Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/340d45d4-1749-34e3-acea-4c5b2cb6d8ee.roa
File:                     340d45d4-1749-34e3-acea-4c5b2cb6d8ee.roa (raw, json)
Hash identifier:          zK6jzZk/mYGME0AAOhGUlPIpEZ2nZEDbuBAn929Iv/o=
Subject key identifier:   5C:6A:2B:EE:D0:95:92:96:5E:58:B3:7A:B3:F5:FE:B4:16:88:45:E2
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584EA7873D27B51926EC743C7B80
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/340d45d4-1749-34e3-acea-4c5b2cb6d8ee.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     8069
IP address blocks:        20.33.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:3d:27:b5:19:26:ec:74:3c:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f18c7205-865c-4e23-abab-8234e0fc4f1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3a:8d:c5:81:5c:46:d9:b2:6a:95:53:2e:e0:
                    0c:3e:dd:16:00:a7:4e:ba:e5:4b:68:6f:c1:2a:c3:
                    3e:c4:30:d3:e9:9e:86:c1:4c:c2:1e:d6:19:76:93:
                    5a:58:a6:ba:d1:88:eb:cc:85:b3:54:2b:b7:06:2f:
                    ba:44:64:e4:16:cf:06:94:58:8a:1d:f0:b9:32:df:
                    2e:2e:45:b5:b6:bf:ad:03:8a:19:c1:ce:83:28:46:
                    b9:af:ed:95:12:07:ce:fa:5c:f9:f2:51:c4:fc:d3:
                    08:e5:e9:98:8d:1b:92:27:ae:83:f6:4e:03:0d:81:
                    da:cd:46:95:69:8b:18:cd:d1:3e:11:99:6f:1e:5e:
                    f9:24:49:08:bb:2f:78:94:87:59:29:a7:30:b8:13:
                    79:ca:f9:23:f7:7b:90:eb:68:c1:f3:39:43:73:86:
                    5c:a8:b9:e7:3e:c7:45:a3:66:ca:8d:86:08:2f:2a:
                    8b:03:b6:ac:49:ad:7c:82:5a:55:04:3e:5d:a9:a9:
                    66:16:e1:d5:ad:65:7d:a5:c9:44:4a:70:69:3a:60:
                    9d:c4:e0:18:68:24:dd:65:d3:d2:16:fb:8a:73:3f:
                    7e:1c:fa:d8:59:6d:8b:3a:59:a7:61:df:38:e4:6a:
                    82:73:0b:d4:e2:19:ab:20:24:7a:5c:7e:3f:8c:97:
                    3c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:6A:2B:EE:D0:95:92:96:5E:58:B3:7A:B3:F5:FE:B4:16:88:45:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/340d45d4-1749-34e3-acea-4c5b2cb6d8ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.33.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:29:59:3d:fa:93:fb:03:15:a0:ef:03:cf:b9:6b:0a:b1:a3:
         7b:b6:40:4a:13:54:a2:8f:76:7d:1a:e6:4e:9c:5d:bb:f2:51:
         ad:56:06:26:1c:17:aa:f1:f3:40:52:48:55:b0:1e:23:36:1e:
         f1:23:7a:22:4a:75:8f:4a:66:a8:b7:d2:d7:0b:90:c6:2f:88:
         d6:4e:3d:cd:a4:3c:61:63:f5:4c:f9:28:f2:8c:f2:1b:2b:0c:
         40:50:e6:6f:ac:d1:0c:c8:a7:49:f2:63:6c:43:05:16:05:96:
         ff:6e:61:ca:0a:d2:cb:a5:01:4d:3d:94:65:79:6f:4a:44:eb:
         01:47:7f:44:f7:6b:9b:22:0b:d3:12:33:bf:d0:3a:ac:52:67:
         9f:27:78:52:d3:c7:a7:5e:54:09:87:1e:8d:fe:ef:e1:22:e6:
         b0:f7:79:c5:4a:9b:4b:08:5f:d1:a4:85:9b:c2:63:ae:af:a6:
         2f:2c:f9:e3:dc:fb:d8:8e:e9:97:79:cf:46:a7:42:6a:5f:27:
         19:fc:b9:60:c3:b4:22:56:43:61:20:5d:a2:40:cb:47:99:1a:
         64:04:d3:9e:af:a3:fd:10:6d:43:be:34:f0:ad:a5:d9:e7:25:
         5c:df:f4:67:de:33:de:48:18:f9:1b:de:b2:b1:57:f7:55:9b:
         6c:8f:6f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:57:49 2026 by rpki-client