Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2de66e23-b0f9-3bef-ba00-6792eb38eacb.roa
File:                     2de66e23-b0f9-3bef-ba00-6792eb38eacb.roa (raw, json)
Hash identifier:          r97/xeB4EN7Vq04MzbxuFpsa+4zwBXjsjzSS9vytaTQ=
Subject key identifier:   AA:E1:02:34:4D:CF:D7:71:77:EC:B3:7E:29:83:B1:59:93:C1:33:2B
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584EDC920285C4E4CC0A4C8BE600
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2de66e23-b0f9-3bef-ba00-6792eb38eacb.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     3356
IP address blocks:        20.134.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:02:85:c4:e4:cc:0a:4c:8b:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=abbee747-6cd8-40bb-83fe-13cf692b23d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b7:0f:a6:52:b1:f2:35:57:fd:30:ae:88:5a:
                    63:21:44:54:7d:03:06:a3:86:6d:c6:42:c3:ae:45:
                    8b:13:61:7f:c1:dd:df:fa:60:bc:e6:5e:7a:02:76:
                    98:10:b6:0f:f6:88:b8:ad:57:ce:0c:ff:87:75:a9:
                    16:f7:b0:15:fc:35:8d:ba:21:48:93:8b:06:c6:01:
                    02:39:f9:23:2b:75:5d:f6:e4:16:4c:94:a1:99:85:
                    5b:b1:a8:17:73:56:4d:ae:ab:26:97:c6:01:f5:54:
                    9e:b2:d0:66:c9:a4:36:c1:c8:39:e3:30:87:48:d3:
                    14:01:b3:55:d3:25:60:df:95:88:10:a2:06:c8:a4:
                    eb:e1:ec:7f:57:88:95:6d:01:13:58:f2:d1:1b:54:
                    08:95:7c:0a:ee:5d:82:9f:bc:ba:73:d4:ff:09:f5:
                    da:48:9e:ae:4e:48:ba:1c:f2:04:5d:60:d6:5c:5b:
                    69:e6:64:08:e9:6b:31:3f:12:9d:e6:e5:08:bb:19:
                    28:fa:63:c9:77:1e:a3:75:c5:a3:27:86:78:93:6f:
                    fd:57:d0:4a:92:3b:ab:05:e0:ac:e5:fc:5c:21:b4:
                    64:f3:90:a8:c6:eb:b3:05:b1:cf:4a:e5:57:1f:10:
                    cc:7e:58:a2:9c:01:90:c8:5d:4c:e7:cf:54:f5:6e:
                    25:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E1:02:34:4D:CF:D7:71:77:EC:B3:7E:29:83:B1:59:93:C1:33:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/2de66e23-b0f9-3bef-ba00-6792eb38eacb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.134.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:73:3a:ea:6b:ee:e4:bc:66:ec:00:71:69:da:81:dc:80:e9:
         44:7e:fe:a0:94:b2:26:81:21:eb:5b:ac:54:c7:c0:ca:cd:ce:
         01:a8:91:d8:b6:58:65:f4:25:01:61:3d:66:4b:04:00:21:8f:
         fb:2b:0f:9e:32:50:ee:c7:84:25:42:d4:20:c7:ab:11:4e:98:
         a0:dc:a8:9c:da:6e:ff:3a:29:c3:ab:c6:f2:fa:c9:c5:a4:e5:
         55:c4:86:57:6c:6b:d8:a6:ca:c1:ae:d8:b4:23:cb:f3:26:c9:
         87:ab:ef:8b:c7:c2:50:00:6a:a5:d7:c4:28:bc:1b:21:9c:f3:
         89:0e:b6:d2:b3:a1:6f:5b:04:ad:58:42:a6:66:aa:4e:d5:a7:
         1a:47:6b:04:2b:f0:03:12:47:62:c6:b0:82:b2:21:f9:09:0d:
         35:1d:67:96:ca:eb:b6:d1:d8:4d:b6:ea:48:41:7c:5f:88:d1:
         f0:63:2a:01:c7:48:87:8f:8b:00:e8:6b:e1:34:47:54:f4:a9:
         58:ef:4a:2f:b1:ee:f8:1e:14:22:44:df:1c:36:17:4d:4e:6e:
         80:9a:1e:1a:4f:16:2a:2d:a1:3f:4e:94:7e:98:50:d8:35:6e:
         4d:08:03:bb:84:85:6f:28:9b:8c:6e:43:c9:ba:19:b3:02:67:
         d4:ff:29:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ckgKFxOTMCkyL5gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2
NzI4MB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk
YWJiZWU3NDctNmNkOC00MGJiLTgzZmUtMTNjZjY5MmIyM2QwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibcPplKx8jVX/TCuiFpjIURUfQMGo4ZtxkLD
rkWLE2F/wd3f+mC85l56AnaYELYP9oi4rVfODP+HdakW97AV/DWNuiFIk4sGxgEC
OfkjK3Vd9uQWTJShmYVbsagXc1ZNrqsml8YB9VSestBmyaQ2wcg54zCHSNMUAbNV
0yVg35WIEKIGyKTr4ex/V4iVbQETWPLRG1QIlXwK7l2Cn7y6c9T/CfXaSJ6uTki6
HPIEXWDWXFtp5mQI6WsxPxKd5uUIuxko+mPJdx6jdcWjJ4Z4k2/9V9BKkjurBeCs
5fxcIbRk85CoxuuzBbHPSuVXHxDMfliinAGQyF1M589U9W4lVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKrhAjRNz9dxd+yzfimDsVmTwTMrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj
MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvMmRlNjZlMjMtYjBmOS0z
YmVmLWJhMDAtNjc5MmViMzhlYWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2
MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy
NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy
OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFIYHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIpzOupr7uS8ZuwAcWnagdyA6UR+/qCUsiaBIetbrFTHwMrNzgGokdi2
WGX0JQFhPWZLBAAhj/srD54yUO7HhCVC1CDHqxFOmKDcqJzabv86KcOrxvL6ycWk
5VXEhldsa9imysGu2LQjy/MmyYer74vHwlAAaqXXxCi8GyGc84kOttKzoW9bBK1Y
QqZmqk7VpxpHawQr8AMSR2LGsIKyIfkJDTUdZ5bK67bR2E226khBfF+I0fBjKgHH
SIePiwDoa+E0R1T0qVjvSi+x7vgeFCJE3xw2F01OboCaHhpPFiotoT9OlH6YUNg1
bk0IA7uEhW8om4xuQ8m6GbMCZ9T/KS4=
-----END CERTIFICATE-----
Generated at Sun Sep 20 15:17:18 2026 by rpki-client