Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3cb30814-1743-3f4c-9f2b-43e764333641.roa
File:                     3cb30814-1743-3f4c-9f2b-43e764333641.roa (raw, json)
Hash identifier:          utpGehYM6gpGADE2eQlDhsSq/2fKyysAUgyjR+CV3mE=
Subject key identifier:   7D:44:E2:5B:AE:5A:FD:5D:15:5C:67:46:BC:72:70:9B:E5:28:9F:86
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584D59EA69F64451BE4E53723700
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3cb30814-1743-3f4c-9f2b-43e764333641.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     202
IP address blocks:        20.134.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:69:f6:44:51:be:4e:53:72:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=43ef9709-5d9d-4b6d-921a-8d32da291be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ec:f3:0f:de:4a:41:ab:cd:a4:b3:b4:8c:e1:
                    11:4c:57:f0:65:9d:0e:8d:e4:67:31:61:2c:50:68:
                    63:71:14:36:7b:34:d8:81:1d:71:5d:1e:20:51:f8:
                    61:fd:8e:c8:49:1b:d9:64:59:b7:62:11:a3:37:60:
                    9a:c3:80:1c:51:f3:6f:0a:7b:21:08:20:05:f1:73:
                    f5:01:e1:7a:e5:07:c2:63:31:41:a9:12:c3:49:77:
                    85:27:a3:79:91:2e:db:49:78:71:c4:96:2d:93:59:
                    d5:e1:29:3c:16:48:cd:c3:1b:47:13:cd:d7:d8:49:
                    63:b0:82:b0:78:23:6c:8d:a1:1f:40:d0:a7:a5:6a:
                    19:30:f9:61:b4:cc:d5:f2:b5:84:bf:3e:0d:70:8a:
                    a3:60:5f:ff:ca:40:44:24:66:51:c9:1e:b2:5f:91:
                    97:a6:28:8b:01:b0:9f:50:75:d0:b8:31:af:47:ec:
                    2d:1a:f6:1b:63:d1:4b:76:9a:2d:17:23:06:df:8b:
                    c0:ca:cd:dd:34:ff:23:6e:18:2d:09:72:7b:fe:68:
                    3e:90:73:18:21:a4:f4:d6:e6:4f:2c:88:c7:d9:98:
                    e7:9e:cb:df:6d:ba:e4:bc:6f:45:17:1d:c7:1b:91:
                    f2:33:b1:08:58:67:8b:54:4b:32:88:5c:e1:b7:15:
                    30:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:44:E2:5B:AE:5A:FD:5D:15:5C:67:46:BC:72:70:9B:E5:28:9F:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/3cb30814-1743-3f4c-9f2b-43e764333641.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.134.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:ba:40:bd:39:d3:ac:01:ea:1f:56:e3:05:ca:a5:11:9b:ab:
         04:3d:85:a8:67:c9:f3:dd:61:3e:53:80:24:06:de:4e:b5:3c:
         eb:d0:24:ce:07:ae:14:e6:e4:fb:63:6a:68:dd:d9:26:e9:7c:
         6b:cb:a9:65:11:f0:43:f8:41:c9:23:cf:de:1b:3a:4e:4b:39:
         9c:4d:a5:fb:b6:a1:09:a8:11:e8:c9:b9:b0:96:8d:3c:df:9a:
         54:32:b0:31:a7:c4:00:a4:82:ac:c8:69:ad:cc:f9:f6:77:5a:
         77:d0:d5:48:98:ae:90:6d:4c:c5:dd:67:e7:a6:dd:3f:77:85:
         43:f8:5e:88:f7:bc:9c:31:ea:82:16:ec:d9:64:d9:9c:78:f3:
         1d:05:ca:83:f0:49:48:d5:79:2c:d3:69:b9:3b:42:3d:04:f0:
         56:90:01:30:4d:a5:b3:8b:82:df:85:b1:1a:ce:d7:1a:96:45:
         02:77:e9:79:a6:7e:da:31:99:b2:ef:fe:fe:03:1a:eb:3d:26:
         d9:09:48:43:60:a2:c6:2b:c3:51:00:91:d5:7f:ae:a6:76:8c:
         d9:8a:41:6e:66:6b:4a:2c:2e:7f:a5:4e:f4:4e:cb:21:72:30:
         5b:a8:44:50:e3:10:cc:66:ca:cf:37:ab:ba:24:5e:bd:ea:53:
         28:d6:67:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:08:40 2026 by rpki-client