Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1b762233-7f62-3510-9b33-8009f4b89308.roa
File:                     1b762233-7f62-3510-9b33-8009f4b89308.roa (raw, json)
Hash identifier:          DLpIA2ioF+FE8xdYkuLDIcKIAdT5rX198nzqpm/Agyk=
Subject key identifier:   F8:10:36:14:91:6E:42:1E:EB:0C:AE:92:5C:2D:ED:3C:67:CC:EA:2A
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584BA97555F28140487BFEEA6580
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1b762233-7f62-3510-9b33-8009f4b89308.roa
Signing time:             Mon 27 Oct 2025 15:15:44 +0000
ROA not before:           Mon 27 Oct 2025 15:15:44 +0000
ROA not after:            Sun 25 Jan 2026 16:15:44 +0000
asID:                     8069
IP address blocks:        20.153.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:75:55:f2:81:40:48:7b:fe:ea:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Oct 27 15:15:44 2025 GMT
            Not After : Jan 25 16:15:44 2026 GMT
        Subject: CN=24467285-51b4-4835-9668-ddcd90bc6386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:82:65:73:3a:e6:9b:fe:2d:58:99:6c:95:ce:
                    6c:5f:76:67:7d:3e:2d:92:8f:42:46:2a:93:8e:af:
                    24:7e:2d:89:49:ed:4b:9d:f7:93:f1:46:35:32:89:
                    6f:ad:42:05:15:85:a0:ae:e6:77:e6:a3:1d:ea:5b:
                    3a:a2:5b:ee:16:09:39:d9:56:e9:59:02:0b:f7:93:
                    75:84:b8:87:9b:5c:25:28:57:d3:6c:85:35:54:ac:
                    99:a7:15:33:e5:bf:9b:00:34:c5:1f:51:6f:4c:b5:
                    2c:59:a2:82:15:a9:1c:d0:e0:a5:dd:6d:07:42:db:
                    76:c6:4b:da:2e:fd:a0:3c:4d:3b:60:11:17:85:c6:
                    ab:3e:c7:e6:2f:46:1b:55:bd:15:d3:43:e0:0a:59:
                    b8:73:6d:cb:a1:14:3e:cb:e1:c6:11:0e:1c:27:fe:
                    52:80:b5:20:95:72:17:01:66:77:60:2d:3f:60:87:
                    1a:c7:0a:19:35:3f:d6:63:68:a9:d4:fd:a2:3c:8b:
                    e3:b3:39:bb:1c:ef:a3:4c:ce:b0:ad:7d:82:cf:a2:
                    bc:ee:b9:3c:03:2c:16:e3:ce:07:e7:29:4b:b8:97:
                    db:55:d2:24:dd:f8:36:fe:46:e4:78:e2:02:65:45:
                    3b:aa:69:f2:d7:b5:71:12:9a:b2:5a:b4:86:5c:b6:
                    a5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:10:36:14:91:6E:42:1E:EB:0C:AE:92:5C:2D:ED:3C:67:CC:EA:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1b762233-7f62-3510-9b33-8009f4b89308.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.153.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:62:ee:3d:d2:fc:ed:c6:17:b9:d3:a9:63:44:95:6d:98:c2:
         fc:fa:a9:0d:4c:90:2d:2d:72:dd:6b:0e:12:a6:34:84:10:be:
         a8:a1:7b:45:99:d8:9a:85:74:f4:a5:7d:ab:b9:ba:4a:87:1a:
         e8:e5:f3:1b:33:cd:67:77:c7:56:40:0e:65:7e:e7:c0:5d:35:
         e3:0e:09:b3:53:6c:a9:c2:90:69:b2:4f:f5:e0:ee:fc:ca:c6:
         4a:b4:26:ce:2c:5c:79:04:0d:be:fc:76:33:2d:f0:3b:f9:c3:
         bb:e8:55:76:3e:e1:aa:21:70:b0:e5:55:4c:98:88:33:6f:cb:
         f7:11:65:3e:a4:9b:4b:88:f1:74:a0:58:22:c0:6d:e3:13:a2:
         bd:31:03:b5:a5:de:95:a2:0a:af:7d:fb:c6:00:1e:9f:b3:d2:
         68:74:82:30:8e:18:46:33:04:03:f0:da:5f:82:99:7b:23:2d:
         17:21:5e:bc:d3:3b:d5:cd:a7:90:34:c4:43:86:25:b1:51:a3:
         ac:32:f3:9e:00:0b:a6:63:1d:f0:0b:bd:5a:42:94:13:d1:67:
         02:f7:e9:b9:3e:85:00:a8:5b:dd:d4:d0:18:05:db:a9:0d:42:
         33:be:d1:97:ee:4b:0b:2e:af:6a:1a:44:c8:0f:7a:50:20:cc:
         50:08:f0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:41:18 2025 by rpki-client