Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ac33e084-14c8-3912-b024-0e8df49402d3.roa
File:                     ac33e084-14c8-3912-b024-0e8df49402d3.roa (raw, json)
Hash identifier:          lY7vRTRjlAHlRwXYL5PJKLPxuQuzQ8kKkCyuy9BG/6k=
Subject key identifier:   B3:DE:B8:DC:4B:E7:7C:D6:4D:C3:F0:05:F0:BE:C9:19:A1:5C:EC:AD
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584D021791A1065E083F1ABDF000
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ac33e084-14c8-3912-b024-0e8df49402d3.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     8069
IP address blocks:        20.153.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:91:a1:06:5e:08:3f:1a:bd:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=6dcc35ae-9489-4268-8cd2-8b7019422c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c4:7e:e0:ac:32:c9:b1:cd:79:53:4c:b6:b3:
                    26:eb:6b:c0:c4:4f:07:49:bf:03:16:1c:a0:6f:a3:
                    54:6f:3d:62:3a:9a:21:8a:63:de:8c:ff:fd:21:af:
                    16:73:36:3a:11:d0:9e:ce:d8:e6:20:80:41:ee:c1:
                    c1:21:1b:36:52:a2:43:a4:28:3f:d2:4c:3b:bd:7a:
                    a7:72:e3:0c:98:d8:f9:55:f4:03:c3:71:fd:55:f3:
                    bf:cc:b5:75:cc:34:27:7b:b3:61:fa:0e:a2:90:5f:
                    fe:8e:82:e0:58:51:08:d1:68:e1:6b:9e:f2:cb:be:
                    73:5c:e4:98:16:d3:cf:a3:92:74:6e:a2:29:dd:b8:
                    83:06:64:6a:e1:5f:56:01:59:ba:e7:ff:cc:70:9d:
                    2e:9d:63:9e:78:3c:42:58:51:db:79:73:68:56:d4:
                    de:54:17:9f:13:78:47:27:a0:ab:e6:3c:79:0e:87:
                    0a:0c:d7:3f:ed:56:5a:24:0d:cd:2a:05:3e:96:28:
                    75:d7:cf:54:5a:10:20:ec:1b:48:2f:07:d7:6a:57:
                    f4:44:d7:0f:a8:64:74:73:fe:d3:d6:87:36:22:a3:
                    6e:06:83:1a:41:f7:d7:25:f5:29:f6:29:54:05:cd:
                    8f:0d:29:07:91:35:23:36:ec:16:10:e5:8c:39:24:
                    4b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DE:B8:DC:4B:E7:7C:D6:4D:C3:F0:05:F0:BE:C9:19:A1:5C:EC:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ac33e084-14c8-3912-b024-0e8df49402d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.153.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:f3:17:4e:b0:b5:60:74:10:e0:d0:f6:98:8d:8a:ac:5b:09:
         15:8d:fe:8a:a4:e1:c5:e5:2b:b1:89:26:88:8c:25:a8:13:d1:
         5e:04:2d:3a:9b:2b:af:5d:c8:ab:cd:1d:e1:3e:04:1a:58:7c:
         55:89:16:6e:1b:74:ae:32:59:ed:45:b0:50:fe:01:d5:a0:b8:
         04:98:fd:19:fe:77:60:48:f3:75:93:84:ca:a0:d6:b1:0a:a6:
         c4:53:15:dc:9b:b3:4a:b7:90:52:67:48:77:93:8d:20:51:13:
         c8:26:33:29:23:df:ee:c2:f3:bd:c3:7e:8e:8a:fa:0c:43:6e:
         73:90:01:71:77:e8:c9:4d:57:a0:64:a3:bb:71:bc:f1:47:25:
         be:7d:06:71:2b:cd:8c:83:78:80:20:61:30:d3:62:40:97:ba:
         1b:c5:b4:bb:db:52:5f:99:f4:c0:06:83:b6:92:3b:45:fc:37:
         1c:9d:b5:50:57:46:89:bf:70:3c:28:dd:58:64:bd:de:5d:6f:
         18:bf:fa:34:64:d1:66:9d:5f:e0:b5:2b:d2:9c:73:84:83:67:
         27:20:f4:ac:73:39:e5:13:79:9e:d0:29:f0:46:c9:be:65:99:
         24:c9:c0:86:21:30:5a:4d:e4:0e:28:f7:5f:d7:5b:81:21:72:
         01:06:71:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:29:21 2026 by rpki-client