Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/eb471c00-32d7-3573-995f-88d34ebe19a9.roa
File:                     eb471c00-32d7-3573-995f-88d34ebe19a9.roa (raw, json)
Hash identifier:          dRYBErelgYSBcwEnMBUk4YfoU+Ap7RGhJdR4TfsElFA=
Subject key identifier:   EC:F8:07:52:E0:00:01:6E:39:5B:CE:20:57:30:99:38:2F:99:06:B6
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584CF5879D9831BC5CEEFEC80400
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/eb471c00-32d7-3573-995f-88d34ebe19a9.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     203
IP address blocks:        20.137.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:9d:98:31:bc:5c:ee:fe:c8:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=8f537f86-1633-44a0-9cf3-2018b2ec124e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0d:12:c9:c3:ac:de:72:e4:1d:6b:f8:e6:cd:
                    18:11:3e:6e:79:d0:2c:74:e4:e3:f6:f8:d3:d7:39:
                    db:a0:6f:44:40:21:02:1c:44:e1:ef:12:75:79:8a:
                    3c:d7:34:38:32:df:a0:5d:89:8b:a7:d5:e0:f9:d6:
                    2f:27:09:a6:00:fd:67:fd:0e:92:af:d3:c4:0f:0b:
                    23:7e:4f:1a:bd:c3:78:1f:eb:bd:bf:ec:a8:4d:b2:
                    c7:c5:80:72:0e:60:f0:e8:08:c0:03:14:04:60:7c:
                    b9:3e:cb:92:da:3b:10:74:e2:d0:57:09:d7:f4:90:
                    fe:d7:53:67:1b:4a:d9:72:85:2c:d3:f5:3a:0d:25:
                    6b:d4:22:8e:08:51:a3:bb:97:3a:26:4e:59:db:e7:
                    8b:75:bc:dd:be:42:7f:b5:25:dd:80:8a:0a:28:7f:
                    88:c6:1d:9b:18:86:fc:34:4b:08:5f:20:bf:d8:5d:
                    ac:c5:d1:14:d4:2a:24:32:29:19:c0:fa:37:78:be:
                    94:d3:6c:62:f8:30:27:c3:00:de:a7:f3:8d:97:cd:
                    8b:aa:52:56:66:b9:33:d4:85:04:90:9e:dd:ab:87:
                    e0:d5:01:08:5f:4a:00:38:80:52:20:7f:ab:69:09:
                    a4:a6:b3:31:ad:b6:8d:71:14:43:5d:0d:4e:22:69:
                    c0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F8:07:52:E0:00:01:6E:39:5B:CE:20:57:30:99:38:2F:99:06:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/eb471c00-32d7-3573-995f-88d34ebe19a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.137.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:db:fe:12:d1:21:8a:50:74:bc:bd:4c:c6:56:75:a6:3e:a2:
         30:02:0e:e6:b3:bf:91:2d:0d:0f:14:8e:15:75:44:55:85:45:
         f1:51:b7:fe:16:ea:35:07:2c:76:2f:04:2a:e2:70:ab:f4:81:
         7a:6e:7b:46:b2:ec:a4:6f:72:1a:1e:4c:6d:39:5c:4f:96:fd:
         a9:bd:32:f2:27:68:8e:ef:c9:f9:1d:5b:eb:55:1e:f9:5f:70:
         8f:88:55:83:ea:64:88:75:3c:04:f5:34:5e:6a:8a:99:b3:49:
         10:84:c0:b9:9e:94:40:cf:a1:b2:e4:b4:24:48:bb:0a:a1:74:
         a6:d5:d0:e8:78:79:57:69:d5:55:20:b1:74:56:62:c2:2f:f2:
         e4:4b:07:14:ec:40:c0:b7:3a:1c:81:fa:2e:e1:57:62:01:b2:
         c0:42:ad:82:a1:52:5b:2e:9e:74:42:b1:ef:01:19:1b:76:9c:
         1c:c3:c8:5c:31:41:a6:5d:90:90:3b:ed:9c:e1:88:8e:58:16:
         29:ff:5f:9b:86:d9:47:09:09:48:f3:90:2e:c4:ea:51:c2:7c:
         62:1f:42:c3:1d:16:25:13:f6:f1:4e:ca:ec:8c:f3:64:9c:ac:
         3e:c8:24:52:ae:84:cf:b9:1e:bf:e3:c8:0d:91:04:e3:e3:00:
         c4:1b:15:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:29:43 2026 by rpki-client