Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e794736c-e567-3e33-9613-3ca6fdffe5e0.roa
File:                     e794736c-e567-3e33-9613-3ca6fdffe5e0.roa (raw, json)
Hash identifier:          Xgi3QPUGWiY5gfaGxuZCry3i3upIAOp3likc5WKixmo=
Subject key identifier:   2F:7F:BA:7A:D2:4D:7E:8E:38:88:98:3A:6E:8F:D2:58:15:F0:24:4A
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584EA788C00995D6DB0824129300
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e794736c-e567-3e33-9613-3ca6fdffe5e0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     8069
IP address blocks:        20.33.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:c0:09:95:d6:db:08:24:12:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e15b5f6f-1c3a-4550-a550-dafe7f4c01fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:31:89:89:b8:fb:a6:d1:96:66:dc:8d:4b:de:
                    0c:7d:12:80:6d:e1:10:c4:d3:42:44:5e:54:19:97:
                    12:ae:72:80:c4:1e:bc:a5:a1:c0:46:8a:6c:36:d3:
                    c4:64:cb:33:5a:31:59:63:ad:b7:16:9b:6b:f3:d4:
                    c5:de:28:a6:14:3b:18:e6:22:66:ca:90:53:ff:e2:
                    94:e7:b7:c1:1e:e4:1c:c4:6a:f4:96:b5:03:58:4c:
                    ea:a0:4f:2c:3a:9a:bb:ab:fc:86:ed:c7:6a:62:95:
                    73:ba:99:0c:54:ed:c6:1d:79:4c:7e:a5:df:d1:fe:
                    e5:e8:b7:aa:91:97:6c:2a:cb:06:e4:6f:7d:83:43:
                    5f:8d:01:8b:5c:6c:83:77:21:0b:a2:bd:6f:5d:4f:
                    67:44:74:d6:13:9e:65:1f:5e:cc:92:b5:77:27:db:
                    b5:c5:f9:24:2f:8c:43:de:20:45:16:d0:ea:a2:8a:
                    a2:ab:96:9c:e6:78:a6:d4:53:25:cc:c1:e1:1d:8c:
                    2b:25:f1:fe:53:57:e5:58:e5:57:47:f9:0c:0e:4f:
                    34:0c:e9:69:be:f2:2f:4c:c3:00:eb:4f:52:54:08:
                    5d:97:03:03:f6:4a:ba:08:f5:94:d5:74:3d:41:0f:
                    92:f5:5e:db:60:2b:e4:fb:fd:32:d1:48:44:77:a0:
                    7e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:7F:BA:7A:D2:4D:7E:8E:38:88:98:3A:6E:8F:D2:58:15:F0:24:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e794736c-e567-3e33-9613-3ca6fdffe5e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.33.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:a4:07:69:a2:99:ff:eb:63:10:98:8f:43:a3:e3:43:8e:e9:
         f1:97:de:27:68:0a:86:9f:e4:60:23:d4:3a:a5:c2:b7:20:d6:
         67:fe:b6:39:aa:ff:cc:5c:a8:67:81:02:4b:c0:a4:1a:c4:f6:
         07:45:84:5f:18:30:a9:84:6b:e1:9c:da:6d:b0:8c:20:2c:81:
         d1:40:41:1d:48:9f:f9:72:f3:51:9e:63:54:4a:7d:a4:6a:d4:
         93:98:a7:5e:40:af:5a:55:9e:1e:7f:df:ed:cb:24:30:9e:4d:
         a5:0f:40:45:1e:aa:f5:67:e6:5a:24:45:c0:1c:97:98:2a:34:
         4a:60:c0:c0:75:04:71:ad:c3:84:8d:54:24:f7:79:4d:f0:f8:
         75:5b:11:54:82:1c:35:93:a7:cc:c4:a2:19:07:94:74:15:bc:
         a3:eb:52:da:9a:8d:97:87:65:84:e6:a9:5d:b1:35:f7:03:69:
         c1:5d:8c:a2:6c:b9:c2:bb:36:d5:78:2f:41:57:01:9b:b0:60:
         5e:5c:84:8c:fd:8c:64:62:14:6d:74:af:e1:fe:35:b3:55:10:
         65:44:df:63:38:5f:e4:25:0a:98:6c:91:5c:eb:ef:33:b6:cf:
         0f:1b:5a:4b:f2:c8:37:40:88:3f:ef:a0:c8:0e:61:e1:0a:75:
         21:5c:54:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:03:43 2026 by rpki-client