Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dbe1ea2a-55aa-31f6-8cec-bfade03772a0.roa
File:                     dbe1ea2a-55aa-31f6-8cec-bfade03772a0.roa (raw, json)
Hash identifier:          HShANdAeCvZUY/gUXBits8CJ0uHfn0xTWluSRP78ZHw=
Subject key identifier:   1A:0C:70:09:82:87:AB:43:A5:61:18:51:A8:1A:73:AD:63:66:76:F1
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584DCAFB0CBAAF2C541040E9CA00
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dbe1ea2a-55aa-31f6-8cec-bfade03772a0.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     8069
IP address blocks:        20.157.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fb:0c:ba:af:2c:54:10:40:e9:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=e84bfd38-b880-4267-8b31-05a7e2877be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fe:2b:ea:52:92:88:33:2c:38:46:0b:9f:21:
                    c8:0e:b2:14:33:0c:e2:6b:25:ea:88:df:b1:b9:f0:
                    5e:0c:58:08:7c:65:19:ad:4f:18:42:6c:81:60:51:
                    f3:26:cc:1b:54:4c:f6:59:91:40:65:dd:25:24:73:
                    96:21:0c:41:ce:9d:7f:4d:ec:9e:9c:b5:aa:81:3d:
                    3d:b9:19:85:40:8e:8b:bb:bd:16:12:69:a7:ec:d5:
                    8a:40:ea:6e:75:03:41:47:b5:7f:d0:d2:ae:57:35:
                    bc:8e:6e:bc:11:68:45:a3:7d:15:55:2e:7b:4e:08:
                    be:20:47:c0:8f:a9:7f:a3:7d:99:03:73:75:99:45:
                    11:9b:de:b0:37:29:22:c6:28:e3:d2:bf:da:69:77:
                    fc:eb:98:1e:08:a0:22:d8:2c:b8:b6:28:ef:c1:c9:
                    af:80:f5:e5:ea:c0:b2:99:c1:eb:3a:b9:ed:17:2f:
                    cd:59:af:bc:da:2b:85:8a:42:b1:0d:e8:1d:5b:8d:
                    8a:ed:cb:aa:ef:ae:39:80:14:5e:bd:da:bc:b3:07:
                    59:91:50:1f:06:bf:63:f6:16:d7:a8:07:fe:e3:50:
                    9b:de:e3:ce:b2:8b:b8:8a:cb:3f:56:4a:db:c5:0a:
                    2a:7e:aa:f0:81:ec:7a:ee:b4:58:76:85:9c:c9:4b:
                    78:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0C:70:09:82:87:AB:43:A5:61:18:51:A8:1A:73:AD:63:66:76:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/dbe1ea2a-55aa-31f6-8cec-bfade03772a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.157.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:f0:62:8e:18:29:6f:9f:e8:b9:7e:5d:bc:2e:bd:3a:c7:79:
         9c:19:55:c9:cb:72:41:0e:07:f9:72:d3:13:a6:cc:60:0c:28:
         1f:15:71:9c:84:6f:c6:3c:06:a5:fd:da:37:5b:ae:aa:69:2f:
         eb:49:d5:f2:66:e9:bf:d2:e1:f9:12:eb:d1:ef:b3:75:bd:2d:
         c5:36:6e:13:03:5c:9c:08:16:50:d0:fe:34:77:2b:e0:f6:fd:
         cf:1a:6f:79:a1:16:d0:78:13:33:52:a7:ee:14:32:b3:8f:48:
         6f:0d:eb:fe:c2:87:9a:27:72:e8:92:ad:60:83:76:5f:b6:fb:
         3c:3c:e1:54:92:af:da:32:38:c6:d9:f0:3b:7e:8d:78:a5:9b:
         2f:ed:79:73:6c:b9:48:1a:14:56:86:92:22:91:a9:14:98:1e:
         ad:ab:d1:bb:18:3a:ba:3c:d6:27:ef:5a:90:f7:00:2d:a3:e0:
         fc:a3:9a:cf:4a:8e:31:e9:8c:bd:3a:b4:08:92:36:4c:1b:4c:
         ac:1d:20:66:ff:9c:49:5c:ab:a3:ce:9b:67:83:de:4c:30:7c:
         72:ac:86:ba:23:91:80:11:41:b3:e5:d9:41:95:6b:91:46:6c:
         7a:91:89:3c:29:11:42:cd:c6:b4:b6:a2:8a:ee:bc:9d:61:e4:
         15:f1:f5:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+wy6ryxUEEDpygAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk
ZTg0YmZkMzgtYjg4MC00MjY3LThiMzEtMDVhN2UyODc3YmU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuv4r6lKSiDMsOEYLnyHIDrIUMwziayXqiN+x
ufBeDFgIfGUZrU8YQmyBYFHzJswbVEz2WZFAZd0lJHOWIQxBzp1/TeyenLWqgT09
uRmFQI6Lu70WEmmn7NWKQOpudQNBR7V/0NKuVzW8jm68EWhFo30VVS57Tgi+IEfA
j6l/o32ZA3N1mUURm96wNykixijj0r/aaXf865geCKAi2Cy4tijvwcmvgPXl6sCy
mcHrOrntFy/NWa+82iuFikKxDegdW42K7cuq7645gBRevdq8swdZkVAfBr9j9hbX
qAf+41Cb3uPOsou4iss/VkrbxQoqfqrwgex67rRYdoWcyUt4NwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBoMcAmCh6tDpWEYUagac61jZnbxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZGJlMWVhMmEtNTVhYS0z
MWY2LThjZWMtYmZhZGUwMzc3MmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ2xMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADDwYo4YKW+f6Ll+XbwuvTrHeZwZVcnLckEOB/ly0xOmzGAMKB8VcZyE
b8Y8BqX92jdbrqppL+tJ1fJm6b/S4fkS69Hvs3W9LcU2bhMDXJwIFlDQ/jR3K+D2
/c8ab3mhFtB4EzNSp+4UMrOPSG8N6/7Ch5oncuiSrWCDdl+2+zw84VSSr9oyOMbZ
8Dt+jXilmy/teXNsuUgaFFaGkiKRqRSYHq2r0bsYOro81ifvWpD3AC2j4Pyjms9K
jjHpjL06tAiSNkwbTKwdIGb/nElcq6POm2eD3kwwfHKshrojkYARQbPl2UGVa5FG
bHqRiTwpEULNxrS2ooruvJ1h5BXx9WY=
-----END CERTIFICATE-----
Generated at Wed May 13 08:13:58 2026 by rpki-client