Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/95cfc3d1-8c96-370e-b0b4-54b16dd9aba2.roa
File:                     95cfc3d1-8c96-370e-b0b4-54b16dd9aba2.roa (raw, json)
Hash identifier:          0s6yitMx87FofoeOMF6vqByC/D2YdefYkJXv5jLknWU=
Subject key identifier:   EE:4F:54:7F:F9:3F:8F:3F:62:B8:3E:B3:74:A3:1A:AE:5C:40:03:6C
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584F093CF09425F048DCC8514C00
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/95cfc3d1-8c96-370e-b0b4-54b16dd9aba2.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     3356
IP address blocks:        20.148.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:f0:94:25:f0:48:dc:c8:51:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=edd4ecaa-c375-42ca-ae04-c71c46d7474e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:05:6b:30:02:e5:4b:64:f6:47:5c:7e:26:05:
                    0b:a5:66:d7:d7:b4:0c:57:69:fb:b9:0f:af:52:a8:
                    3e:f0:89:1d:1c:c9:f6:30:2a:c3:a5:0c:fc:a9:3d:
                    da:ee:41:ba:e1:92:66:f7:4d:17:3a:4e:f1:30:59:
                    09:2d:93:96:22:31:d3:c7:6b:42:6c:73:00:7d:f3:
                    43:84:9c:18:1e:52:04:36:1e:d4:3a:01:d1:7a:a1:
                    35:b7:ef:03:25:00:62:68:3d:16:a3:ac:3a:b9:03:
                    12:c9:2b:ce:b2:f5:ce:83:cf:68:1e:0f:8f:99:cd:
                    7a:f4:a0:2a:5f:f4:fc:3c:1f:d3:82:30:12:8b:56:
                    58:28:ce:6d:04:b1:46:88:e8:6a:61:57:27:1c:fe:
                    81:43:02:87:9f:8e:b6:ab:17:bf:f5:e3:9d:e3:3c:
                    69:87:d4:a2:6e:98:4f:da:1a:a6:ab:db:17:32:8d:
                    6e:05:09:1b:c6:0a:de:15:20:1a:ac:d1:90:be:58:
                    02:a2:11:15:2f:de:78:58:00:f0:ec:33:53:ee:c2:
                    32:21:b0:94:ce:98:34:d8:62:d2:de:7b:eb:0a:44:
                    c7:ba:2b:aa:6d:7f:49:43:ef:85:d3:f6:dd:e5:44:
                    29:33:5f:a5:92:eb:f4:7d:1c:30:a8:e6:6e:95:60:
                    9a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4F:54:7F:F9:3F:8F:3F:62:B8:3E:B3:74:A3:1A:AE:5C:40:03:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/95cfc3d1-8c96-370e-b0b4-54b16dd9aba2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.148.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:52:77:d9:f8:3f:1d:e2:84:b8:c8:6f:37:a5:65:20:fc:72:
         59:c1:a9:97:72:13:15:9e:17:ce:da:86:18:7d:5f:41:8c:9a:
         67:2b:08:62:b4:5d:db:d4:bc:a2:95:b4:76:4f:76:81:be:0a:
         62:d6:99:fb:09:84:b4:d8:2c:9f:78:32:99:32:71:ca:81:16:
         6c:e1:ea:fa:55:70:4a:74:7c:45:05:da:07:eb:c9:66:47:27:
         bb:fe:b7:5c:8d:f4:bc:b5:62:7c:63:f6:f2:47:2a:23:40:7a:
         35:9c:e7:5d:c8:3d:4e:c1:80:75:ab:ea:79:62:cc:ff:cb:a5:
         d1:d7:f2:51:c9:cc:a8:e8:e1:23:32:8b:0d:60:4b:c3:fc:9e:
         62:0e:49:58:aa:0a:17:c6:e9:68:69:b7:66:37:42:b6:70:bf:
         a1:00:cd:7a:36:4f:6b:1c:1b:3e:c1:29:ea:ca:71:96:93:b5:
         a3:f2:c2:fb:80:1d:07:b4:d3:2b:c3:d3:c6:d2:0d:64:e2:70:
         85:aa:fd:8f:5c:1b:d9:09:97:ee:f3:b6:64:19:96:9e:49:66:
         2b:8a:48:4e:fa:bc:d3:fa:29:17:eb:cf:a6:be:50:d4:e0:7a:
         99:7e:88:36:6b:bc:9b:fc:8f:77:ab:2a:02:15:94:7a:56:08:
         2b:5f:95:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:17:21 2026 by rpki-client