Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5a75b54c-71bd-3243-80d8-7d79d2465a8b.roa
File:                     5a75b54c-71bd-3243-80d8-7d79d2465a8b.roa (raw, json)
Hash identifier:          1jHQWpOeOvbA8s3RdpCOlKbtvHZivmVDcNWcYZsKpRQ=
Subject key identifier:   79:E7:B0:99:49:CE:2F:39:41:D0:50:49:7A:37:61:3D:36:9D:CC:3E
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584ED861ED1F32FDDD8AC91DF500
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5a75b54c-71bd-3243-80d8-7d79d2465a8b.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     3356
IP address blocks:        20.134.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:61:ed:1f:32:fd:dd:8a:c9:1d:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=46255b40-d3d9-46b9-a725-d4d39fe0c738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9d:27:82:95:8a:da:62:d6:70:1f:f1:6a:7b:
                    2a:e1:be:35:46:f8:73:b8:93:ff:f7:66:1e:ad:d3:
                    34:d7:3a:de:80:cb:6a:f3:12:9c:85:1b:dc:0f:73:
                    7b:87:77:b5:8b:e9:d4:f5:79:72:51:1a:7b:77:c3:
                    fa:54:47:5b:0f:30:98:c8:c9:9e:76:22:d6:65:4e:
                    0d:6d:ee:7d:a9:3e:bb:1c:86:ae:55:6e:f5:e5:c4:
                    1e:50:50:62:70:db:98:ae:af:9f:10:7f:89:13:88:
                    39:93:8a:bf:2b:6d:02:de:58:d1:80:22:72:2b:e3:
                    ed:46:e8:54:20:09:c5:04:32:c3:f7:c9:30:2f:6d:
                    58:8e:28:65:75:bc:36:07:54:50:ae:4b:6c:0b:9e:
                    c4:92:00:17:ce:c6:bc:c1:7c:bd:0a:00:85:99:c2:
                    9e:9c:f3:7f:6f:0e:89:6b:49:64:01:3d:10:01:ed:
                    38:bf:4b:d7:ed:3e:0d:70:e0:74:f6:7c:48:c1:c1:
                    b3:07:e5:b2:6e:88:7a:d8:87:17:c1:80:42:f5:30:
                    47:4d:87:d0:58:cf:45:48:d9:10:e8:8c:9a:ed:0a:
                    99:9f:9d:d5:1e:9e:5d:93:ba:9c:f5:27:50:1a:56:
                    a4:15:c5:7f:a8:62:28:68:42:4d:f3:b8:f1:5b:03:
                    32:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E7:B0:99:49:CE:2F:39:41:D0:50:49:7A:37:61:3D:36:9D:CC:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5a75b54c-71bd-3243-80d8-7d79d2465a8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.134.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:bc:7e:b8:ad:44:dd:50:3e:6a:96:2f:8f:45:92:4c:00:7a:
         37:ff:b5:7f:62:f5:3a:f6:64:b3:3b:39:3d:f1:cf:df:23:b1:
         8f:e0:e3:ce:57:c6:12:d8:7e:d0:47:6e:bf:50:23:7a:c7:cb:
         cb:32:1f:7b:74:05:76:ee:47:75:46:eb:08:4a:bf:57:8b:18:
         a5:3e:85:d7:55:a1:1a:fb:d6:5e:58:90:df:8e:f7:9e:ea:b1:
         8e:2c:c4:a4:4c:af:3f:e5:c2:3a:a5:8f:3e:1e:47:77:5d:57:
         f3:25:20:29:be:ee:4e:84:a6:08:66:1a:62:0f:37:eb:e6:00:
         95:a6:55:f0:82:93:fb:3a:ec:d3:08:fd:24:de:81:ae:a3:57:
         4b:e8:31:18:a6:9a:e8:25:51:d2:32:98:3e:26:9b:3b:9c:23:
         1b:b4:8e:56:35:df:b3:aa:a6:dc:83:ae:e5:b7:07:90:f5:fb:
         3c:8a:0f:fe:0a:ed:94:26:17:6e:4a:31:4b:10:d6:68:18:d0:
         d8:09:02:13:2f:c5:4f:79:c5:8f:81:a4:f2:61:17:76:fc:9e:
         6c:30:69:a8:f2:23:1e:fb:9e:40:67:b3:31:67:f8:b9:ef:27:
         c2:8c:27:75:05:f5:3d:e3:29:a6:b6:67:aa:45:d2:86:5b:67:
         1a:db:b0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:18:13 2026 by rpki-client