Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59205f9e-be67-31b6-8b33-8d851a623090.roa
File:                     59205f9e-be67-31b6-8b33-8d851a623090.roa (raw, json)
Hash identifier:          9BOCDE1ClwrzPwhRXllQKnPMmA6E7ruA3hdS7Y0rmzc=
Subject key identifier:   91:40:45:04:42:7F:3B:37:93:48:4C:15:17:2E:62:F3:87:A2:08:F6
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584B047C0C86C2C6D6255A912000
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59205f9e-be67-31b6-8b33-8d851a623090.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     3356
IP address blocks:        20.134.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:0c:86:c2:c6:d6:25:5a:91:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=f843158a-6667-4665-bf7f-a181791fe51c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:05:5b:02:da:82:05:f8:53:62:d5:f0:ff:17:
                    43:cd:63:d2:fe:fc:d6:a2:4c:67:6e:b3:c7:1f:f3:
                    4c:c7:86:ed:1c:cf:99:94:fd:8d:bf:63:b4:c8:4e:
                    f5:ab:5f:1e:4a:ff:14:43:f4:0f:07:c2:9c:22:2d:
                    41:88:17:dc:28:ff:58:69:75:5a:9d:ba:2d:53:f5:
                    ed:ad:11:a4:ab:93:f7:b1:67:60:a7:47:7c:d7:5f:
                    e7:3c:51:89:b9:ab:75:7b:ed:f9:0c:32:25:f6:63:
                    df:90:e7:92:ce:51:6c:a6:7c:3a:55:ce:c5:c4:d3:
                    fc:a1:3f:b5:de:17:1c:bd:e5:12:98:72:0d:52:1a:
                    50:9c:fe:00:cc:f6:c2:44:e5:e4:9b:b6:0c:e5:bc:
                    54:e7:11:62:c0:8a:54:ea:f7:4e:4f:3f:fa:dc:0a:
                    b2:f9:08:77:62:5a:d5:01:3a:e7:84:fc:9d:10:e1:
                    65:93:47:ad:a0:02:16:10:3c:f0:5b:0e:0a:bd:96:
                    9a:a6:b6:2d:aa:44:f5:6e:f1:89:1f:9a:06:59:27:
                    38:67:8f:a8:4d:18:cc:52:08:b3:45:be:fa:b3:e4:
                    09:71:f6:29:0f:35:f7:28:46:66:9d:d1:51:15:7e:
                    e7:fb:89:8e:26:e6:fd:bf:8b:2f:36:a3:3d:d3:b7:
                    3f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:40:45:04:42:7F:3B:37:93:48:4C:15:17:2E:62:F3:87:A2:08:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/59205f9e-be67-31b6-8b33-8d851a623090.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.134.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:60:98:bf:18:c1:67:4a:91:d4:0a:03:5b:fa:7b:61:42:25:
         21:1a:e5:96:1e:db:16:00:c0:d4:6c:78:7e:98:fc:86:27:da:
         1a:39:ed:5c:0e:9e:fa:28:3a:9a:eb:f6:ea:ca:1e:9c:24:c5:
         50:eb:7a:84:8b:e7:bd:51:8c:fc:5f:78:88:f2:d0:d2:d2:90:
         fb:0e:7e:d3:fc:42:1b:84:cc:9d:53:ed:d0:91:6f:39:99:0f:
         88:55:6f:3b:2b:70:c4:16:f1:3a:94:e5:eb:74:2f:b8:88:03:
         c7:01:f1:f8:54:22:28:26:37:d9:29:bd:8d:c8:e4:a3:1d:bf:
         ed:8a:1f:b4:66:47:60:c5:3b:57:3b:f3:99:26:c0:dc:3f:d5:
         ee:22:77:8d:c5:3b:61:ed:5f:e8:83:35:90:6f:4e:55:fc:4e:
         48:c6:32:9c:00:3e:1a:32:52:3b:c3:68:b7:d7:75:f9:3b:c7:
         ec:82:2a:4c:fa:67:24:df:da:dd:68:6a:23:a2:64:2f:16:22:
         6d:83:30:27:20:4d:57:e2:fe:8e:c5:57:5f:73:4e:f6:a0:82:
         a8:b5:23:c2:66:40:d7:f4:55:16:84:62:63:c4:77:d9:0b:4d:
         30:49:e1:e8:87:ed:26:19:2d:2c:7d:e4:c5:e0:30:b1:db:a6:
         68:8c:3a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 03:58:32 2025 by rpki-client