Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59a83d47-6316-3fc5-9032-22b42a178341.roa
File:                     59a83d47-6316-3fc5-9032-22b42a178341.roa (raw, json)
Hash identifier:          aG8fulvqbUgzhVzE/k6+jMt08SXIVuVHFg5hRq/9ezE=
Subject key identifier:   AB:FC:FD:6B:BA:A4:C8:3C:39:2F:D1:E9:B9:AD:85:4B:2E:83:36:9C
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584D59EA6AA6F38CDE967CD569A0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59a83d47-6316-3fc5-9032-22b42a178341.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     202
IP address blocks:        20.134.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:6a:a6:f3:8c:de:96:7c:d5:69:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=6695fb88-e45c-40b2-a059-1d922f6d0a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d5:46:0b:57:20:ab:e8:4d:be:a4:9e:9e:36:
                    ff:f1:50:af:2e:18:96:37:12:22:8a:7f:28:73:d3:
                    a1:a4:40:cd:60:46:09:22:3c:64:16:9f:10:94:fb:
                    ce:f6:7f:a0:6e:7a:0b:1e:b5:79:db:6c:41:35:d2:
                    13:28:ba:4a:09:67:27:b1:d0:75:72:ea:ce:b4:9b:
                    84:72:2f:36:33:f6:a4:25:ba:9e:df:17:c6:29:77:
                    76:92:1d:68:34:d9:8b:3e:d4:aa:b9:1f:45:0e:73:
                    e2:78:19:a2:4c:79:d8:13:d5:dd:20:88:ed:7c:e7:
                    57:50:b0:0f:f4:23:b1:bc:58:dc:0c:6b:e0:75:35:
                    67:8e:b3:9d:5e:9a:51:27:9f:e6:f9:cc:98:46:2c:
                    5d:a7:76:f5:e8:e6:fd:cc:63:5f:8d:78:c0:5e:f8:
                    5e:33:f4:ac:3f:c7:c4:6b:f5:ee:9e:4d:eb:0f:0d:
                    fd:83:3e:01:be:a7:24:1d:c0:7e:98:df:62:91:4e:
                    54:e6:75:82:92:bd:a5:88:eb:b1:3b:ee:6d:ef:80:
                    68:49:4b:d3:c3:d7:13:1e:e2:a0:02:c8:89:90:0f:
                    f6:22:52:c3:fa:f1:fd:20:f3:81:1c:ae:e7:3c:80:
                    7f:76:13:b8:04:fb:46:d2:a9:24:3e:02:66:64:7f:
                    9d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:FC:FD:6B:BA:A4:C8:3C:39:2F:D1:E9:B9:AD:85:4B:2E:83:36:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59a83d47-6316-3fc5-9032-22b42a178341.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.134.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:4b:26:2a:ae:01:20:c5:16:d2:81:a4:2e:53:70:74:1d:fa:
         3b:b1:d2:27:4b:58:5a:94:b1:87:89:62:2a:3e:b7:79:28:80:
         a1:c3:eb:bc:2d:fa:6d:10:bb:0d:bb:60:14:4b:96:77:49:2f:
         f8:bb:5c:81:5f:c2:83:97:8d:8d:1f:ce:67:70:4c:6e:33:50:
         39:d0:50:6a:f3:45:00:a1:a9:77:e9:d9:16:1a:a6:e0:14:bb:
         c1:58:7d:d4:7b:25:7f:70:99:ef:55:96:9a:d3:a7:7b:00:6e:
         49:7a:ed:07:39:1d:46:97:c7:40:83:62:86:55:0b:a0:e1:31:
         7c:a2:57:1c:04:ec:a9:23:24:58:6a:1c:ee:3e:41:66:25:23:
         1a:e2:11:98:75:4f:a6:54:26:0a:b8:8b:68:40:7e:70:d1:19:
         21:a2:65:84:67:78:ac:ae:df:80:82:3d:1e:63:34:ac:15:d3:
         a2:87:b3:83:db:1c:e8:c0:7a:9a:6a:8e:6d:d5:9c:41:37:31:
         aa:a6:4f:cf:63:48:df:43:d8:b0:bb:ab:3b:15:7c:a1:95:03:
         67:ba:0a:36:2b:79:52:1b:33:21:60:5d:f4:04:1b:ac:b1:94:
         ce:a3:a3:ce:97:c7:55:d7:86:67:e0:c1:11:99:5b:e1:2a:48:
         ff:23:b1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:32:48 2026 by rpki-client