Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f7d410db-d7ae-3791-9c9c-44c55a2465a0.roa
File:                     f7d410db-d7ae-3791-9c9c-44c55a2465a0.roa (raw, json)
Hash identifier:          dLK9Ave9NibEATvm07YSrbYFV3Bknu8jXmzbPYCB5vc=
Subject key identifier:   AC:A5:A1:24:6C:15:37:D2:63:AD:8C:4F:F9:5A:F9:C3:5F:58:02:59
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584DDD207CD1161B6A7CA8AF2000
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f7d410db-d7ae-3791-9c9c-44c55a2465a0.roa
Signing time:             Sun 17 May 2026 13:00:32 +0000
ROA not before:           Sun 17 May 2026 13:00:32 +0000
ROA not after:            Sat 15 Aug 2026 13:00:32 +0000
asID:                     8069
IP address blocks:        20.33.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:dd:20:7c:d1:16:1b:6a:7c:a8:af:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: May 17 13:00:32 2026 GMT
            Not After : Aug 15 13:00:32 2026 GMT
        Subject: CN=1649876d-0272-4496-8dd2-8bc6a75d9638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:92:25:e0:46:b1:8b:55:01:6c:14:c4:3a:0d:
                    7a:ff:22:28:e1:8b:0c:63:f4:35:5b:a5:9e:42:9e:
                    34:ee:93:c1:35:73:c3:61:d5:dd:6e:ce:f0:7e:c7:
                    92:0f:db:26:c0:98:1b:e0:63:05:f4:03:aa:26:bf:
                    6c:6b:7c:f4:b1:4a:97:40:60:f8:6a:a2:68:d5:26:
                    78:fd:5b:40:f8:85:13:c8:50:60:ea:db:82:e6:0d:
                    93:15:4c:0b:d1:9e:0e:ac:d9:5c:ab:53:36:66:7c:
                    1d:af:27:f0:66:5c:e8:e8:bd:fe:7b:f2:07:62:b2:
                    04:f8:6a:69:d9:b6:1d:c0:b0:db:51:7b:87:fd:12:
                    07:2f:cd:a0:41:a1:d3:c8:ad:ee:26:8d:0b:e8:f0:
                    64:d9:9e:68:f3:85:e8:c7:e6:eb:e4:58:37:3f:0c:
                    9c:b3:3a:9e:47:70:85:08:68:96:84:1f:4c:e5:f2:
                    d5:6c:28:c3:e3:88:c4:e7:b8:a1:1f:40:46:65:68:
                    11:f3:a6:e4:4a:c7:4f:37:2c:f9:aa:41:84:1b:be:
                    3c:40:6e:2e:1f:a1:a0:0d:33:af:36:c2:6b:3c:e8:
                    ff:13:8b:1d:78:ae:43:d5:c7:82:d3:78:fb:38:10:
                    64:05:7f:8f:21:9e:b2:94:83:f4:ce:d7:65:1d:29:
                    5b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A5:A1:24:6C:15:37:D2:63:AD:8C:4F:F9:5A:F9:C3:5F:58:02:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f7d410db-d7ae-3791-9c9c-44c55a2465a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.33.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:fa:1e:6d:90:75:0a:40:00:28:c3:93:fe:42:b0:fc:19:74:
         87:8b:79:13:fd:72:a8:b5:e2:04:01:d9:d1:69:6a:80:9b:91:
         a4:8d:06:24:6c:e2:a8:39:cf:93:31:98:02:85:a3:5b:a8:9f:
         bc:23:5d:3c:8e:be:a2:e9:6c:d2:1a:d6:95:f9:80:f6:8a:45:
         fd:47:d1:6f:64:8a:72:f6:b7:08:8a:7e:5d:80:17:3d:e8:2a:
         db:a7:6a:f2:70:e1:1b:88:fe:2a:5a:0b:35:1d:c4:3d:37:b3:
         c8:7f:e2:05:09:4a:fd:d7:3b:aa:86:37:70:8c:e4:ce:e2:6e:
         08:9f:f3:87:e0:2b:e6:95:12:0a:7c:26:8a:d0:08:85:ce:06:
         ef:e4:e0:93:ea:c7:69:e7:02:bc:2a:22:70:64:da:ee:cc:92:
         8f:16:1c:f2:42:83:d3:78:d2:31:a4:3a:28:83:4d:17:6a:df:
         cb:f0:a6:7c:05:51:b2:b6:94:57:a8:2f:df:31:69:6d:24:8c:
         43:2d:b4:76:78:24:ef:b1:78:4a:a8:e2:ef:75:ae:0d:e3:9d:
         b0:c0:99:2e:eb:b2:31:ba:90:a8:e3:85:f9:4f:e3:b9:c2:2d:
         a4:65:54:e8:e1:85:3b:3c:78:45:bf:b8:6a:c0:94:0d:1d:0a:
         69:ce:ae:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:46:40 2026 by rpki-client