Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5fb52d7c-75d8-3f8b-b033-65a5376c4350.roa
File:                     5fb52d7c-75d8-3f8b-b033-65a5376c4350.roa (raw, json)
Hash identifier:          ZXbIURypNnID5QBE6iE8I7YQlVddgFLXLYt++C/3vSI=
Subject key identifier:   20:E8:31:B6:4D:A8:EE:09:3D:B7:98:44:0D:25:27:6C:8A:2A:6A:C6
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584D9755671C7C711087BE0BC880
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5fb52d7c-75d8-3f8b-b033-65a5376c4350.roa
Signing time:             Wed 22 Apr 2026 13:00:32 +0000
ROA not before:           Wed 22 Apr 2026 13:00:32 +0000
ROA not after:            Tue 21 Jul 2026 13:00:32 +0000
asID:                     8069
IP address blocks:        20.153.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:97:55:67:1c:7c:71:10:87:be:0b:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Apr 22 13:00:32 2026 GMT
            Not After : Jul 21 13:00:32 2026 GMT
        Subject: CN=032ff782-63d0-4342-8ed1-bd7d65b0e9a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ed:a3:9e:a4:40:5e:67:a6:ce:35:1b:44:e9:
                    78:bf:29:ec:cb:00:05:fa:61:ee:de:25:af:23:ba:
                    1c:99:dc:26:fc:5e:98:0a:72:bd:0e:8c:2f:ea:d8:
                    a9:ff:3c:3c:c2:87:b9:8c:d7:6c:f1:6e:55:78:25:
                    5f:10:15:fd:fb:8f:36:ea:e5:80:4d:8e:5c:a0:05:
                    32:b7:df:8d:ee:59:ad:6f:2f:cc:f1:ef:f1:d5:d2:
                    aa:a8:0b:79:d2:08:08:05:4f:3a:67:ef:65:18:78:
                    c0:d3:af:68:3a:c6:6f:9c:b8:bb:a7:13:a2:d4:59:
                    8f:23:18:04:6c:22:f1:54:8e:d4:16:f9:1f:48:3d:
                    d4:a9:58:40:53:9d:e0:f7:6f:a9:f7:4a:ff:51:0c:
                    6a:3d:63:cc:d1:4f:4b:b6:1b:67:8e:1e:85:07:8c:
                    32:f1:ee:74:d0:d1:b6:4c:1f:ae:0b:51:44:83:eb:
                    2b:14:21:1d:df:3d:a4:5f:10:63:c4:d3:8a:77:6b:
                    86:79:09:ac:c7:c9:71:f1:a5:ce:f1:86:30:42:83:
                    52:79:93:40:28:89:b2:0b:8a:07:21:0f:c9:1d:ef:
                    72:c8:2a:35:8d:54:df:66:d9:04:69:eb:bd:39:b6:
                    d6:f0:94:e2:b5:b4:ec:30:12:57:89:79:51:73:f9:
                    6c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E8:31:B6:4D:A8:EE:09:3D:B7:98:44:0D:25:27:6C:8A:2A:6A:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5fb52d7c-75d8-3f8b-b033-65a5376c4350.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.153.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:66:e2:a0:06:1e:53:12:91:79:65:a5:1a:95:91:d7:ee:ba:
         1a:ca:ab:e9:aa:e9:7d:23:8d:d6:a9:84:f4:9b:4a:46:55:34:
         84:5e:0b:ca:fb:0b:14:29:8d:9f:d3:da:28:b4:17:5b:8d:8c:
         58:52:b4:ab:75:52:53:a1:df:d4:83:dc:c3:3d:c1:36:4b:2d:
         b3:39:06:c9:ff:bc:7f:08:f0:23:33:a4:25:f2:d2:c1:a7:ba:
         49:a5:37:73:d1:57:fc:ad:7a:b1:81:3a:4f:b9:6f:ef:7e:02:
         af:89:b9:f2:b9:a3:0e:e8:e6:d7:a9:06:e4:ec:87:5c:3c:4f:
         3f:08:b7:8d:3c:fa:69:e9:15:3a:55:2d:64:7b:d5:a5:44:b2:
         90:ce:ac:13:f2:ea:aa:b7:01:03:1e:9c:5c:43:64:3c:d7:4b:
         ab:87:5b:fe:e8:93:b1:97:a4:c6:46:58:35:88:a0:2d:f8:bf:
         a8:c2:78:42:35:83:ac:53:ff:f9:c1:be:1a:7a:2d:d2:b3:6c:
         81:31:f1:50:8c:4f:69:df:c3:40:0b:e2:d6:0b:0b:35:6e:20:
         36:a6:88:05:f2:26:e1:83:e4:37:d1:53:54:b2:15:66:f6:fe:
         3a:20:83:c7:57:22:d2:e3:94:7e:d3:27:93:8a:52:de:fa:ee:
         ab:1a:c6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:12:34 2026 by rpki-client