Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c48cc730-9a8b-3376-ab57-9f4aafc7927b.roa
File:                     c48cc730-9a8b-3376-ab57-9f4aafc7927b.roa (raw, json)
Hash identifier:          sU3AB4bFnXtL6PU/szGrPMoE4uxZpjlEgniwbHtSXMs=
Subject key identifier:   DF:D9:B7:A0:C9:FC:A6:0C:9B:FE:AF:D3:24:3A:DA:AE:BD:CE:3D:A1
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584E18AEE8721FDADA72A321A080
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c48cc730-9a8b-3376-ab57-9f4aafc7927b.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     202
IP address blocks:        20.138.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:e8:72:1f:da:da:72:a3:21:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=627386da-0dfa-4f1c-821a-9cff620b6324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cf:57:32:ab:7d:e0:8c:d9:4f:fd:8f:c4:a3:
                    ff:a7:38:91:4a:32:de:40:c5:fe:09:92:33:73:9d:
                    f8:81:a3:68:fc:ff:28:5b:10:3e:f7:cb:92:15:e8:
                    d4:40:11:4c:4f:fd:19:ec:c7:61:e2:bf:e7:1d:67:
                    4e:4e:b4:64:57:d5:57:df:b4:d4:00:2a:6d:02:96:
                    cb:9e:20:d6:a2:cf:b4:12:64:6e:58:ab:3e:e0:99:
                    d2:62:f8:93:bd:bd:5d:c8:bb:44:7f:2b:03:55:76:
                    5e:67:4d:7e:bd:40:c2:30:a5:ba:ba:e8:8c:6e:8d:
                    10:69:e3:73:74:b0:ca:90:16:94:40:02:26:c5:76:
                    a3:d1:93:b8:18:ac:bf:f9:39:16:94:35:7b:9a:cb:
                    83:c8:ab:0e:b4:0b:be:c3:5a:41:de:ea:ca:6a:4b:
                    e1:e4:5f:83:c2:f6:94:59:21:e5:9e:10:b4:59:34:
                    f9:f3:a3:e3:4a:84:af:65:a4:9b:42:34:83:1d:27:
                    2f:95:38:99:bd:b3:53:f2:d4:a3:e8:a2:39:6a:ff:
                    a0:a1:37:22:4a:07:a6:59:54:7a:26:fc:db:4b:d9:
                    c5:12:74:39:fa:9c:ca:f9:ed:33:c1:ad:40:ca:8f:
                    78:d0:8c:04:43:95:71:d7:e2:6a:72:5a:53:16:4a:
                    e6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D9:B7:A0:C9:FC:A6:0C:9B:FE:AF:D3:24:3A:DA:AE:BD:CE:3D:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/c48cc730-9a8b-3376-ab57-9f4aafc7927b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.138.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:ac:29:3d:93:4f:8b:42:f6:0f:08:45:16:46:79:a2:10:45:
         2c:ec:b9:ea:e2:4e:7a:93:6d:f0:2f:2a:ee:a8:fe:12:49:c2:
         5d:2d:68:4e:ba:97:bf:59:c8:44:2d:3a:9f:df:28:2d:f3:c5:
         ed:1a:e1:c4:00:5b:0e:b1:38:7e:dc:17:bf:99:12:a5:ca:5e:
         fe:ef:82:ef:4c:af:d1:56:09:99:a6:04:a9:2e:cc:aa:b1:ae:
         18:63:b0:98:06:27:8b:54:13:5a:87:8e:3f:4a:e4:9d:d5:fe:
         c1:2f:1f:da:9f:72:9f:c7:73:59:83:34:9b:ab:41:66:e1:26:
         db:c3:74:86:36:3d:eb:fd:e9:c1:c5:69:93:8d:49:ff:6c:19:
         82:e5:9c:67:d4:93:0a:a1:7a:b0:2b:61:ba:db:f3:a1:b5:1a:
         4f:b3:2f:98:08:14:27:f2:67:01:68:bf:ae:9b:9f:a4:2b:51:
         a9:d0:58:37:5e:69:0e:6e:a5:d2:98:e9:7c:12:33:7f:1a:d8:
         a6:73:93:c5:ee:0b:99:45:ea:2a:30:45:cb:78:3b:dd:d0:50:
         d2:a0:9c:2b:cc:f8:b0:6a:cc:1b:55:dd:64:2b:9a:18:f4:f6:
         9d:c0:5c:3e:19:d7:9d:78:fe:ab:1e:64:bd:11:81:42:cd:30:
         5f:8c:1f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:55:06 2026 by rpki-client