8d:96:b7:3c:43:f8:3a:29:8e:d2:03:cb:a5:
                    99:34:45:4f:97:f9:c8:a5:eb:23:e0:f8:19:6e:92:
                    e7:8a:a3:66:42:01:a6:47:47:5d:cf:f0:30:ff:6f:
                    39:3f:8a:88:6f:c5:5f:e0:27:52:24:89:5c:9a:45:
                    0f:c1:63:46:00:6f:fe:3e:49:6d:19:1b:c6:1d:36:
                    38:26:01:82:a0:08:75:c0:65:ae:57:43:72:85:a7:
                    0d:ca:e3:22:24:9c:e5:bf:07:a3:8f:7b:15:7d:68:
                    3a:0c:0f:64:21:54:f5:a2:8d:cc:6b:f8:91:e0:07:
                    83:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0E:99:C7:6A:A2:6B:B1:FE:DA:54:F0:FA:5E:06:47:61:21:2D:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d8bb990d-52eb-3c01-8871-7bfe44c7edae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:e1:dd:79:1f:3e:79:fc:f6:11:ae:eb:a0:12:19:a1:05:a7:
         80:74:3c:84:9f:7e:51:f8:6f:ce:38:0a:ad:53:31:34:49:b0:
         65:7f:04:b3:0e:75:63:a0:8f:52:33:79:d7:b5:47:83:69:ff:
         65:d2:09:25:7a:74:6c:94:ab:95:53:ce:cd:bb:5c:07:0b:03:
         65:72:c7:19:39:28:c0:56:97:a0:de:b7:57:64:e3:54:34:50:
         1c:0c:4b:b6:50:cc:75:44:88:23:29:36:64:7d:29:07:ef:3a:
         ad:a7:e4:a7:b5:73:69:d6:ef:a0:e8:93:2d:6c:1c:42:5e:17:
         27:18:02:e5:a7:68:84:d7:ed:2f:70:e3:8b:3d:6f:8d:cc:21:
         9d:f3:ec:e3:8a:f3:56:49:5c:35:54:a3:a4:f1:82:07:87:78:
         86:24:9c:0c:b8:95:bf:76:ac:17:d9:52:57:70:4f:31:5a:9f:
         1f:f3:e3:19:2e:69:ab:38:dd:d4:e1:b8:ad:f4:1a:1f:da:18:
         cf:bc:e0:2a:0a:8d:41:85:77:f5:51:e6:14:97:7e:e4:2b:18:
         42:f6:39:8e:41:49:15:d3:bf:85:5d:f6:93:f1:e7:69:cc:53:
         6c:01:b6:ea:61:23:d9:06:29:71:37:8e:d5:18:77:2e:41:0b:
         6f:e9:9f:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI1LlnQybeiU5rAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI2MDgxOTE4MDM1OVoXDTMwMDMxNjA0MDAwMFowLzEtMCsGA1UEAxMk
ZDFmOGY5NDEtOTA5My00NWQxLWFjMWItMWQ4ODg0NDJjZmNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSxm5nutuU/D51mvXO2ZwXk484Kv7MijkFuo
rHut5ILnBTjIxfNxkY8cW/wZb1I5CIVckmnLYlZTsKjYZ2dczmbcPnVzB0ZAfmai
qcICxYDQFuxMCvtEfjWGrZ9QqY8dmsvUE9emmocLQZdk5ZjslKyO0eSnMNcmxJps
AwMK84LtC7NcoPH0IY2WtzxD+DopjtIDy6WZNEVPl/nIpesj4PgZbpLniqNmQgGm
R0ddz/Aw/285P4qIb8Vf4CdSJIlcmkUPwWNGAG/+PkltGRvGHTY4JgGCoAh1wGWu
V0NyhacNyuMiJJzlvwejj3sVfWg6DA9kIVT1oo3Ma/iR4AeDRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCUOmcdqomux/tpU8PpeBkdhIS0WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZDhiYjk5MGQtNTJlYi0z
YzAxLTg4NzEtN2JmZTQ0YzdlZGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzA60MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABPh3XkfPnn89hGu66ASGaEFp4B0PISfflH4b844Cq1TMTRJsGV/BLMO
dWOgj1Izede1R4Np/2XSCSV6dGyUq5VTzs27XAcLA2Vyxxk5KMBWl6Det1dk41Q0
UBwMS7ZQzHVEiCMpNmR9KQfvOq2n5Ke1c2nW76Doky1sHEJeFycYAuWnaITX7S9w
44s9b43MIZ3z7OOK81ZJXDVUo6TxggeHeIYknAy4lb92rBfZUldwTzFanx/z4xku
aas43dThuK30Gh/aGM+84CoKjUGFd/VR5hSXfuQrGEL2OY5BSRXTv4Vd9pPx52nM
U2wBtuphI9kGKXE3jtUYdy5BC2/pn44=
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:09:33 2026 by rpki-client