Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/51de0f90-d04b-3ee5-8cd9-8de517542b74.roa
File:                     51de0f90-d04b-3ee5-8cd9-8de517542b74.roa (raw, json)
Hash identifier:          /vKgT3oC03gj4Xkd63LLtOsgf8WbDG0nwKnbpyivlGE=
Subject key identifier:   9A:C3:E1:62:FA:01:A4:8E:A1:0C:14:1E:25:B3:FE:0E:9B:3B:F9:2E
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584CEA5CF46A4732137191D0DF80
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/51de0f90-d04b-3ee5-8cd9-8de517542b74.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     8069
IP address blocks:        20.157.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:f4:6a:47:32:13:71:91:d0:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=d703977b-bece-4e99-a0d3-f048205ef6e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:78:23:96:ee:0e:2e:5b:60:02:b6:c9:db:36:
                    87:79:3b:db:c8:cc:fb:92:17:f8:c9:92:2c:f4:3d:
                    f0:ea:40:17:1e:66:1a:9b:7f:0a:50:23:9c:04:78:
                    6a:cb:ac:ec:81:0b:e0:72:59:2b:d9:60:2d:a9:5c:
                    3e:6b:9f:c9:81:be:33:a3:74:c7:3f:b7:48:9a:60:
                    d1:08:ae:c9:68:11:8f:bc:63:d2:43:f2:83:d8:f8:
                    7b:fb:55:6a:bf:95:04:4c:d5:42:d4:c7:da:09:57:
                    2d:9b:50:df:e0:1b:a5:42:6d:9e:01:4e:83:cc:04:
                    e5:a8:a8:e3:6a:e0:7f:ca:a6:16:b8:5e:bc:5e:df:
                    6f:ec:14:ce:4d:02:ea:a7:1b:3a:47:7b:86:80:fd:
                    0e:24:85:ca:c5:3f:ff:ba:2d:fa:6e:09:bb:51:77:
                    1b:2c:33:54:df:b7:ef:10:ab:51:b8:0e:5d:0a:c3:
                    83:b8:18:30:65:c2:90:ed:8e:c3:09:0f:0e:e4:4f:
                    99:b3:52:ef:70:f3:93:ba:83:33:8a:87:72:b4:eb:
                    0d:6e:cd:df:9d:2d:60:50:f6:7d:83:26:d5:0f:a8:
                    69:37:9e:82:e4:2e:b1:e5:dd:de:11:56:c0:43:bb:
                    93:34:29:48:96:ce:5d:d1:c9:ac:8e:4b:85:6b:a8:
                    22:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C3:E1:62:FA:01:A4:8E:A1:0C:14:1E:25:B3:FE:0E:9B:3B:F9:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/51de0f90-d04b-3ee5-8cd9-8de517542b74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.157.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:50:85:ce:73:04:bc:0c:ad:ff:cd:cc:bd:65:5c:d6:c3:8b:
         b2:96:fe:eb:ab:14:5a:e4:3e:9e:fb:4d:b1:27:f5:ad:a5:65:
         ac:c7:43:4b:a2:39:6c:99:81:4e:fe:4c:14:c9:a6:48:ec:01:
         36:73:06:8c:47:9f:83:13:9d:89:aa:3c:21:76:35:23:2c:01:
         f7:b0:e8:d3:3c:22:f0:9e:19:8e:62:1d:a7:d6:0d:56:44:f2:
         99:5d:6b:1b:c5:6e:aa:c8:4b:91:6c:a6:ae:53:21:d6:c4:c4:
         83:95:28:ab:55:96:33:1a:54:a8:55:05:18:30:5e:50:a7:ea:
         55:0a:98:09:2b:b5:dd:91:9e:90:55:7c:93:ee:33:e4:8d:a5:
         ba:98:26:8c:56:26:ee:e1:b6:17:d7:f4:4a:69:6a:25:83:13:
         d0:00:05:f3:9e:96:aa:81:6d:33:4c:15:21:ab:8f:1f:c4:2a:
         ea:8a:f0:fc:25:3c:24:71:fa:b0:13:5f:4d:79:4c:fb:34:33:
         b1:5f:5f:ba:b4:c8:6f:9d:f4:71:71:55:01:3c:3c:57:2d:3c:
         11:4e:7e:37:a3:ec:c7:92:92:93:99:10:19:89:22:02:88:2e:
         97:94:8b:86:dc:44:60:68:97:49:fb:c7:67:08:40:64:2a:e6:
         54:18:f7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:55:26 2026 by rpki-client