Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0cbe70e0-5696-393a-9fc7-73ad4f3a0fcc.roa
File:                     0cbe70e0-5696-393a-9fc7-73ad4f3a0fcc.roa (raw, json)
Hash identifier:          mbrejBbGPPm3QOkB7FV4UogicZK8ITFpnzniEIoR5fA=
Subject key identifier:   27:B0:1D:5B:38:1E:DA:E1:E0:52:90:CE:91:B2:09:1A:0C:5F:38:66
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584EA7884F062B1D5641A3850F40
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0cbe70e0-5696-393a-9fc7-73ad4f3a0fcc.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     202
IP address blocks:        20.137.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:4f:06:2b:1d:56:41:a3:85:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8a087a0a-a9ba-4551-9e3a-2bd72b90ae3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7a:96:f3:75:40:1f:14:84:c5:5d:e6:58:d2:
                    9a:29:35:2f:78:2b:8d:f0:39:7b:44:8e:e0:77:52:
                    84:e7:07:a5:22:2f:31:ad:28:b8:af:89:d5:31:c0:
                    d2:d0:ff:99:50:fe:d0:f0:90:88:9e:26:66:c2:a6:
                    aa:82:f3:b4:70:24:ec:34:2e:26:1b:7e:df:05:8f:
                    41:42:c9:0f:d7:ad:9b:29:0d:6a:36:52:0a:53:d1:
                    fa:7d:a9:d2:82:e6:de:06:6b:7a:60:18:12:c4:e1:
                    71:54:82:b1:1a:b3:a6:73:33:5f:24:51:4c:d1:94:
                    11:d3:24:30:2c:32:41:9a:25:37:39:19:fc:1a:60:
                    c8:56:36:17:56:59:5b:e6:0b:c3:37:05:f8:f5:2b:
                    38:b5:dc:7b:b8:c3:f7:d3:8f:52:c8:91:19:ea:49:
                    87:22:7f:5a:e4:ca:82:aa:2e:d5:17:67:83:6d:e6:
                    cb:86:08:90:6b:a5:e9:4c:31:b0:a1:2d:f9:e2:0f:
                    00:21:3a:8f:fc:23:e1:21:33:99:0e:73:98:e3:e2:
                    d4:f7:b3:56:91:c8:1b:bf:01:26:35:7f:41:d1:42:
                    23:77:9f:e4:6d:d6:71:5f:23:0e:a1:64:6c:79:83:
                    22:b2:de:77:74:20:f3:cb:b4:bc:a9:08:25:f6:e9:
                    e8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B0:1D:5B:38:1E:DA:E1:E0:52:90:CE:91:B2:09:1A:0C:5F:38:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0cbe70e0-5696-393a-9fc7-73ad4f3a0fcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.137.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:70:e0:72:a1:55:86:7a:b5:fe:e7:11:a6:4a:c4:c9:ca:6b:
         09:8c:65:06:7c:5d:29:49:67:1c:f4:8a:e0:5c:a2:8d:1a:0c:
         e6:0c:a2:b6:86:17:dd:60:98:19:0b:da:38:97:6f:a1:66:fd:
         0e:a6:35:dd:8c:a0:06:c7:6e:4f:e6:18:48:97:09:37:19:99:
         7f:42:fe:c1:39:da:12:f6:fe:9c:cb:32:89:cf:cd:22:98:db:
         f3:b2:bb:df:ee:0e:8e:91:46:e9:86:57:3c:ca:05:98:be:4a:
         54:3d:6b:a2:15:1d:82:73:3e:7e:e1:40:90:95:e2:a4:f8:58:
         2a:6e:fd:23:43:90:fe:ee:da:92:34:65:ef:d5:49:b3:65:6d:
         22:49:92:95:92:ab:67:7a:c9:1d:01:ed:60:49:a8:93:b5:56:
         f1:7a:aa:d6:9b:69:12:ec:4a:96:60:ec:f9:df:e3:a6:15:00:
         bd:05:04:1a:e0:28:38:22:ce:0b:96:c8:45:e4:df:67:6a:f8:
         aa:0e:ee:fe:f7:33:5b:57:df:6a:67:14:4c:38:14:d1:32:dd:
         03:ae:24:bc:1b:97:13:35:d4:4e:c1:87:f6:47:4f:b5:6f:e9:
         10:dd:14:2f:9a:c3:fc:9e:f2:fb:da:3b:b4:cd:39:42:36:da:
         a8:79:71:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:54:31 2026 by rpki-client