Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1b762233-7f62-3510-9b33-8009f4b89308.roa
File:                     1b762233-7f62-3510-9b33-8009f4b89308.roa (raw, json)
Hash identifier:          vc2MDDX+/gTn6xboL5g2OhaoCtz8Y9F3BU9pUj5C6Fs=
Subject key identifier:   7E:71:77:E2:D8:F5:0E:6B:92:7A:C7:A6:D2:3B:D1:E4:6C:AA:DB:66
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584D6AAAA9064F76A9BEA1BFD840
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1b762233-7f62-3510-9b33-8009f4b89308.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     8069
IP address blocks:        20.153.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:a9:06:4f:76:a9:be:a1:bf:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=9a347026-56f4-4fa7-8d13-ed32cbbee476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f4:da:a7:34:79:e0:4b:29:4b:25:72:26:86:
                    14:c7:41:9b:70:77:e8:01:5e:8c:ff:3a:e2:4c:3d:
                    05:a7:89:51:d0:05:b5:43:39:2d:27:ed:34:f8:37:
                    9c:01:d0:b7:9f:63:83:dc:c4:8c:0d:71:48:84:fb:
                    c4:2c:6f:f2:b1:82:a8:e0:56:92:2f:e6:ea:c3:80:
                    3f:26:04:88:00:2e:a6:3e:8a:e2:21:4b:04:b8:b5:
                    37:d1:45:59:da:f1:79:41:8b:2d:15:90:e3:5a:53:
                    3b:ee:06:87:85:c5:0c:42:ba:a6:ad:09:0e:60:d1:
                    50:aa:37:f3:be:13:9a:77:3f:8a:85:69:15:92:6a:
                    d5:7d:ae:a0:9b:83:52:ee:66:a6:ce:09:83:a6:90:
                    e8:57:c1:61:66:28:b6:f7:cf:17:fe:3f:03:fe:47:
                    07:ad:ef:49:07:d1:f5:04:bc:7e:69:ba:8d:64:0c:
                    66:68:8a:02:56:ca:21:e3:76:80:fb:d0:ae:35:a8:
                    4e:ff:e5:8e:e1:a0:2c:fd:e1:e7:30:a3:fe:f4:65:
                    29:d2:e4:aa:ff:a2:cd:b9:3d:1a:e1:bc:44:f6:62:
                    53:46:f0:12:0a:f3:1f:5f:82:0c:77:c1:27:25:36:
                    27:b3:b7:98:d2:3a:3d:fa:36:e0:2e:22:56:62:56:
                    0f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:71:77:E2:D8:F5:0E:6B:92:7A:C7:A6:D2:3B:D1:E4:6C:AA:DB:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1b762233-7f62-3510-9b33-8009f4b89308.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.153.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:d7:15:16:d6:ad:1a:20:db:32:c0:67:69:5d:6f:b2:75:57:
         70:ef:3d:0d:3b:29:0c:15:a9:83:28:86:60:45:82:fe:40:4c:
         be:67:fd:b0:1a:06:e0:32:67:15:f2:a0:f4:ef:64:ea:de:c3:
         3a:c2:88:e1:d0:46:b1:dd:93:30:0b:88:95:92:ba:1c:1d:00:
         cb:b7:52:12:04:14:e2:2b:95:a8:fe:73:d7:a3:9d:5f:49:18:
         b4:df:8a:62:90:e3:3b:34:64:3a:f6:71:9a:06:5d:de:82:02:
         4c:af:80:64:58:2d:f4:d4:66:64:58:fa:be:47:93:7d:7e:76:
         56:c6:0f:73:73:cd:f0:71:4b:88:ff:b5:f6:89:5f:4d:66:a1:
         72:3f:61:cb:bb:cb:72:b4:95:17:78:b4:37:ba:45:36:2c:b8:
         5b:3c:08:1a:5e:02:40:63:6d:ec:b2:c9:70:41:03:8e:48:ac:
         9b:55:fd:df:ec:a8:ec:a5:a8:ae:b5:c6:bb:77:4d:ef:3f:ac:
         53:59:64:4d:61:44:e0:1c:2c:b8:9f:1f:1f:22:5d:d7:94:d7:
         16:8f:7d:fc:7c:97:7e:cc:62:4e:5a:ef:8c:ed:58:dc:14:c6:
         3f:24:32:63:b3:e8:bb:2e:db:cf:d7:3c:53:4a:fc:ab:be:42:
         7f:d2:b4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:10:23 2026 by rpki-client