Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d9013276-9143-3cce-bb26-b33513f6c9aa.roa
File:                     d9013276-9143-3cce-bb26-b33513f6c9aa.roa (raw, json)
Hash identifier:          /9D1pGiFaMsTI+2Bl4tqbsJ5hdmCvffZdfVk5VpRUpY=
Subject key identifier:   65:5C:65:5E:2A:DA:D2:EE:70:24:FE:EC:5C:7F:BA:75:B8:B2:A2:7A
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584EE4234DB11D403E225CC67300
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d9013276-9143-3cce-bb26-b33513f6c9aa.roa
Signing time:             Wed 19 Aug 2026 18:03:57 +0000
ROA not before:           Wed 19 Aug 2026 18:03:57 +0000
ROA not after:            Sun 17 Mar 2030 04:00:00 +0000
asID:                     8069
IP address blocks:        20.47.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:4d:b1:1d:40:3e:22:5c:c6:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Aug 19 18:03:57 2026 GMT
            Not After : Mar 17 04:00:00 2030 GMT
        Subject: CN=81bcd95c-c46d-4f2d-b99b-0fb69cbd2ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f9:c1:da:dc:ba:d9:54:e8:b6:1b:c6:e9:24:
                    0a:ea:e9:16:6a:eb:36:4f:65:27:f5:2f:de:ae:0b:
                    05:60:6d:1d:38:49:d2:38:8a:dd:c5:3c:33:78:30:
                    d9:7f:74:be:59:29:1d:3f:f7:fb:29:76:2f:1a:77:
                    1d:81:b0:29:34:d5:03:4b:5f:40:40:7e:36:1c:d2:
                    59:c8:41:c0:3d:14:36:b7:23:56:70:ee:ac:0f:5d:
                    59:4d:0f:39:8d:70:35:cd:d9:54:ab:a3:d0:19:39:
                    0e:72:06:ba:06:59:b9:b3:61:7f:5e:ca:15:20:db:
                    7c:41:14:3c:b7:a0:4b:f8:a4:b6:06:d8:be:4b:03:
                    bd:e4:b8:39:41:7c:88:63:4a:f7:48:d6:b4:8a:1c:
                    95:e0:68:f2:7d:7a:3d:ed:81:fe:08:89:54:58:ec:
                    b5:97:4c:f4:8f:e8:a8:3c:3e:03:42:05:2e:de:3c:
                    0c:8e:5d:c6:47:d4:b6:cc:b3:9d:1d:64:7f:0c:29:
                    a8:64:81:bb:57:fc:d7:a2:ca:00:54:ce:2b:64:5c:
                    e2:af:df:d4:81:e9:fc:b5:5f:79:f4:35:41:e2:e3:
                    e3:85:60:3e:44:9a:47:14:f9:12:9f:cd:31:7a:18:
                    9a:51:df:d4:ab:d7:14:52:c1:55:46:30:7e:b6:6d:
                    ae:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:5C:65:5E:2A:DA:D2:EE:70:24:FE:EC:5C:7F:BA:75:B8:B2:A2:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/d9013276-9143-3cce-bb26-b33513f6c9aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.47.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:67:57:ea:5e:74:36:15:c7:3e:18:e2:97:75:df:33:1d:4e:
         d3:dc:7c:df:f4:d4:5c:34:ac:10:f5:24:5b:dd:70:dd:c8:b9:
         da:85:c0:4a:a5:28:8e:ae:f8:9c:a3:98:02:74:9c:d0:13:5f:
         53:6c:12:18:75:30:8d:14:14:6c:f7:08:13:10:49:7c:d1:6a:
         4b:17:72:b5:b9:15:4f:50:41:36:c9:fe:14:cd:74:c7:4c:f7:
         40:6b:db:fd:5b:aa:c8:ef:67:fe:aa:3e:89:c6:a0:0d:06:7e:
         55:4e:ac:8b:35:ee:e1:5d:c9:6b:4b:ca:43:87:71:93:eb:ae:
         a8:43:81:3f:40:46:a8:71:2d:53:fd:d2:3d:7b:1a:8b:e5:d5:
         41:e1:c3:95:3d:68:14:d1:1f:e3:d3:b6:df:3d:51:8c:98:dd:
         e2:d9:8b:2e:eb:21:71:ed:2a:d9:16:e3:b0:aa:06:9a:bc:0a:
         dc:4b:b6:8d:50:f8:a3:1a:6a:b0:29:9e:ea:0d:32:91:a6:62:
         47:af:10:4c:62:04:17:31:75:77:22:c8:a0:97:11:0f:ed:59:
         33:7d:ce:9a:e0:75:5f:d7:b3:c5:51:eb:9d:dc:46:bd:d3:74:
         ee:7e:64:82:da:23:da:24:bb:ef:1b:c6:4f:d1:fb:b1:93:42:
         22:3d:80:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:24:41 2026 by rpki-client