Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5d2179de-2db2-31e0-91ae-22d99860f145.roa
File:                     5d2179de-2db2-31e0-91ae-22d99860f145.roa (raw, json)
Hash identifier:          Gf0B04MqSDG/u3/i9RV2qkO65KNgm/n6AImKdsuTkqM=
Subject key identifier:   E8:5E:08:7F:CA:C5:7F:53:E0:C0:51:E6:62:5C:3A:2F:22:E7:53:B7
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584E18AEDE2A338742700A9B18E0
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5d2179de-2db2-31e0-91ae-22d99860f145.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     3360
IP address blocks:        20.133.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:de:2a:33:87:42:70:0a:9b:18:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=1a6be4ad-0a4c-47de-877a-0fd35e025e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cc:c5:5c:d0:19:f9:fe:d5:66:90:63:4e:84:
                    dc:7c:3f:f2:0f:4f:5b:f2:7b:e1:3d:58:23:b8:0f:
                    1c:3c:a8:81:d5:bb:84:1f:da:17:36:02:1f:a4:fc:
                    ed:b7:6d:c4:f6:17:f6:51:a7:83:1f:65:29:f7:9b:
                    3a:3b:e7:7d:42:d4:69:d2:96:22:2f:81:3b:d6:6b:
                    5d:f3:ba:6d:91:59:86:ca:b1:74:90:f9:f0:fa:4d:
                    e9:51:5c:4c:c4:3d:33:90:8e:8c:cc:f1:81:1e:f5:
                    1e:9b:ac:d7:14:57:3b:7d:61:3d:d7:45:3a:6e:81:
                    1f:9e:b9:ec:fe:af:a1:3c:30:69:21:83:6d:55:98:
                    d7:e7:0d:d4:ac:d6:09:c3:75:2a:07:c0:aa:66:77:
                    bb:6a:0a:13:c3:a0:a1:8a:07:10:19:b5:ae:92:0f:
                    df:bf:16:ab:dd:2f:fc:29:04:d4:98:5e:41:d6:c7:
                    fb:45:2c:5a:5d:e2:75:59:7c:20:fe:9f:e6:c4:2b:
                    ee:65:84:5e:eb:c2:67:4c:fe:07:75:58:00:b5:77:
                    49:01:aa:a7:17:d2:67:f5:4e:21:6a:e2:e0:8d:ec:
                    f3:ee:71:67:94:78:21:f8:08:cd:6e:5e:fe:1f:49:
                    b2:d4:c8:02:9a:07:d5:51:b2:c2:8f:72:8d:53:58:
                    7e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5E:08:7F:CA:C5:7F:53:E0:C0:51:E6:62:5C:3A:2F:22:E7:53:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/5d2179de-2db2-31e0-91ae-22d99860f145.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.133.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:50:77:4b:a5:fc:ae:0b:6d:88:10:5c:1b:03:b4:4f:9a:5a:
         94:ba:fa:03:67:a4:55:53:9c:d5:02:e1:ce:a3:39:7c:59:ec:
         22:7f:11:c9:c3:04:9f:fc:ba:19:cf:5c:f9:36:28:c4:eb:73:
         89:6e:75:40:0d:6e:01:18:fc:a0:64:e7:91:00:3f:d4:9f:e7:
         56:b6:91:a2:20:00:cb:ca:b2:e8:4c:24:81:53:51:a6:11:7c:
         df:92:5c:29:b0:3a:19:b9:77:7e:fc:75:0f:28:0d:88:bc:9e:
         62:28:ad:06:0a:ce:a1:25:e8:19:76:5c:d9:3f:40:b6:de:49:
         63:7c:6e:68:d5:0c:fd:e2:3f:f7:7e:38:d8:2a:34:c9:e4:01:
         5c:3f:c3:e8:c4:c0:db:99:87:8b:e6:29:46:db:64:58:90:1a:
         bf:de:f7:d4:6c:65:e1:74:8b:48:44:bd:3f:be:0a:0c:0a:48:
         69:ae:f5:3c:0f:6d:75:8d:da:d0:e2:0f:69:96:18:bf:d3:8d:
         0a:05:30:4e:f7:74:2d:e9:2d:43:39:08:b0:27:fe:1c:b7:a8:
         4d:34:f7:44:0e:21:19:0e:26:f5:e7:ea:c5:e1:94:3a:14:b2:
         f9:ce:de:49:6e:1c:0a:a0:e7:21:8d:d9:38:a4:12:77:4c:15:
         4e:f8:ad:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:42:07 2026 by rpki-client