Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b5ee7c3a-f751-33e4-b9e2-37af15aaba4a.roa
File:                     b5ee7c3a-f751-33e4-b9e2-37af15aaba4a.roa (raw, json)
Hash identifier:          eE3OOA8c7eo13VkxUHaVh1yBNVjZQtON/NbZXZQLMH4=
Subject key identifier:   C3:8B:9B:81:A3:47:02:87:1C:43:DC:9E:5C:A1:36:DF:6D:E7:F6:62
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584D6515233A026ACD06DFB7E080
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b5ee7c3a-f751-33e4-b9e2-37af15aaba4a.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     8069
IP address blocks:        20.153.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:23:3a:02:6a:cd:06:df:b7:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=e6c0f6e1-4138-42ab-88af-499a41cbc2de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b9:f9:7f:d8:9e:8a:eb:8d:6d:d6:8d:1e:30:
                    a6:eb:b1:91:07:a1:b3:58:ca:85:fe:b3:c6:37:99:
                    31:6e:4e:c1:2f:c1:95:c0:b1:7a:ab:67:01:59:85:
                    85:d8:94:2d:6d:e3:0a:86:0b:49:19:35:3b:66:e5:
                    fe:e2:73:27:99:c4:36:c7:77:90:2a:9c:57:ee:ef:
                    54:b9:28:a8:a7:1c:2e:71:7f:2a:e0:f9:45:50:32:
                    5e:4b:ef:4b:0e:c8:7f:bb:23:72:fe:99:ed:4b:39:
                    c2:8e:35:67:1e:e6:2c:79:12:30:29:ef:ac:bd:ce:
                    75:89:c5:8f:b8:86:3b:7e:15:d4:8d:3c:48:91:a9:
                    44:99:cf:8f:81:79:29:42:c7:0a:8b:6a:f1:7a:7f:
                    92:2c:9d:e9:59:70:a4:03:65:c5:58:cd:be:10:5b:
                    d2:77:d5:20:b9:c6:14:db:50:13:44:a8:9a:c2:60:
                    a5:ee:d8:66:72:60:03:7b:68:a8:52:5f:d7:5f:66:
                    ee:94:89:cc:49:3e:be:fe:1d:4a:a7:86:b0:3c:2b:
                    0b:a3:33:b0:c6:de:f1:52:1c:50:ff:24:d3:25:47:
                    68:79:85:1e:59:7a:8b:55:42:25:ea:ac:46:51:3a:
                    86:29:cb:4e:08:b2:0e:4f:b5:53:f4:5b:78:f0:1f:
                    fe:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8B:9B:81:A3:47:02:87:1C:43:DC:9E:5C:A1:36:DF:6D:E7:F6:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b5ee7c3a-f751-33e4-b9e2-37af15aaba4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.153.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:5c:48:55:d1:32:b8:ec:92:f0:3e:30:6a:10:3f:ac:4a:1a:
         c8:e8:9d:47:e9:0a:05:0e:29:3c:99:3e:a8:a1:29:0c:cf:aa:
         ad:07:1a:6a:fb:5b:de:1f:0d:d8:1e:4c:7e:c5:13:0e:04:24:
         52:4d:07:43:3d:dc:75:8b:cd:37:f5:e8:6a:06:0a:42:12:43:
         89:1a:09:b8:b0:f4:3c:f0:57:8e:d0:78:e6:ad:93:55:5c:5a:
         0a:43:89:f5:dc:d5:c9:19:89:c6:f1:e1:e3:d3:46:9e:0f:7b:
         13:80:92:67:db:93:16:c2:6b:7a:0e:2e:a0:68:9a:c6:e1:2b:
         a5:23:fc:06:76:49:cf:be:8a:0e:a8:c4:b6:96:1b:1e:51:2c:
         6a:ba:94:4c:e2:21:16:22:9f:91:12:4e:b0:88:e3:12:34:b5:
         99:21:71:a4:69:64:8f:8d:d6:be:9f:56:33:7e:6f:cf:ef:70:
         71:33:f4:bb:8c:e7:97:50:1e:8b:ba:e2:b9:f7:c4:46:9e:a1:
         24:5c:a6:19:57:3e:1a:2a:de:ca:f4:be:68:37:4a:aa:81:6c:
         55:58:36:e7:05:d7:2f:6d:f8:e8:5f:02:04:bc:28:21:25:90:
         f6:56:32:f2:18:ed:58:2b:17:5c:54:af:01:f0:d7:63:95:81:
         b4:46:4a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:39:24 2026 by rpki-client