Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/312f2e5f-b35c-3eea-a603-29052d85ef87.roa
File:                     312f2e5f-b35c-3eea-a603-29052d85ef87.roa (raw, json)
Hash identifier:          GG9EnCU02elnXlvmYl6DbHEDD04L2f8+eVtF8R+OJ7A=
Subject key identifier:   32:0C:3B:90:61:C7:A1:17:CC:7B:7A:A5:2E:87:AD:23:47:DE:F7:24
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584B52E9A7E42A8140CEC3DF8D00
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/312f2e5f-b35c-3eea-a603-29052d85ef87.roa
Signing time:             Fri 26 Sep 2025 15:14:46 +0000
ROA not before:           Fri 26 Sep 2025 15:14:46 +0000
ROA not after:            Thu 25 Dec 2025 16:14:46 +0000
asID:                     8069
IP address blocks:        20.153.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:e9:a7:e4:2a:81:40:ce:c3:df:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Sep 26 15:14:46 2025 GMT
            Not After : Dec 25 16:14:46 2025 GMT
        Subject: CN=6b1ad4a0-2c8a-4448-a2d1-84b4430ccd6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cd:c4:84:75:bd:f7:4a:4a:5b:ac:13:2a:72:
                    ff:e4:f5:bc:ce:77:b1:ca:d3:48:e1:fb:b6:5a:1d:
                    6c:20:5d:7d:eb:e2:7b:4c:67:d1:cb:ab:07:fc:9e:
                    95:f8:16:87:e6:a7:25:50:85:88:5d:1c:e4:e8:a7:
                    3d:a4:d7:81:d3:8f:6a:56:30:29:28:24:20:61:fb:
                    3d:36:bc:b5:a9:1b:ae:7b:2f:83:1b:c1:1b:83:b8:
                    b9:25:02:9b:64:66:91:bc:0c:95:de:7d:4f:4c:84:
                    58:9b:08:9b:04:66:fb:10:41:44:cf:d8:69:46:32:
                    58:b1:1a:24:33:58:a3:4d:33:4d:06:86:ed:e0:94:
                    90:22:0f:7b:fb:e1:bc:2e:85:c3:e4:b9:00:c3:34:
                    9b:aa:ca:6d:00:ac:5f:e4:32:34:23:d7:36:e0:75:
                    3d:c8:bc:b8:83:6e:89:9f:44:cc:df:65:5f:db:a1:
                    7b:01:91:7e:ec:e8:40:b9:39:fb:af:35:8e:27:f1:
                    dd:b5:3b:9c:dd:9b:e6:f0:19:89:d5:76:04:0a:1a:
                    0b:f1:64:f3:95:a1:59:21:eb:ed:65:a4:9e:76:d0:
                    1f:69:88:c3:20:05:f7:59:fe:d7:e7:64:51:ee:90:
                    28:34:2c:d2:a1:b5:0f:17:f4:0e:63:54:07:db:51:
                    b6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:0C:3B:90:61:C7:A1:17:CC:7B:7A:A5:2E:87:AD:23:47:DE:F7:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/312f2e5f-b35c-3eea-a603-29052d85ef87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.153.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:2a:29:0e:61:c7:0b:53:e4:89:21:59:59:49:27:82:46:b5:
         4d:27:c1:8e:51:00:32:5a:81:ae:22:6b:86:94:d5:40:56:f8:
         2f:ac:da:45:0b:14:7e:0b:8b:2d:3c:de:ea:d6:d3:dc:12:44:
         ec:2c:01:3a:1a:46:12:3c:63:bc:3a:ef:cf:7b:ff:0a:9d:5b:
         c6:89:38:a8:d2:47:7b:21:1d:35:e1:bf:36:98:77:59:7e:a4:
         58:b3:53:f9:36:d1:5f:e1:89:3e:87:36:97:4b:24:ce:48:9d:
         2b:19:f0:68:ba:46:84:d0:ed:b1:91:cc:df:78:5a:05:dc:72:
         4c:b5:be:df:2f:59:90:30:30:aa:df:db:c4:97:37:db:94:a9:
         b0:f3:93:15:9f:b0:d0:9f:64:9e:c1:a1:b1:c2:0b:75:35:2d:
         8a:0a:4a:9e:75:34:36:c1:69:aa:60:d6:b0:7b:27:45:58:e1:
         35:f0:68:35:78:95:0b:47:ee:d5:7e:79:8d:60:b0:ba:60:19:
         4b:7f:7e:cb:06:92:a4:92:53:f7:f5:5c:2d:78:a7:3d:2c:c4:
         a9:1a:7e:81:ee:d9:55:60:98:92:69:5a:4a:3e:5e:ec:ba:39:
         83:2a:5a:61:4d:7e:6c:5c:c0:1b:da:a2:10:87:4e:03:31:79:
         6a:e8:a1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:52:02 2025 by rpki-client