Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c3c6725f-e4e3-31ac-93a6-d02ddbf7c59c.roa
File:                     c3c6725f-e4e3-31ac-93a6-d02ddbf7c59c.roa (raw, json)
Hash identifier:          uCkSCSXGPp1mbyskRA/D8PRR6hAR24nrFaHPRxPbJn8=
Subject key identifier:   1A:FD:B9:10:0B:90:32:BF:2A:45:53:B9:38:BB:B9:CD:11:FB:69:C5
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584EA7884EE6B82BEEA7782FFC00
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c3c6725f-e4e3-31ac-93a6-d02ddbf7c59c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     3360
IP address blocks:        20.137.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:4e:e6:b8:2b:ee:a7:78:2f:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=995792e8-61f6-4f3a-8206-3efa5a121a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e3:cb:dc:67:af:06:e9:49:79:ea:c3:ed:ee:
                    d0:31:28:b0:f3:f6:56:e6:46:1b:e1:df:bb:c0:f2:
                    97:99:95:f7:d3:d2:f1:d8:32:95:d9:e5:11:51:1b:
                    6a:50:54:fe:09:d9:e8:43:92:96:63:3d:cc:a9:9f:
                    22:25:92:16:5c:45:9a:9f:a8:1e:bd:86:ce:c9:b3:
                    9f:1b:d9:c0:57:83:ba:a5:7e:06:f4:38:b7:95:b5:
                    24:1a:b7:26:d5:b0:fa:3f:3d:da:35:ef:7a:bb:6f:
                    ea:5d:5a:b6:1c:87:e0:85:d8:78:03:ee:48:4c:be:
                    5d:0c:21:88:9d:1d:1c:3c:ad:81:c6:8b:a1:3d:b2:
                    e8:02:56:1e:51:3d:6d:4a:84:d1:b1:85:ad:c6:53:
                    a2:9d:c3:7e:d6:23:a6:f6:18:ef:d5:dc:87:ec:96:
                    29:ff:3e:08:36:61:72:36:34:70:3d:8f:07:2e:4c:
                    c2:37:3d:9c:53:30:40:c9:de:1a:9e:03:fc:6f:ec:
                    21:c0:8b:42:8e:04:e5:52:26:86:48:0f:c1:52:c8:
                    d2:1b:bd:fc:8b:67:a6:a2:8e:7f:5e:8f:1a:56:41:
                    fe:26:dc:16:95:90:be:82:e6:42:fd:7f:06:4b:4e:
                    a4:a8:92:bb:ee:13:a1:47:b8:49:df:21:08:c6:c5:
                    23:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:FD:B9:10:0B:90:32:BF:2A:45:53:B9:38:BB:B9:CD:11:FB:69:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c3c6725f-e4e3-31ac-93a6-d02ddbf7c59c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.137.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:fc:ad:37:86:37:27:c9:5f:03:cc:d6:d0:3f:5d:83:55:71:
         b6:cd:97:fe:8c:02:64:15:4f:82:55:9c:c6:2f:c9:cc:09:16:
         11:f3:a0:69:03:db:f4:e0:38:1a:4a:32:54:78:9a:40:de:2f:
         56:47:7d:b5:8a:28:b8:a4:3e:01:bd:1c:b7:8e:cf:2f:fe:82:
         e1:55:21:35:06:2b:f6:e8:05:ce:eb:39:cb:23:82:22:41:0b:
         f1:d0:f4:7b:f0:59:3b:b0:5a:03:55:5c:fc:4c:3d:60:f4:67:
         67:df:86:5d:7b:31:9e:b0:9d:be:bb:81:ba:b4:7d:e2:a5:51:
         d9:5d:10:da:03:59:9b:00:f8:0e:63:78:0a:f4:8b:fa:a1:bf:
         b2:14:18:46:ee:48:15:fe:e8:a7:99:14:b1:a4:61:b3:f2:d0:
         17:e0:51:70:76:19:a9:65:33:b3:2d:fc:13:c8:28:be:47:32:
         f8:d1:bb:a7:e3:06:e9:06:b9:98:5a:95:50:70:81:7a:02:43:
         b7:9a:ee:89:01:3d:96:72:46:2b:4c:bc:ef:dc:7a:a5:91:06:
         af:da:79:cd:ac:36:6a:e1:97:74:0b:84:00:b5:90:39:41:ea:
         8b:d4:eb:33:f4:b2:8c:1d:d5:8a:cc:e4:c0:e6:fc:26:7b:58:
         59:fc:ad:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:50:22 2026 by rpki-client