Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e37eacd0-0bd0-379c-b6cb-7b6f24ae57b7.roa
File:                     e37eacd0-0bd0-379c-b6cb-7b6f24ae57b7.roa (raw, json)
Hash identifier:          PESmWyIcImXj18UR0ZGg755mvaw670Jeyer5Higbh9U=
Subject key identifier:   EE:5B:09:7A:D9:AC:83:37:B6:46:FA:98:9A:19:13:8F:33:81:08:4A
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584EA796E1039A08249F63C9F01A
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e37eacd0-0bd0-379c-b6cb-7b6f24ae57b7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     8069
IP address blocks:        20.153.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:e1:03:9a:08:24:9f:63:c9:f0:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=89c5b83b-95a3-4001-916e-64e93a74e40a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:48:fb:13:6f:d9:b9:56:6a:eb:7c:3d:77:23:
                    6b:43:6b:b0:69:2d:c4:27:d1:83:04:be:7f:dc:79:
                    3a:20:fd:6d:b6:ea:24:3b:f7:86:0e:03:5a:40:67:
                    e9:0c:53:67:aa:6d:a9:a5:11:26:82:19:63:62:5e:
                    49:2d:a2:57:cc:ea:32:8b:d6:82:69:a1:da:5d:58:
                    5f:95:9a:fc:92:11:6f:5b:19:62:47:d8:a0:d8:62:
                    c2:19:4e:9b:35:71:7b:65:d8:06:7d:83:5d:14:8b:
                    79:d7:e4:6c:f0:4d:2d:1c:fd:bd:3e:1a:5a:14:2c:
                    43:8c:2e:9f:f1:98:08:1d:73:8e:58:0c:cc:71:d1:
                    d8:d9:72:27:b3:32:91:d8:9a:ac:e2:19:f7:ea:a6:
                    95:a6:6b:7a:56:69:b9:c8:e4:45:a3:ed:5a:da:05:
                    2e:df:b3:37:99:e2:4e:13:3d:6a:77:ad:72:7d:26:
                    d7:15:79:a0:ac:90:25:8d:ef:b2:38:78:0d:68:f8:
                    b3:2b:96:06:4e:d0:4b:9d:f7:ce:09:3a:c5:ef:63:
                    7d:cf:b4:4d:f6:3e:d7:9c:ff:15:ca:e9:b0:43:b0:
                    48:7b:e5:c5:41:43:35:66:43:27:61:fc:a6:f5:11:
                    64:8b:73:93:1c:1d:23:e1:18:bd:fb:9e:59:70:60:
                    f6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:5B:09:7A:D9:AC:83:37:B6:46:FA:98:9A:19:13:8F:33:81:08:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e37eacd0-0bd0-379c-b6cb-7b6f24ae57b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.153.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:d3:41:d1:a7:69:e2:f7:ad:53:fa:d8:a8:99:64:a1:b3:16:
         87:b8:80:04:48:6d:38:be:4f:06:9d:7b:01:2b:06:05:3f:f1:
         ad:91:53:d4:9d:cf:d5:25:a2:98:b1:ae:b3:bd:c1:cc:e8:07:
         06:cf:5d:65:61:13:da:02:46:99:10:5f:b8:02:d5:eb:76:e9:
         10:76:b4:57:b5:e9:9b:ec:15:09:f2:78:e6:d5:ba:54:33:0f:
         29:48:86:3b:37:77:1a:3a:84:98:1d:d5:01:c5:23:d9:46:82:
         8e:34:0f:3d:b7:a8:fd:28:f2:70:e5:23:c9:88:02:e6:9b:0f:
         67:2b:42:fb:72:f5:1c:07:0d:da:6d:6d:ed:0a:2c:ee:a1:68:
         83:d7:e6:22:e5:98:53:e8:ca:b1:8d:cd:d5:49:92:c6:a6:53:
         f0:ea:16:14:49:bd:ee:65:97:3f:cc:d9:de:86:bd:1f:ed:d4:
         65:06:ad:4e:95:6f:cc:52:ec:f5:73:6e:74:a9:b0:57:b5:dd:
         72:18:9d:16:95:9d:52:50:aa:b4:56:b7:6b:0d:46:03:45:f0:
         25:b8:3d:ef:d2:34:c6:19:37:e6:0d:a6:c6:df:c7:60:16:fd:
         47:fb:6a:95:b7:5b:a8:36:64:f1:27:84:f7:29:b3:1e:14:3e:
         41:24:e4:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nluEDmggkn2PJ8BowDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ODljNWI4M2ItOTVhMy00MDAxLTkxNmUtNjRlOTNhNzRlNDBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Uj7E2/ZuVZq63w9dyNrQ2uwaS3EJ9GDBL5/
3Hk6IP1ttuokO/eGDgNaQGfpDFNnqm2ppREmghljYl5JLaJXzOoyi9aCaaHaXVhf
lZr8khFvWxliR9ig2GLCGU6bNXF7ZdgGfYNdFIt51+Rs8E0tHP29PhpaFCxDjC6f
8ZgIHXOOWAzMcdHY2XInszKR2Jqs4hn36qaVpmt6Vmm5yORFo+1a2gUu37M3meJO
Ez1qd61yfSbXFXmgrJAlje+yOHgNaPizK5YGTtBLnffOCTrF72N9z7RN9j7XnP8V
yumwQ7BIe+XFQUM1ZkMnYfym9RFki3OTHB0j4Ri9+55ZcGD2ewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO5bCXrZrIM3tkb6mJoZE48zgQhKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZTM3ZWFjZDAtMGJkMC0z
NzljLWI2Y2ItN2I2ZjI0YWU1N2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACPTQdGnaeL3rVP62KiZZKGzFoe4gARIbTi+TwadewErBgU/8a2RU9Sd
z9UlopixrrO9wczoBwbPXWVhE9oCRpkQX7gC1et26RB2tFe16ZvsFQnyeObVulQz
DylIhjs3dxo6hJgd1QHFI9lGgo40Dz23qP0o8nDlI8mIAuabD2crQvty9RwHDdpt
be0KLO6haIPX5iLlmFPoyrGNzdVJksamU/DqFhRJve5llz/M2d6GvR/t1GUGrU6V
b8xS7PVzbnSpsFe13XIYnRaVnVJQqrRWt2sNRgNF8CW4Pe/SNMYZN+YNpsbfx2AW
/Uf7apW3W6g2ZPEnhPcpsx4UPkEk5Io=
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:37:00 2026 by rpki-client