Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4da8097e-cbb4-35bc-9ec6-71f731776eae.roa
File:                     4da8097e-cbb4-35bc-9ec6-71f731776eae.roa (raw, json)
Hash identifier:          wRoPgvF75a1bl8RiRygquKaL3/IU6s8uBxa4pgUuu38=
Subject key identifier:   AF:A9:2D:AA:B9:63:50:0A:4F:4C:9A:CA:10:76:26:47:31:60:DF:06
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584B52E9B0CCC6DA17B512375080
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4da8097e-cbb4-35bc-9ec6-71f731776eae.roa
Signing time:             Fri 26 Sep 2025 15:14:51 +0000
ROA not before:           Fri 26 Sep 2025 15:14:51 +0000
ROA not after:            Thu 25 Dec 2025 16:14:51 +0000
asID:                     8069
IP address blocks:        20.153.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:e9:b0:cc:c6:da:17:b5:12:37:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Sep 26 15:14:51 2025 GMT
            Not After : Dec 25 16:14:51 2025 GMT
        Subject: CN=a066e1c0-e722-4174-a6e4-ffb6734262fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:41:7d:8d:2e:87:5c:8a:d2:fa:77:00:c1:82:
                    57:4a:8d:2c:0a:76:97:61:1c:20:37:e9:9a:3e:c6:
                    82:12:83:b3:94:56:88:b4:6c:a9:d3:e8:df:08:f6:
                    f6:eb:bb:ba:6c:27:bf:d3:12:ba:b4:31:70:23:1e:
                    80:01:ac:3c:62:d3:3f:2b:ad:68:6a:a9:7e:5d:59:
                    19:5f:3a:96:02:f1:84:a4:81:96:f3:b7:4a:c2:71:
                    e9:d0:79:53:f1:9a:9c:fc:3e:4b:84:7e:cb:3d:51:
                    14:c1:8e:0a:41:ca:02:1d:09:4c:c7:1f:ba:b0:e4:
                    08:88:04:65:5f:0b:d7:49:f8:44:38:78:a3:78:67:
                    47:58:91:d4:27:3e:69:af:32:a3:af:fa:08:1a:48:
                    46:cc:45:52:35:2e:b9:5a:ff:aa:1f:2c:a1:cf:cb:
                    95:8a:7b:46:9e:0d:46:a3:24:48:ed:a4:bf:bb:6f:
                    59:64:a8:be:e2:fb:79:08:87:44:90:7f:e3:28:7c:
                    39:99:d1:8e:5c:a0:a7:4d:91:90:62:70:9e:14:69:
                    2d:27:6d:97:e5:d0:85:73:1d:c5:27:68:70:ed:51:
                    24:22:38:0c:71:3a:1a:b1:86:47:72:ba:9a:c7:6f:
                    7c:80:6c:e7:c0:6e:03:ec:3f:4d:cb:00:e8:e8:35:
                    3d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A9:2D:AA:B9:63:50:0A:4F:4C:9A:CA:10:76:26:47:31:60:DF:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4da8097e-cbb4-35bc-9ec6-71f731776eae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.153.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:32:0c:2d:e2:b8:0b:a5:2a:70:8a:eb:f9:d8:8c:3e:eb:dd:
         63:03:03:b3:a5:67:91:04:7b:38:8f:46:23:72:9f:fb:c6:5e:
         68:f7:24:8a:2a:4c:b1:3d:8e:43:23:75:28:1e:bf:43:56:91:
         4c:4f:01:f9:a3:64:9e:8e:85:32:cf:0c:c7:c1:b6:6a:43:d0:
         24:79:a8:d3:22:6d:b8:c3:71:2e:5a:dc:9e:e4:99:c9:fa:b7:
         16:de:a9:50:79:78:c4:9b:e6:40:36:ee:ca:7b:d8:c8:9c:ea:
         7c:86:76:bf:7a:91:79:d7:63:86:a3:0a:29:e6:30:bc:cd:d2:
         84:98:f9:fb:63:0f:f1:e5:b7:34:9d:16:a4:4b:ca:1b:6d:e2:
         34:72:db:9d:81:cc:e2:80:09:9d:26:01:6e:da:ef:ba:60:96:
         d4:45:14:f1:b4:43:37:2b:d9:12:7a:f4:3e:65:58:4f:54:fb:
         2c:92:e7:18:fd:a4:bb:25:c4:b2:dd:7b:4c:79:07:5a:f2:5d:
         a5:e6:d8:46:76:6b:57:69:ae:e9:46:92:52:74:60:06:5a:3f:
         dc:fc:23:1e:5d:b0:6e:a3:07:e1:6e:d1:f4:84:31:8d:67:65:
         6f:7d:e2:6f:35:51:f0:15:5a:a6:97:6c:a5:cb:e1:56:05:ce:
         53:3b:d1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:50:39 2025 by rpki-client