Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/823301fc-cddb-3a97-977d-56de970cf5fa.roa
File:                     823301fc-cddb-3a97-977d-56de970cf5fa.roa (raw, json)
Hash identifier:          8LDB/fWP9CtwGiMxhC3B/H1z5AjHEe79S+kn4abQ9UU=
Subject key identifier:   4A:CF:0D:B7:87:16:D0:DC:E8:41:1D:7A:6D:E7:54:EE:8F:1D:E8:C6
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584A5B95B444FDE17DAF7ED6DE40
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/823301fc-cddb-3a97-977d-56de970cf5fa.roa
Signing time:             Mon 30 Jun 2025 01:00:50 +0000
ROA not before:           Mon 30 Jun 2025 01:00:50 +0000
ROA not after:            Sun 28 Sep 2025 01:00:50 +0000
asID:                     8069
IP address blocks:        20.153.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5b:95:b4:44:fd:e1:7d:af:7e:d6:de:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 30 01:00:50 2025 GMT
            Not After : Sep 28 01:00:50 2025 GMT
        Subject: CN=44378176-d00f-4e86-9aec-60d464b4c930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:95:21:40:07:69:d3:e1:62:3c:68:65:9a:48:
                    5d:df:c1:7a:c6:9c:61:16:92:fa:2e:fc:f4:e6:63:
                    3a:07:d7:7d:a0:0a:98:99:00:5a:cc:86:6b:28:b1:
                    1d:c2:0f:a7:f3:3b:51:9c:60:43:16:82:df:3f:0b:
                    f9:6d:a2:0c:10:04:1d:bb:2b:4f:63:3c:68:90:b7:
                    b2:da:46:9e:25:8f:eb:6f:a0:16:af:dd:b9:ce:88:
                    0f:8c:70:cd:1d:54:12:d5:7b:bb:78:71:fe:b7:72:
                    01:81:01:09:3e:52:9b:d2:9d:2b:9a:06:f9:92:55:
                    34:5a:6f:d2:dc:df:24:12:9b:0c:bd:0e:38:85:05:
                    60:92:64:39:ce:86:cd:10:fb:49:46:c2:af:91:48:
                    82:90:b4:a8:75:0f:d1:4d:48:7e:67:24:a4:2e:e2:
                    be:2d:c5:02:b2:f9:3b:d4:44:a3:6b:f7:8a:89:92:
                    84:c7:2f:ff:b6:f3:5d:7d:da:22:6e:6d:54:c2:5f:
                    d2:30:b2:28:67:0c:6b:77:a8:1c:4b:76:45:ea:7e:
                    90:6a:8c:78:ea:40:69:d9:92:bc:92:5c:43:cf:c7:
                    0e:eb:d9:91:b3:c2:ec:76:08:f1:f7:39:24:57:2d:
                    fb:3b:e7:59:d6:ba:90:d0:08:2a:2b:33:1d:25:6c:
                    0e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CF:0D:B7:87:16:D0:DC:E8:41:1D:7A:6D:E7:54:EE:8F:1D:E8:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/823301fc-cddb-3a97-977d-56de970cf5fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.153.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:7b:da:8a:74:b6:2a:72:fb:e8:b8:3d:73:30:6e:b6:02:67:
         58:1e:52:3a:0b:99:7e:6b:db:47:a8:29:3e:62:74:63:c3:d0:
         03:ad:fd:12:de:20:94:f9:41:00:93:8f:a8:2d:01:e0:e9:49:
         2a:94:7f:33:a5:65:4c:34:ed:e8:ff:4e:25:02:28:f7:b5:e6:
         a9:aa:f4:ec:96:4f:c8:cb:0d:e2:8a:49:5d:02:e8:ac:7e:a6:
         76:a7:c0:e9:b3:39:53:6e:3c:8b:24:2b:00:e2:d3:c2:c7:f8:
         20:95:a7:b0:cb:b6:16:ba:ab:42:3a:e7:ce:ca:db:bc:c9:74:
         62:e0:5e:74:88:0a:64:a9:bf:29:2f:4d:f9:48:12:86:48:08:
         37:2f:56:92:12:e1:e7:73:7f:09:09:0f:70:ef:97:06:d1:01:
         2f:37:16:e8:8a:25:5c:9f:13:6b:c3:1f:37:1e:2f:73:d5:d9:
         32:ab:8a:40:b5:a7:fe:6a:fc:bf:3c:66:51:d3:fc:d9:f4:4a:
         6f:d2:ad:cf:62:07:66:75:b6:db:08:d6:9d:f5:d6:7f:d0:73:
         8d:8d:39:6e:69:f6:45:4a:9d:9f:1d:50:3e:5a:f1:7f:b0:63:
         c8:0a:ea:f1:4e:89:59:b2:be:59:d6:86:2f:81:57:2d:81:b9:
         6d:ff:a5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:42:50 2025 by rpki-client